$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: PSYjtvBHv1IBAFXwR4xwXLrr6mjd9UrHl9d/ca0C2eg= Subject key identifier: 20:8F:EB:D6:7F:9D:C1:F0:7E:3D:BE:CB:BF:75:FF:59:72:80:87:49 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 01A0D64B84730C765894775F1D975FE9E6E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 0611 Signing time: Fri 25 Sep 2026 02:01:08 +0000 Manifest this update: Fri 25 Sep 2026 02:01:08 +0000 Manifest next update: Sat 26 Sep 2026 02:01:08 +0000 Files and hashes: 1: 1WjvRzOKhnD2a533QX-zWGhy6mU.roa (hash: H5qbHbDAL7jdx9T9KEl6Xakz8nWIjJ0cE1oQa7xKVLA=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (hash: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=) 4: 4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa (hash: N/6K00b1BuFhTw/CFjj1QlwHlKUxym0tqK2UkGVKAtg=) 5: HTNYR2yr94a8EGiK6hAbvtY6o6k.roa (hash: KMWU4G6lDxx80Y3CEw+h1nuvz/CTjsjL+YK1q+mIGr0=) 6: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=) 7: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 8: Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa (hash: LJOqk2hOPW4zF0QKMT6vQWzbYu9x4wpSjNeypKNolNc=) 9: Nb9JZyAefPbjpxi2cVC2-yfzww8.roa (hash: jl0bmDnzSH6frV+fkRxoTDwv3W5rPCZjAk979Fat9xw=) 10: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 11: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=) 12: SAdG_ltq21So6we7PAnL5y8GnAE.roa (hash: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=) 13: TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa (hash: LvtCwiSgCnn6r8P4XA2+zpyeRQdDCd4zCmE86m3gSlM=) 14: XlpVEpCaKbvVp_iIY2abwrGuU7A.roa (hash: PuO/riDrTsvlx5rAd1GX11Jvzo3pxxNGOivQ4nq5cYA=) 15: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 16: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 17: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 18: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (hash: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=) 19: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=) 20: hH36JJO_rAsnohFls8GFE7NlzVk.roa (hash: jYlrJWAsZ9W20ZvqcFDoHNdl1/TJ/d5Ssc/5Jh190NE=) 21: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 22: mb_8DQNRhnYeblZoIpzg5HhO82I.roa (hash: CV9HGV1yyURPXluHri4wm+4FyNp6vBA+4AFnDvt7gTU=) 23: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=) 24: pViHmwqQeVqQnj5hkym3ThYCYhU.roa (hash: rbWNEzeG5z5UiJBRWTWbbSTYvlpCEEASp5X1FRCLxnc=) 25: qlVHtidyMtTQ064ypejRJRTrhIs.roa (hash: 4mWiwniRAL4tXa87dTnfBRs6/ACyraRAiFOgqpNYILY=) 26: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 27: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=) 28: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (hash: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=) 29: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=) 30: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=) 31: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: vtgiwVSIj4OJFec7E1sgFMfEeWZsj+nVx668LrEXhc4=) 32: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:4b:84:73:0c:76:58:94:77:5f:1d:97:5f:e9:e6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Sep 25 02:01:08 2026 GMT Not After : Sep 26 02:01:08 2026 GMT Subject: CN=208febd67f9dc1f07e3dbecbbf75ff5972808749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:fc:8e:9d:e4:ad:28:4e:bc:93:2a:6e:fa: b1:9d:a0:19:7a:e9:64:37:1d:7b:77:8f:29:e4:60: 28:42:2b:0e:0e:b7:71:e1:f6:72:c1:86:0b:8e:74: 59:92:50:d7:0a:f9:9c:65:7d:f7:9e:7b:2b:cb:eb: 8e:cc:f5:04:d3:cb:7a:24:19:e7:0e:14:cb:d4:d8: 67:ff:2f:ac:36:c1:ac:ce:0a:a2:ef:eb:b7:06:1d: 83:e6:cd:4b:9a:89:fc:d6:0d:02:79:74:1a:d8:27: 04:99:3f:8f:e1:23:42:c3:a9:79:d5:ac:e5:28:d2: a2:fe:f6:9d:97:99:75:02:2d:3a:f8:8b:93:7f:0d: 57:f2:d3:60:09:26:cc:3a:f7:e4:b6:de:6d:7b:54: 22:ee:2f:a8:df:44:e7:71:c8:e8:9b:bb:e8:b7:70: 88:e7:46:7d:48:c2:e1:6a:c3:20:56:aa:34:40:7f: 1d:a4:9b:8b:d2:09:52:02:4e:a6:58:81:4c:41:ac: 31:24:f8:cd:61:a8:5a:6c:c4:8b:96:03:e0:44:d7: e0:77:2b:42:7a:eb:34:09:3d:58:97:21:38:35:b8: a6:04:1b:40:4c:40:42:5d:12:c0:8f:17:e7:cd:85: 75:db:55:cb:c2:f6:2f:e9:ab:7d:09:f3:1c:3c:e0: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8F:EB:D6:7F:9D:C1:F0:7E:3D:BE:CB:BF:75:FF:59:72:80:87:49 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:58:71:3e:ff:7c:ad:13:4f:10:10:20:76:02:f1:f4:02:94: 26:88:ce:d1:dd:db:d3:76:47:98:d1:ee:5f:24:fc:d3:cd:da: 1a:21:24:f5:f1:8a:44:cb:9d:5f:21:50:08:f2:68:93:e1:31: e5:04:cb:2f:0e:22:85:37:17:07:fb:0b:09:21:34:21:6b:86: 65:0b:b1:4b:8e:3d:d9:10:2a:dc:cb:a3:fb:eb:09:86:a3:87: a6:02:8b:24:6b:91:19:ae:30:5c:89:5f:10:40:0a:c2:ef:70: ee:a1:92:6f:0c:7e:aa:a8:10:9a:ac:33:01:ec:fb:1f:51:7a: 37:14:5b:4d:e6:3f:b0:69:99:c8:2e:af:34:4c:18:87:ba:d4: 7b:64:44:3e:9f:50:ce:98:4b:62:0f:43:1c:b9:c1:e1:da:e8: b4:84:8f:93:89:b7:d3:00:84:74:5c:11:47:02:f3:2d:7a:5a: 1e:68:8e:83:19:a0:ff:b3:cc:23:9f:98:c2:a6:8d:6c:df:e9: c4:cb:bd:0b:e7:bc:da:cd:c6:76:d7:ca:d9:f2:ab:40:8b:75: 07:95:f6:05:46:4b:14:ea:88:74:97:2b:54:a1:9a:68:89:5c: e9:97:11:18:cc:32:58:bf:ab:9d:1a:f5:fc:e2:8f:84:31:f3: 4d:d5:ac:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWS4RzDHZYlHdfHZdf6ebkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwOTI1MDIwMTA4WhcNMjYwOTI2MDIwMTA4WjAzMTEwLwYDVQQD EygyMDhmZWJkNjdmOWRjMWYwN2UzZGJlY2JiZjc1ZmY1OTcyODA4NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sv8jp3krShOvJMqbvqxnaAZeulk Nx17d48p5GAoQisODrdx4fZywYYLjnRZklDXCvmcZX33nnsry+uOzPUE08t6JBnn DhTL1Nhn/y+sNsGszgqi7+u3Bh2D5s1Lmon81g0CeXQa2CcEmT+P4SNCw6l51azl KNKi/vadl5l1Ai06+IuTfw1X8tNgCSbMOvfktt5te1Qi7i+o30Tnccjom7vot3CI 50Z9SMLhasMgVqo0QH8dpJuL0glSAk6mWIFMQawxJPjNYahabMSLlgPgRNfgdytC eus0CT1YlyE4NbimBBtATEBCXRLAjxfnzYV121XLwvYv6at9CfMcPOBwPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCP69Z/ncHwfj2+y791/1lygIdJMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFhxPv98 rRNPEBAgdgLx9AKUJojO0d3b03ZHmNHuXyT8083aGiEk9fGKRMudXyFQCPJok+Ex 5QTLLw4ihTcXB/sLCSE0IWuGZQuxS4492RAq3Muj++sJhqOHpgKLJGuRGa4wXIlf EEAKwu9w7qGSbwx+qqgQmqwzAez7H1F6NxRbTeY/sGmZyC6vNEwYh7rUe2REPp9Q zphLYg9DHLnB4drotISPk4m30wCEdFwRRwLzLXpaHmiOgxmg/7PMI5+YwqaNbN/p xMu9C+e82s3GdtfK2fKrQIt1B5X2BUZLFOqIdJcrVKGaaIlc6ZcRGMwyWL+rnRr1 /OKPhDHzTdWsmw== -----END CERTIFICATE-----Generated at Fri Sep 25 08:46:20 2026 by rpki-client