$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: ENrwBm3oDB9NCaHfqVl8Geyu3XBU4QQq/K+9cE4v47Q= Subject key identifier: AF:C4:43:61:7A:3B:65:67:A0:E0:8B:FB:B4:2D:E3:7C:44:85:FA:E7 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019CBF975976CBA640F7B95A107BA10A082F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0FD3 Signing time: Thu 05 Mar 2026 20:01:32 +0000 Manifest this update: Thu 05 Mar 2026 20:01:32 +0000 Manifest next update: Fri 06 Mar 2026 20:01:32 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: E94gzwRbbTTtaN7riV9syIJoUx8ZRnT9tpLaDjolpc0=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bf:97:59:76:cb:a6:40:f7:b9:5a:10:7b:a1:0a:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Mar 5 20:01:32 2026 GMT Not After : Mar 6 20:01:32 2026 GMT Subject: CN=afc443617a3b6567a0e08bfbb42de37c4485fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:8e:cb:cb:64:55:9f:24:d5:34:f6:5c:e9: 32:95:c7:26:3e:1a:b3:6c:c1:a0:75:3f:1d:f3:24: aa:71:e5:48:94:39:62:e1:e1:4e:bc:b1:15:2d:06: 1d:2e:3d:a1:39:bd:59:c5:fc:b7:6d:46:95:3d:2b: 02:5e:e7:86:5c:0d:e5:d3:a1:e5:4e:0c:ff:ec:d3: 39:0b:6f:08:39:b0:b8:22:84:88:86:59:a3:35:d4: 14:36:18:7d:30:d6:40:7b:c5:c7:6e:15:07:03:9e: 2f:6b:f6:bc:13:84:f1:97:7c:de:d0:18:c3:d6:3f: 8d:4e:2e:85:ff:1f:b2:03:87:24:be:a4:6c:28:29: f8:56:25:7b:d4:a6:2b:d6:fe:cb:63:10:91:6b:42: 21:9e:a4:93:e7:9f:c5:94:e9:a8:93:3a:50:16:ec: 66:96:61:39:3e:78:43:a8:47:ea:1d:07:31:50:eb: c1:69:dc:9e:65:38:00:9b:5e:4f:65:01:8d:96:1d: 9d:16:89:16:49:2e:51:da:69:64:7e:68:3e:f6:f6: 6c:a0:7f:a5:74:a7:8f:ef:9d:e5:27:ce:ba:ca:8f: 2f:e1:e6:2c:fe:f5:d9:da:d4:2a:17:77:c1:3f:f7: 52:5d:fd:24:c3:25:ec:e2:2d:64:2b:13:80:2e:01: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:43:61:7A:3B:65:67:A0:E0:8B:FB:B4:2D:E3:7C:44:85:FA:E7 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:14:1d:82:ef:5c:b2:d3:b9:2d:b8:92:a3:2e:f6:66:6b:ad: da:a0:6f:6d:89:ce:7d:96:5c:50:80:16:86:75:e1:79:54:4d: c6:d3:ac:a4:db:bc:82:82:2b:8f:4e:0d:dc:ae:27:4b:0d:62: c9:d6:be:f2:65:47:ff:ea:d1:b5:da:da:9b:f4:3b:3d:21:5d: 71:ad:07:d6:2a:c4:c9:94:42:86:7c:84:eb:af:51:1a:f6:ea: a1:10:06:13:fe:31:a5:c0:d5:86:af:90:7a:4c:99:24:94:82: 67:11:a6:ce:08:5c:bf:af:86:5f:6e:51:b9:99:ab:50:f9:3d: 59:fb:ca:4b:a1:b2:0e:d8:8e:9f:9c:95:de:60:c6:bb:0f:ba: fc:5a:8a:25:bd:50:27:d7:7d:23:49:5b:7f:ce:3c:14:4c:47: 92:62:51:8f:00:af:b7:3a:31:b7:a0:e3:2c:50:72:a8:09:b6: 0a:29:5c:9c:e7:f9:3e:cc:73:e2:53:60:2a:d1:fd:c1:1b:7f: 52:2d:b4:be:1e:a6:9c:8d:80:77:a8:87:5e:e5:7a:2b:c4:9e: 1a:fa:54:70:bd:f8:80:c2:7d:2c:f8:7a:02:98:09:88:c5:32: af:c6:64:14:a7:63:bf:47:f8:e4:4a:e5:92:ce:a3:af:1b:a8: 75:aa:31:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy/l1l2y6ZA97laEHuhCggvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMzA1MjAwMTMyWhcNMjYwMzA2MjAwMTMyWjAzMTEwLwYDVQQD EyhhZmM0NDM2MTdhM2I2NTY3YTBlMDhiZmJiNDJkZTM3YzQ0ODVmYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliWOy8tkVZ8k1TT2XOkylccmPhqz bMGgdT8d8ySqceVIlDli4eFOvLEVLQYdLj2hOb1Zxfy3bUaVPSsCXueGXA3l06Hl Tgz/7NM5C28IObC4IoSIhlmjNdQUNhh9MNZAe8XHbhUHA54va/a8E4Txl3ze0BjD 1j+NTi6F/x+yA4ckvqRsKCn4ViV71KYr1v7LYxCRa0IhnqST55/FlOmokzpQFuxm lmE5PnhDqEfqHQcxUOvBadyeZTgAm15PZQGNlh2dFokWSS5R2mlkfmg+9vZsoH+l dKeP753lJ866yo8v4eYs/vXZ2tQqF3fBP/dSXf0kwyXs4i1kKxOALgEzGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/EQ2F6O2VnoOCL+7Qt43xEhfrnMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRQdgu9c stO5LbiSoy72Zmut2qBvbYnOfZZcUIAWhnXheVRNxtOspNu8goIrj04N3K4nSw1i yda+8mVH/+rRtdram/Q7PSFdca0H1irEyZRChnyE669RGvbqoRAGE/4xpcDVhq+Q ekyZJJSCZxGmzghcv6+GX25RuZmrUPk9WfvKS6GyDtiOn5yV3mDGuw+6/FqKJb1Q J9d9I0lbf848FExHkmJRjwCvtzoxt6DjLFByqAm2CilcnOf5Psxz4lNgKtH9wRt/ Ui20vh6mnI2Ad6iHXuV6K8SeGvpUcL34gMJ9LPh6ApgJiMUyr8ZkFKdjv0f45Erl ks6jrxuodaoxVA== -----END CERTIFICATE-----Generated at Fri Mar 6 03:46:31 2026 by rpki-client