$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: hDgE8ds0TXr+E4YSr2dDU901Mh8PVFV/pBxNJ7esa/E= Subject key identifier: 06:AC:54:23:8C:3A:29:4C:32:A5:0C:39:F1:6B:08:C4:7C:1E:50:07 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 01A0016F65FC8CB4EACF01CDF1B97D55970B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 060B Signing time: Fri 14 Aug 2026 18:01:12 +0000 Manifest this update: Fri 14 Aug 2026 18:01:12 +0000 Manifest next update: Sat 15 Aug 2026 18:01:12 +0000 Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: trvhIb1u0OO/Qbx3LGPST2hquPg6+ssfKcM4HdRmcC8=) 2: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (hash: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE=) 3: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (hash: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE=) 4: MN6U3VW42sb0OVdqBMcLBJ2g2zU.roa (hash: PPnAC3azWQhKiDxnnjOYt4M14J8iF87kO3d2yUA8Kfw=) 5: YbKvoesrYXHEmFEjcVByq5eynzo.roa (hash: +DYa+fe9egpPIsRsJIXZUMAsEnq8jTNkWLMhIYMd4Q8=) 6: byQ1yszhOcZFFPh_Y5AKBXMFwMw.roa (hash: b7qP0sl3+othoRFTec+oydZ8N3Jq1XUmt+VOT3v3hnY=) 7: gC5ojAbS6z97a05sXClJSkkJk3w.roa (hash: laV5VTUScUMrKJ3a9qdAMd2Oli3d8tpx9cRZCqQwMls=) 8: kHP0M6fVan_dV2bdSXbsBdJ27pU.roa (hash: z5ajzgWdArm34wD+Vi31zXSHcWy5YvyidurL0SZHcbU=) 9: snHZlA_rMzA-GJtkANTKKKsjJms.roa (hash: wWUHeupDm38JL23SWCuEwKVQP7+CZz4/f+h6ttaySF4=) 10: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (hash: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:6f:65:fc:8c:b4:ea:cf:01:cd:f1:b9:7d:55:97:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Aug 14 18:01:12 2026 GMT Not After : Aug 15 18:01:12 2026 GMT Subject: CN=06ac54238c3a294c32a50c39f16b08c47c1e5007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:7d:d2:d8:ee:81:30:9d:51:ef:47:b7:05: dd:85:6e:3c:cd:40:06:a0:0d:34:6e:30:60:c9:a7: b6:0c:51:c5:43:9e:0e:8d:0f:49:04:f6:60:68:07: fa:8f:e6:1a:b1:21:97:71:19:2e:93:2a:f8:91:31: 59:dd:8a:a8:a2:36:a3:8e:0e:8e:c2:97:a8:ad:09: 52:1c:dc:f1:a9:f6:ed:b3:48:c6:3c:dd:33:e4:c0: 3d:15:31:a5:6a:3e:28:12:fc:56:ef:ef:bb:59:e4: 9b:44:45:4f:e1:eb:d8:20:82:c9:af:f8:86:f7:0e: c1:04:99:8b:c2:f1:5b:bf:72:bf:88:7a:36:2e:61: 0d:0d:c1:5b:8b:b8:ff:0c:9e:3c:5d:d3:e7:92:51: 6d:fb:59:d8:2c:de:7c:07:70:7b:6f:6b:4f:2f:6a: 60:e0:be:8d:54:84:f8:b3:95:ac:e5:4c:61:5b:19: 17:04:b6:16:fc:41:9d:4a:70:70:52:59:10:36:f0: 8d:14:e3:8e:08:ca:3f:76:c6:72:6b:f8:05:62:12: 27:38:34:88:10:bb:dd:8d:0b:dd:cc:e3:0b:be:b5: d6:89:1d:2b:ea:c2:f7:50:27:7c:62:97:38:ab:b5: 31:a2:1d:5f:0b:95:97:f2:35:9c:3c:15:99:a5:89: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:54:23:8C:3A:29:4C:32:A5:0C:39:F1:6B:08:C4:7C:1E:50:07 X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:cd:97:dd:35:31:c3:be:96:cf:85:a6:d9:5f:c3:6a:89:77: 35:12:e0:78:f2:ff:09:b7:be:20:00:db:3d:74:de:41:d1:e4: ef:72:cd:3e:c4:f3:aa:e0:c3:75:1b:61:c5:f3:d4:2d:4a:01: c3:36:00:14:07:6f:5d:a8:9f:98:f7:a6:f2:10:5b:7b:c1:2a: 65:8e:74:b4:b5:e4:15:95:f4:18:54:3e:47:d0:14:b4:1d:d8: 74:db:c5:8b:c4:3b:df:ca:69:ca:88:10:c6:c2:c0:62:ea:31: 78:2c:f7:a0:07:f7:5d:b0:42:1b:c6:e5:b5:f3:7d:e9:6e:88: 3b:db:60:ea:7f:f1:7a:7a:3d:f2:55:b5:79:1f:55:66:b7:77: 82:d8:f4:fe:4a:83:68:fa:46:90:f8:f0:43:8a:96:65:ee:d5: 8e:43:50:93:b5:62:f2:d7:1f:6e:0e:05:36:6f:b2:c2:3f:cf: 39:7e:90:b0:69:43:65:49:24:62:e6:18:e1:ab:d5:7d:44:c3: 20:5a:b2:0d:cf:13:88:52:61:5e:58:ec:8c:2b:24:7a:69:2c: 63:b4:54:5b:ee:29:11:b8:6c:6d:19:73:4a:f7:4f:a3:68:5f: cb:94:6f:00:64:b0:b7:5b:49:3b:37:4f:65:1c:62:2b:8f:44: 0b:c5:d0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaABb2X8jLTqzwHN8bl9VZcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwODE0MTgwMTEyWhcNMjYwODE1MTgwMTEyWjAzMTEwLwYDVQQD EygwNmFjNTQyMzhjM2EyOTRjMzJhNTBjMzlmMTZiMDhjNDdjMWU1MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX590tjugTCdUe9HtwXdhW48zUAG oA00bjBgyae2DFHFQ54OjQ9JBPZgaAf6j+YasSGXcRkukyr4kTFZ3Yqoojajjg6O wpeorQlSHNzxqfbts0jGPN0z5MA9FTGlaj4oEvxW7++7WeSbREVP4evYIILJr/iG 9w7BBJmLwvFbv3K/iHo2LmENDcFbi7j/DJ48XdPnklFt+1nYLN58B3B7b2tPL2pg 4L6NVIT4s5Ws5UxhWxkXBLYW/EGdSnBwUlkQNvCNFOOOCMo/dsZya/gFYhInODSI ELvdjQvdzOMLvrXWiR0r6sL3UCd8Ypc4q7Uxoh1fC5WX8jWcPBWZpYn8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAasVCOMOilMMqUMOfFrCMR8HlAHMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzs2X3TUx w76Wz4Wm2V/Daol3NRLgePL/Cbe+IADbPXTeQdHk73LNPsTzquDDdRthxfPULUoB wzYAFAdvXaifmPem8hBbe8EqZY50tLXkFZX0GFQ+R9AUtB3YdNvFi8Q738ppyogQ xsLAYuoxeCz3oAf3XbBCG8bltfN96W6IO9tg6n/xeno98lW1eR9VZrd3gtj0/kqD aPpGkPjwQ4qWZe7VjkNQk7Vi8tcfbg4FNm+ywj/POX6QsGlDZUkkYuYY4avVfUTD IFqyDc8TiFJhXljsjCskemksY7RUW+4pEbhsbRlzSvdPo2hfy5RvAGSwt1tJOzdP ZRxiK49EC8XQ/w== -----END CERTIFICATE-----Generated at Fri Aug 14 22:25:24 2026 by rpki-client