$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: c1X8vxrLl5GjJRoIkksYDiblK/7R20MtrqxkKLPiSm8= Subject key identifier: E6:F7:95:58:9E:DD:34:97:5B:19:A5:2B:EC:C4:44:45:64:AE:A3:73 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019D0A42FC266263A381EDD394FFF7618A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 06F3 Signing time: Fri 20 Mar 2026 08:00:55 +0000 Manifest this update: Fri 20 Mar 2026 08:00:55 +0000 Manifest next update: Sat 21 Mar 2026 08:00:55 +0000 Files and hashes: 1: 05dJnjX2XorGTHQfrKvjhWfsRV4.roa (hash: KiOoN3ONMmepEer9bJk46C8CXe0dkRBysfrL6UFiDg4=) 2: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (hash: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A=) 3: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=) 4: J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa (hash: JFKzgNziUP2fsulFj18JSMHykZ0juIoG3V1HkaMBe5c=) 5: MjYgj5PkJtwB52FzuT0YsILbMY0.roa (hash: Indk9YkEk2hK3dLWnIDlZYz40E8hqE2V87I+wxoCcUk=) 6: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: J54LrmwfeT148+9CzDLB1bQlHB+ZPMpW4EKWXDAmDM0=) 7: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=) 8: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (hash: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=) 9: pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa (hash: j5/WDKSKaukoZPKqhJSK8kewWRgRB7Z/9X/2kscz69Q=) 10: pOrqbHZi1VTPzd3E16dHigG9X_M.roa (hash: C1s5ru2cOKTgc4bOCi0g0DrVt47GvCI/PVKTkhz3xeo=) 11: uSGmmmaLtoe3eUHigIrN47aVHko.roa (hash: tjzYIHWpoG3yiW/4rVWqjKVzthPOwUg7TejbjmApHRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0a:42:fc:26:62:63:a3:81:ed:d3:94:ff:f7:61:8a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Mar 20 08:00:55 2026 GMT Not After : Mar 21 08:00:55 2026 GMT Subject: CN=e6f795589edd34975b19a52becc4444564aea373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:f7:d1:7e:bf:b8:a9:6f:7a:d5:94:7b:bc: 31:56:82:75:02:dc:2f:e5:9b:fc:15:20:c7:51:e1: 1e:b5:6c:df:14:00:5f:3c:93:b9:61:ec:47:fb:c1: 10:fd:4b:21:26:86:29:13:cd:aa:20:43:7f:e1:3f: ec:03:5d:cc:e6:34:ad:6b:3a:08:65:1f:83:a9:1f: 5e:bc:f7:25:02:b3:d5:ad:cf:3e:a4:3b:89:19:73: 7d:ae:9d:72:14:5c:34:09:2f:2d:6b:ed:f6:67:f7: 24:95:1f:b3:9d:44:69:e4:69:2e:78:d5:bf:6b:48: 89:77:ea:3b:ff:4a:3c:20:95:62:46:f2:de:8a:d2: 5c:f1:99:a7:94:02:d0:58:96:a8:9f:fe:83:3b:fb: eb:3f:6f:35:c9:69:d9:6a:ce:23:12:eb:c3:30:69: 0e:f4:44:da:05:02:ca:8f:5b:72:d0:e8:16:8f:f5: 99:47:14:f8:67:71:78:0b:cc:70:1d:e5:fb:9f:0d: 96:90:ae:5e:d4:5a:e3:5f:d1:79:4b:84:b3:fc:a8: cd:9b:3a:58:7f:62:77:10:da:a8:5c:d3:cd:d4:ec: d3:2f:c3:00:7a:57:98:e1:af:47:b8:f6:ba:65:1c: dc:2f:2e:0c:2d:59:99:e7:85:6b:f8:93:7f:80:9a: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F7:95:58:9E:DD:34:97:5B:19:A5:2B:EC:C4:44:45:64:AE:A3:73 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8a:c1:c6:0c:01:f9:c9:02:1d:14:b9:af:50:e2:3f:3c:67: ba:a6:02:83:fc:44:32:21:17:0a:ef:76:b4:5b:0a:40:a7:cd: 4e:bd:e9:1b:c1:85:0f:09:83:61:e4:c5:fc:9f:87:a7:9c:ec: d4:3c:5b:d3:73:43:a1:1e:e4:fd:12:8c:f9:1c:0d:b3:7e:15: 61:4c:25:96:73:7f:0f:e9:37:76:e1:a6:f6:f5:07:5d:33:20: 37:78:64:60:1d:b6:ba:6f:fc:a8:50:3c:83:5a:e4:61:8c:45: 26:17:af:fe:6c:82:1b:00:c4:90:fa:ea:91:ca:11:4a:6a:28: ab:aa:91:76:a9:b4:8a:bc:d7:a5:fa:5b:ec:6d:e5:b5:25:27: 75:d9:41:78:e8:fe:8d:ec:ef:02:36:40:14:29:83:b3:42:b7: 1b:28:d1:15:ae:a9:39:da:70:60:a6:61:24:cb:2b:68:71:a5: 81:b7:e9:2a:de:01:87:85:72:b6:af:b9:73:18:89:68:51:50: 89:0b:40:10:62:a9:5c:f5:e3:62:28:bf:80:cc:fa:be:33:eb: 10:ae:55:61:3f:8b:8d:6c:43:05:21:32:57:98:40:f9:a7:2a: 40:cd:6f:c8:9a:aa:50:32:62:49:21:db:70:eb:64:c1:7c:f9: 07:06:92:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0KQvwmYmOjge3TlP/3YYogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMzIwMDgwMDU1WhcNMjYwMzIxMDgwMDU1WjAzMTEwLwYDVQQD EyhlNmY3OTU1ODllZGQzNDk3NWIxOWE1MmJlY2M0NDQ0NTY0YWVhMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyr30X6/uKlvetWUe7wxVoJ1Atwv 5Zv8FSDHUeEetWzfFABfPJO5YexH+8EQ/UshJoYpE82qIEN/4T/sA13M5jStazoI ZR+DqR9evPclArPVrc8+pDuJGXN9rp1yFFw0CS8ta+32Z/cklR+znURp5GkueNW/ a0iJd+o7/0o8IJViRvLeitJc8ZmnlALQWJaon/6DO/vrP281yWnZas4jEuvDMGkO 9ETaBQLKj1ty0OgWj/WZRxT4Z3F4C8xwHeX7nw2WkK5e1FrjX9F5S4Sz/KjNmzpY f2J3ENqoXNPN1OzTL8MAeleY4a9HuPa6ZRzcLy4MLVmZ54Vr+JN/gJpn3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb3lVie3TSXWxmlK+zEREVkrqNzMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4rBxgwB +ckCHRS5r1DiPzxnuqYCg/xEMiEXCu92tFsKQKfNTr3pG8GFDwmDYeTF/J+Hp5zs 1Dxb03NDoR7k/RKM+RwNs34VYUwllnN/D+k3duGm9vUHXTMgN3hkYB22um/8qFA8 g1rkYYxFJhev/myCGwDEkPrqkcoRSmooq6qRdqm0irzXpfpb7G3ltSUnddlBeOj+ jezvAjZAFCmDs0K3GyjRFa6pOdpwYKZhJMsraHGlgbfpKt4Bh4Vytq+5cxiJaFFQ iQtAEGKpXPXjYii/gMz6vjPrEK5VYT+LjWxDBSEyV5hA+acqQM1vyJqqUDJiSSHb cOtkwXz5BwaSgQ== -----END CERTIFICATE-----Generated at Fri Mar 20 10:52:55 2026 by rpki-client