$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: knpfr6IRUxzp5tirG7a1cuIMhOmjORcXXTKCd80XqSE= Subject key identifier: 9F:C9:19:1D:C4:D6:82:C0:BB:59:6D:17:30:24:43:8D:8F:98:6A:54 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019D107BBD0375C589FC7BE91E9558BE6D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 03FE Signing time: Sat 21 Mar 2026 13:00:37 +0000 Manifest this update: Sat 21 Mar 2026 13:00:37 +0000 Manifest next update: Sun 22 Mar 2026 13:00:37 +0000 Files and hashes: 1: 0Oic1IcERTEb5DlaPzbn0th6N50.roa (hash: bDlBbgczPM559YYoDu7tlNakooG/ffcXd8tnjCuBkcE=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3p_wd6vJjZUyWJtHMCK8ESOv_AE.roa (hash: PxepYwEvTDnK7OgAV3Azq1CJ9rgZFmA7S3U2X7fVhUI=) 4: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=) 5: 80iCgpPXOpxj2QuyhWAAhLXssPg.roa (hash: R9I/2lsnefslGYRmmPeJiUGqHF+AhkybIV+mxlt9CnQ=) 6: CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa (hash: OFDhWVpTOVd8Jw30rGitjHqq/rmUoGlO3xXz+liY4TE=) 7: E-oIiGlZfX5hqiKQXtKucjllYUk.roa (hash: lyqop0HaLt07HWCMdbsYQ/bfLgKyF02QQKQwg4136FM=) 8: FVXQwmYUOfA-cy8XiaHN8ohstLo.roa (hash: KoIZnDM2RImr+Wy3ZdTY9y9ejiMX27DEBwUolXbHWds=) 9: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 10: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 11: YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa (hash: zD4f/kaHp2DURR07uKQMW1jZdmkie967aQyuFRXFV34=) 12: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 13: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 14: nLdceoxheszmwZ7EgAVRBKb1AxM.roa (hash: u/8vHFl3LF/ehT9IM6qIkoEkqLZNXbwVzLVkkwqf2qg=) 15: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=) 16: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 17: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: 4xpx5u8TlV3voC5REl5pGnA1nfpuswEDmhQ9OMgsQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:10:7b:bd:03:75:c5:89:fc:7b:e9:1e:95:58:be:6d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Mar 21 13:00:37 2026 GMT Not After : Mar 22 13:00:37 2026 GMT Subject: CN=9fc9191dc4d682c0bb596d173024438d8f986a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:fe:e8:9c:08:10:36:ac:2e:f0:4e:3c:78: 7d:d5:67:e9:38:14:cb:31:6f:de:5e:3a:29:f4:5e: ee:bc:80:88:51:8a:10:9c:18:77:7a:ab:a9:92:44: f7:b2:74:f9:ed:e3:96:01:e1:9d:a0:cc:e9:ea:d0: e4:96:b3:8c:4f:28:7d:63:f2:53:01:d1:59:2d:28: ed:2e:53:07:ce:fe:c7:5a:48:db:7d:ef:26:b5:c3: f4:a7:47:22:4e:78:32:86:25:9f:55:ae:23:73:2a: cf:7a:2b:47:53:00:34:6b:24:53:4a:b0:3b:47:e9: 18:b8:a0:d2:94:4f:b3:75:e5:ff:83:1b:1e:1d:e4: 2d:3c:db:e6:dc:94:e7:ef:d0:40:24:a2:b6:2c:37: d3:04:81:38:12:f5:9b:df:80:a0:89:45:95:bf:fc: a6:c6:a6:da:8b:bd:e4:c8:c8:a5:83:03:4f:ac:88: 1a:c1:b4:68:75:5a:ee:78:4f:5d:b2:f5:f9:06:c6: 70:81:68:47:e5:a4:a3:58:90:ea:30:d7:a3:16:ef: c7:ca:1b:b1:a2:1a:f5:09:d4:f3:2e:d9:61:f9:0e: cd:87:e8:fd:24:c4:57:4e:5d:26:78:dd:75:3d:94: 17:04:07:10:61:2a:92:1b:2d:6d:ec:4e:fa:c3:00: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:19:1D:C4:D6:82:C0:BB:59:6D:17:30:24:43:8D:8F:98:6A:54 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:dd:ea:b3:1c:a8:1c:16:c5:74:67:d0:e5:18:bf:e0:49:d8: ce:30:1f:9d:52:7e:fc:67:18:e5:33:82:cb:fa:7a:f9:f4:b6: c2:bb:87:14:24:b0:f8:e7:13:33:42:8a:29:ba:13:5e:88:e7: ca:cb:0b:5a:dc:38:7c:67:86:0f:17:1d:49:80:b2:23:2d:c4: c5:72:7b:6b:c8:d5:bc:40:01:0d:29:90:58:ff:df:66:b8:40: b8:79:f7:6e:63:41:a0:ea:0f:97:72:bc:89:8f:f2:d2:c3:bf: 8b:79:8d:c5:66:04:0b:77:0c:75:5d:c6:9b:b2:41:3a:66:5e: e1:b3:a3:76:86:ec:5f:d3:73:ac:7f:20:f0:4d:af:be:5c:63: b0:83:05:d6:b3:51:b0:48:10:78:9d:69:7d:47:77:da:bf:cd: 8f:65:b7:b7:91:f2:b7:6b:d8:b9:f7:c6:e6:66:09:52:9a:6e: ed:f7:19:38:9f:60:60:78:96:0c:85:93:13:33:88:92:be:15: 47:60:20:a1:81:14:ee:32:38:3a:09:fb:b5:41:69:96:4f:c5: ca:b3:e2:d8:a1:b6:c3:60:a2:e2:b8:d7:1c:53:53:0b:cd:94: 0d:b3:88:7e:18:52:2e:e8:dd:ac:3e:c0:47:f8:df:2d:87:23: 89:a6:74:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0Qe70DdcWJ/HvpHpVYvm1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMzIxMTMwMDM3WhcNMjYwMzIyMTMwMDM3WjAzMTEwLwYDVQQD Eyg5ZmM5MTkxZGM0ZDY4MmMwYmI1OTZkMTczMDI0NDM4ZDhmOTg2YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoz+6JwIEDasLvBOPHh91WfpOBTL MW/eXjop9F7uvICIUYoQnBh3equpkkT3snT57eOWAeGdoMzp6tDklrOMTyh9Y/JT AdFZLSjtLlMHzv7HWkjbfe8mtcP0p0ciTngyhiWfVa4jcyrPeitHUwA0ayRTSrA7 R+kYuKDSlE+zdeX/gxseHeQtPNvm3JTn79BAJKK2LDfTBIE4EvWb34CgiUWVv/ym xqbai73kyMilgwNPrIgawbRodVrueE9dsvX5BsZwgWhH5aSjWJDqMNejFu/Hyhux ohr1CdTzLtlh+Q7Nh+j9JMRXTl0meN11PZQXBAcQYSqSGy1t7E76wwC0cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/JGR3E1oLAu1ltFzAkQ42PmGpUMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed3qsxyo HBbFdGfQ5Ri/4EnYzjAfnVJ+/GcY5TOCy/p6+fS2wruHFCSw+OcTM0KKKboTXojn yssLWtw4fGeGDxcdSYCyIy3ExXJ7a8jVvEABDSmQWP/fZrhAuHn3bmNBoOoPl3K8 iY/y0sO/i3mNxWYEC3cMdV3Gm7JBOmZe4bOjdobsX9NzrH8g8E2vvlxjsIMF1rNR sEgQeJ1pfUd32r/Nj2W3t5Hyt2vYuffG5mYJUppu7fcZOJ9gYHiWDIWTEzOIkr4V R2AgoYEU7jI4Ogn7tUFplk/FyrPi2KG2w2Ci4rjXHFNTC82UDbOIfhhSLujdrD7A R/jfLYcjiaZ0QQ== -----END CERTIFICATE-----Generated at Sun Mar 22 00:08:25 2026 by rpki-client