$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: W21s2b8wxy3mPGGvmZxbOZ4FUCS6oRfFCtYxYmM881g= Subject key identifier: 4C:EA:D1:8B:85:CF:5E:6B:73:5C:93:3E:DB:CF:0F:12:AB:14:94:B0 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019DC0708D9E8469E33BB74AFD135501BE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 127A Signing time: Fri 24 Apr 2026 17:01:34 +0000 Manifest this update: Fri 24 Apr 2026 17:01:34 +0000 Manifest next update: Sat 25 Apr 2026 17:01:34 +0000 Files and hashes: 1: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=) 2: 3UNOuzDX5B98fh0_g5Sa3aJDiXI.roa (hash: P1HR0tfq6P44nnXN4KTYVpigPqQb3PCpv4SbdoKzcOs=) 3: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=) 4: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=) 5: 6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa (hash: O0/6hTUPh/pNhMmPBODmIvQuruNGiAl8r721VcN/XzQ=) 6: 7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa (hash: d671EV+8befUt7H9mtE7TvXmuS59ieHNf29NMiVD7IQ=) 7: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=) 8: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=) 9: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=) 10: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=) 11: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=) 12: FuFNaEGpCgejYN4pUx8MOxOGnJQ.roa (hash: qqzAUELMLxOeovFJTTw1VzAOUup03v0ml8fpZORmHDo=) 13: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=) 14: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=) 15: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=) 16: PP1tFuKDSWKU3uys7bPZgHmO32Y.roa (hash: ch0uWTewbG9M0McTdfxSKidScKLRv9p9iinr/2CaifY=) 17: RbjX86fcOMSY4QFLKDJwZ2qTveo.roa (hash: N6VxatQ/mIA8OoimGHGJtwJB+iRV96F3haafY4KxDvg=) 18: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=) 19: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=) 20: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=) 21: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=) 22: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=) 23: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=) 24: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: ffNQnRF0EL+h6CyEASO9Tb0Dhvecy1geLLAU3Xj8rlo=) 25: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=) 26: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=) 27: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=) 28: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=) 29: s5heQ19LizKGGfMDqK5Iq5EUCS8.roa (hash: 3YsMiK/Tzw6pZesf/Yk4bL7YB+iCygnfpI53A+Wi7eo=) 30: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=) 31: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=) 32: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=) 33: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=) 34: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=) 35: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c0:70:8d:9e:84:69:e3:3b:b7:4a:fd:13:55:01:be:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Apr 24 17:01:34 2026 GMT Not After : Apr 25 17:01:34 2026 GMT Subject: CN=4cead18b85cf5e6b735c933edbcf0f12ab1494b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:53:db:82:32:1d:8d:9e:2a:a6:1b:4b:15: d2:17:7f:9b:fa:18:48:c0:15:f6:87:0a:8f:f6:40: 41:9f:18:01:b9:0b:cb:d4:05:89:22:19:4a:cf:fd: b3:cf:96:7a:4b:5c:85:3e:1e:07:f2:0a:0e:45:7c: 22:74:40:9f:a1:1f:c4:a7:3f:47:73:70:05:20:8d: a8:b0:67:4c:31:63:70:06:68:79:d3:3f:08:20:1c: ac:90:20:a7:ca:e9:f9:6b:1e:68:27:c6:09:20:3a: d4:b9:cc:35:70:a3:71:ee:ce:28:9a:54:52:e1:23: d7:d9:ff:e7:62:25:b2:74:4c:51:76:7f:83:5c:1c: 5d:54:a5:89:14:e7:5b:f6:e2:e0:15:56:64:ef:7f: 8e:90:fe:ae:d2:46:ba:47:74:d1:1d:ff:fe:7b:cf: ee:d2:04:86:29:63:f8:71:13:19:45:c2:ef:19:6c: 06:6c:5d:55:b2:af:30:ba:eb:c7:03:b9:5a:b9:c8: 23:df:37:72:31:a6:42:97:7c:bb:ba:16:65:82:f8: 8f:93:88:9f:c2:37:93:2c:e5:8b:27:a1:4d:e5:b2: 9d:cc:8a:c2:b5:0c:67:50:c3:02:bf:87:17:c1:11: 64:8f:8e:76:21:82:d2:23:79:fa:32:93:7a:50:36: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:D1:8B:85:CF:5E:6B:73:5C:93:3E:DB:CF:0F:12:AB:14:94:B0 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cd:fc:8b:2c:36:cc:84:32:09:ca:b2:4b:1d:90:a2:04:57: 9f:32:d8:8c:00:63:9f:4c:f0:8f:90:9f:74:e2:df:b1:44:c5: 35:d7:2f:6e:77:2a:6d:b1:e2:84:39:b1:32:06:c3:09:87:9b: 2d:9a:3a:ac:96:55:59:0d:89:b4:1e:90:5e:49:13:6e:eb:78: 0e:a0:fe:af:c6:aa:98:93:c5:1c:4b:fc:20:c5:09:fc:7c:d5: a9:27:cd:59:fa:8a:f7:4e:f8:ed:9d:ab:c8:c9:86:5c:74:3f: 36:af:f5:33:0f:25:3a:08:22:8a:14:ba:c3:06:de:e6:ec:37: 90:49:7e:68:a3:54:0b:57:54:0e:b4:d2:59:fc:fe:8c:3f:c5: c9:e2:78:49:95:0e:f3:f5:10:03:34:88:ee:dc:11:cf:94:d9: e4:eb:e6:87:2a:1d:20:30:f1:d1:ca:3a:6c:f1:c5:eb:c1:3a: fd:19:ef:8f:c4:a9:2e:05:b4:74:8a:8e:7b:7e:76:85:a8:56: 9f:de:cf:aa:6b:ef:a6:d1:ab:87:96:69:00:93:d6:dd:bd:67: 43:07:a9:3c:4e:98:46:88:eb:30:b8:ba:d0:a5:67:e4:6c:ea: 04:95:ca:0e:e0:0e:34:af:fb:f1:a6:76:e0:33:6a:01:64:c9: e2:94:10:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3AcI2ehGnjO7dK/RNVAb4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwNDI0MTcwMTM0WhcNMjYwNDI1MTcwMTM0WjAzMTEwLwYDVQQD Eyg0Y2VhZDE4Yjg1Y2Y1ZTZiNzM1YzkzM2VkYmNmMGYxMmFiMTQ5NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YdT24IyHY2eKqYbSxXSF3+b+hhI wBX2hwqP9kBBnxgBuQvL1AWJIhlKz/2zz5Z6S1yFPh4H8goORXwidECfoR/Epz9H c3AFII2osGdMMWNwBmh50z8IIByskCCnyun5ax5oJ8YJIDrUucw1cKNx7s4omlRS 4SPX2f/nYiWydExRdn+DXBxdVKWJFOdb9uLgFVZk73+OkP6u0ka6R3TRHf/+e8/u 0gSGKWP4cRMZRcLvGWwGbF1Vsq8wuuvHA7laucgj3zdyMaZCl3y7uhZlgviPk4if wjeTLOWLJ6FN5bKdzIrCtQxnUMMCv4cXwRFkj452IYLSI3n6MpN6UDbw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzq0YuFz15rc1yTPtvPDxKrFJSwMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM38iyw2 zIQyCcqySx2QogRXnzLYjABjn0zwj5CfdOLfsUTFNdcvbncqbbHihDmxMgbDCYeb LZo6rJZVWQ2JtB6QXkkTbut4DqD+r8aqmJPFHEv8IMUJ/HzVqSfNWfqK90747Z2r yMmGXHQ/Nq/1Mw8lOggiihS6wwbe5uw3kEl+aKNUC1dUDrTSWfz+jD/FyeJ4SZUO 8/UQAzSI7twRz5TZ5OvmhyodIDDx0co6bPHF68E6/Rnvj8SpLgW0dIqOe352hahW n97PqmvvptGrh5ZpAJPW3b1nQwepPE6YRojrMLi60KVn5GzqBJXKDuAONK/78aZ2 4DNqAWTJ4pQQow== -----END CERTIFICATE-----Generated at Sat Apr 25 00:27:56 2026 by rpki-client