$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: zTkUQV5YMgBji8MorUDo1czQ94Eav3IbrpSZmQmvwvI= Subject key identifier: FB:85:AE:40:2C:22:12:AA:64:B4:D9:D7:34:E4:65:FE:A1:99:9B:35 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019E910131FACF045BD5B7C009736DFCD808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 10C4 Signing time: Thu 04 Jun 2026 05:00:35 +0000 Manifest this update: Thu 04 Jun 2026 05:00:35 +0000 Manifest next update: Fri 05 Jun 2026 05:00:35 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: zYmmYouxizLaXDyn8X7VJAIYEMgp3UsJY49I5bK2hYU=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:91:01:31:fa:cf:04:5b:d5:b7:c0:09:73:6d:fc:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jun 4 05:00:35 2026 GMT Not After : Jun 5 05:00:35 2026 GMT Subject: CN=fb85ae402c2212aa64b4d9d734e465fea1999b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:59:52:8e:4a:b4:67:26:26:df:23:d9:77: d7:ed:80:e0:f3:d5:75:dc:0a:8d:6f:dc:e3:f6:80: 45:57:8d:30:80:d2:45:94:1c:12:00:61:77:79:ff: 16:63:f9:b7:91:9c:14:29:17:88:03:58:8c:fc:09: bf:d3:c8:5b:2f:05:d3:01:1b:51:0a:9d:ad:5a:59: 31:04:c1:ae:19:5f:95:3c:55:8e:d0:af:67:42:75: e2:cb:03:08:23:c6:a5:b9:db:f3:4f:a4:59:6a:3d: 40:b4:fa:db:19:0e:c9:3d:be:93:39:fc:44:1e:0a: 50:a2:55:07:47:ed:83:64:f5:49:3f:5a:98:49:95: 9d:a6:af:f8:00:81:75:09:f7:f9:06:d3:44:12:db: 5f:c3:34:f6:d5:a8:81:b9:b0:a6:ed:5b:26:73:bc: 6c:ed:f1:0f:e7:f5:ab:7d:ff:c1:c3:ae:ae:08:0c: 31:0b:f2:d2:63:21:d3:ef:cd:38:f8:a3:a3:c0:1d: ed:9c:34:32:81:18:a1:fc:dd:a9:27:9b:a3:e9:dd: 11:db:dd:5a:50:1e:a7:c4:f0:72:44:f6:52:17:35: b0:66:3e:d9:0e:0f:e4:94:2c:01:59:cf:b0:0c:b5: 56:59:07:ea:33:98:79:26:8d:c0:bf:a9:2c:bc:94: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:AE:40:2C:22:12:AA:64:B4:D9:D7:34:E4:65:FE:A1:99:9B:35 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:1b:a3:21:b3:9b:f9:54:b4:ee:77:60:89:9a:bf:f0:74:2a: ad:6a:48:f2:e4:4c:9b:56:dc:4f:a0:f6:e7:ba:30:a6:4f:4d: 87:8e:39:68:ff:eb:45:0d:96:ab:5a:5d:6a:bb:49:21:50:dc: a6:5a:85:ed:6a:d2:33:3f:79:0f:67:70:ec:96:16:00:8c:f9: a7:17:5d:12:46:cd:d0:4d:8f:c1:32:dd:7f:cc:bc:52:a6:76: d9:da:d1:c7:a7:b2:58:a3:8c:ea:1c:c7:40:98:de:3a:ab:4b: e1:12:4d:53:89:5c:65:74:e5:4c:01:c8:38:83:1f:8c:78:5d: 74:d6:b3:bb:21:5a:cf:50:47:05:31:0d:2a:8b:ee:8c:7e:12: af:3c:c1:0c:55:2e:a3:07:c1:7c:1b:b7:d8:41:97:fd:33:86: f2:ef:fb:8d:a2:8a:a1:e7:cb:22:f0:bc:f3:a5:a6:e5:a2:9d: 5e:38:6b:a7:04:40:f4:1b:b9:13:1b:93:cf:29:69:5c:72:2d: 8f:bc:4c:e0:ce:45:2a:c6:73:34:38:82:eb:f8:1b:df:5f:10: 2b:dc:b8:2f:c7:18:74:8c:6e:bf:e1:fd:60:33:4d:b3:e1:e0: bb:a6:2a:4f:16:ad:7b:99:89:c4:4b:bd:7c:f6:7c:9e:90:58: 42:91:f7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6RATH6zwRb1bfACXNt/NgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwNjA0MDUwMDM1WhcNMjYwNjA1MDUwMDM1WjAzMTEwLwYDVQQD EyhmYjg1YWU0MDJjMjIxMmFhNjRiNGQ5ZDczNGU0NjVmZWExOTk5YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LdZUo5KtGcmJt8j2XfX7YDg89V1 3AqNb9zj9oBFV40wgNJFlBwSAGF3ef8WY/m3kZwUKReIA1iM/Am/08hbLwXTARtR Cp2tWlkxBMGuGV+VPFWO0K9nQnXiywMII8aludvzT6RZaj1AtPrbGQ7JPb6TOfxE HgpQolUHR+2DZPVJP1qYSZWdpq/4AIF1Cff5BtNEEttfwzT21aiBubCm7Vsmc7xs 7fEP5/Wrff/Bw66uCAwxC/LSYyHT7804+KOjwB3tnDQygRih/N2pJ5uj6d0R291a UB6nxPByRPZSFzWwZj7ZDg/klCwBWc+wDLVWWQfqM5h5Jo3Av6ksvJS5JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuFrkAsIhKqZLTZ1zTkZf6hmZs1MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0xujIbOb +VS07ndgiZq/8HQqrWpI8uRMm1bcT6D257owpk9Nh445aP/rRQ2Wq1pdartJIVDc plqF7WrSMz95D2dw7JYWAIz5pxddEkbN0E2PwTLdf8y8UqZ22drRx6eyWKOM6hzH QJjeOqtL4RJNU4lcZXTlTAHIOIMfjHhddNazuyFaz1BHBTENKovujH4SrzzBDFUu owfBfBu32EGX/TOG8u/7jaKKoefLIvC886Wm5aKdXjhrpwRA9Bu5ExuTzylpXHIt j7xM4M5FKsZzNDiC6/gb318QK9y4L8cYdIxuv+H9YDNNs+Hgu6YqTxate5mJxEu9 fPZ8npBYQpH3gg== -----END CERTIFICATE-----Generated at Thu Jun 4 08:00:12 2026 by rpki-client