$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: AeKl6iyHJkTvXZZxm0ERPmBuIdJ9zDER9+rHJbCPGQQ= Subject key identifier: 77:BC:79:EB:37:5D:EA:C9:E1:F9:B4:19:25:E2:90:14:D1:CA:CB:14 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019CC907F7CC8244BC883F3932F0D45C2A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0C73 Signing time: Sat 07 Mar 2026 16:01:08 +0000 Manifest this update: Sat 07 Mar 2026 16:01:08 +0000 Manifest next update: Sun 08 Mar 2026 16:01:08 +0000 Files and hashes: 1: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (hash: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY=) 2: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (hash: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=) 3: A956JOTlQ59lmcfnxZy--QUzGfo.roa (hash: RPpgTtbeiF27op+abzwfLowJGRtGnDFgjON32ZJTVfk=) 4: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (hash: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY=) 5: Fekxz83cw-qipMMKalFLm9cHDBA.roa (hash: 4P+8/TrggLqnTQMU/nWTl1kPGOuK4OJ+/hRBkU2gXhY=) 6: FjbhwRaWG8H0F9gsOugZzmYyQhI.roa (hash: eQ55wapBZou4y5GxsaxVO10r26QYB8emildRQ31E6/w=) 7: G1cVObMPOvr58gYfpMZUUg6xloA.roa (hash: kQwqsilWz22JvDZwbOTxkGaryBQcc34+YA+JEVWKuas=) 8: KIJR5bkAO_pGUiMhRohQVSBU_kI.roa (hash: S9jYnqRzYwb6R8b1IcOy2MFwYiHVTAAwBFBwHGspJjA=) 9: TQ7ysTGQIakmu4CVTNc31GK2dfs.roa (hash: MScEjjiTLmx3/HT0srp+gqbybWKE16rip04S7ew+ay8=) 10: Tx1QRE1K0CqqbNISdem5mSeFyhY.roa (hash: TsoYEEq1X+nTDdaU6FQwegqSC4XnT5STovO4gDOXBsw=) 11: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (hash: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY=) 12: WhpdbusgONQkGfJUmuHu3hC04fM.roa (hash: dMwJ/FCdVp8IZAqayVtrT8hk8KNS++zwBXrsEJV7xwo=) 13: X0kSuarZ-g_McCBdBJMAHOmD78E.roa (hash: Gr2z6DPYOsIVXCMbomTNzbkS+4fkBpnvaCGP+zUJOhk=) 14: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: pQM8bpARz5dOD2aY0FejihAbBhCAXLKLrQinRcc0DRo=) 15: aGx-mWhigRE4_KS4p7V620T7uRA.roa (hash: uYU/8IkqjXFpdqBKotX53i7emMpJhAXYS06trCmNRIw=) 16: rKBqA4AVr8V474f1fS0u1WEme_g.roa (hash: Ztg6Dzjy4Iu5rj4fL+sFN+yMeB/hu7159PSBkLZlOq0=) 17: tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa (hash: xN2ctTPtxjMiIigccibut/P5bneSpRG4NOTR23KVdug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 10:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c9:07:f7:cc:82:44:bc:88:3f:39:32:f0:d4:5c:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Mar 7 16:01:08 2026 GMT Not After : Mar 8 16:01:08 2026 GMT Subject: CN=77bc79eb375deac9e1f9b41925e29014d1cacb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:e4:5b:8b:0b:be:9f:f9:06:30:42:2b:31: 0f:22:09:97:ba:c2:76:b5:32:34:fb:38:eb:01:5b: 7f:e1:d3:de:78:6e:d4:f6:47:d1:3c:fd:4a:fc:c5: f8:7a:1e:0b:35:ef:7b:d2:fe:04:6e:06:17:b2:cf: 42:df:25:db:77:b5:e4:e5:f4:f0:1e:b7:51:45:26: bf:7d:db:a9:c5:9a:55:f8:b5:d6:50:12:37:b2:c8: 0d:a5:20:1f:62:94:a7:84:f6:ba:64:5f:e8:6b:4b: d5:77:c7:46:ef:bd:73:fc:e6:cb:8c:63:4f:d3:d6: 1e:c7:7a:99:71:2c:49:8c:28:6c:f4:b2:05:25:36: 75:d8:10:fc:53:5c:ce:7e:c4:52:97:39:c1:b9:2c: 77:ef:d9:cf:00:0d:e7:83:f7:c8:2a:75:22:a6:85: 56:a8:79:39:9a:01:47:6d:61:65:e0:2d:03:f7:de: 3f:c4:4e:e6:d9:99:28:e0:9b:c7:33:a3:f5:e0:e6: 29:d1:62:c6:a4:4f:47:90:f2:f9:dd:99:dd:68:c0: dd:d0:7b:5c:fb:22:a6:11:21:c6:8c:d5:40:03:c7: 9b:05:fc:ef:52:ca:52:4a:26:ed:58:5a:31:3e:0a: 44:a6:96:41:e2:a0:b7:a5:d4:45:82:97:1e:af:81: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:79:EB:37:5D:EA:C9:E1:F9:B4:19:25:E2:90:14:D1:CA:CB:14 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:42:27:b2:21:b7:ad:36:95:28:91:b0:19:20:bb:c5:91:6c: f5:ca:52:a0:27:45:ac:d0:50:a5:d7:f9:21:3a:a3:4a:78:bf: 22:41:27:40:8f:d1:e1:20:1e:7d:31:f1:b0:a5:26:0a:d8:aa: b5:72:79:e1:a4:cf:b3:ca:ac:63:e1:f6:db:dc:f7:78:62:86: a7:ff:8a:2b:b2:e9:45:c5:f2:af:7f:08:2e:73:35:1e:b7:a3: d3:75:0d:ef:90:58:78:32:9f:a5:9a:3a:8e:f5:1b:71:ff:15: e6:5a:f6:18:f0:43:3f:da:62:28:9e:e6:e5:4d:32:4f:53:cd: ac:04:ee:19:1b:94:39:6a:a0:b9:be:0a:3d:eb:b0:db:82:22: 74:03:dc:f9:96:73:be:6f:a1:64:c3:7c:0c:6b:78:f4:0d:bb: da:c9:61:5e:ee:74:e1:41:33:74:4d:c1:0c:14:ed:52:97:3a: 55:ab:dc:79:32:47:a8:a6:b7:3f:c6:e8:f5:58:e8:1f:85:69: f8:ff:76:ff:ed:13:70:5f:ee:d8:5b:89:6b:f4:9f:0a:56:0f: 52:e0:8d:8d:3f:5c:6b:be:f1:9b:b6:39:7c:f5:ee:13:40:7e: 14:a4:e1:0b:b6:04:09:66:6d:d3:14:fe:17:17:2b:65:e6:de: 0e:bd:6c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzJB/fMgkS8iD85MvDUXCoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMzA3MTYwMTA4WhcNMjYwMzA4MTYwMTA4WjAzMTEwLwYDVQQD Eyg3N2JjNzllYjM3NWRlYWM5ZTFmOWI0MTkyNWUyOTAxNGQxY2FjYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd3kW4sLvp/5BjBCKzEPIgmXusJ2 tTI0+zjrAVt/4dPeeG7U9kfRPP1K/MX4eh4LNe970v4EbgYXss9C3yXbd7Xk5fTw HrdRRSa/fdupxZpV+LXWUBI3ssgNpSAfYpSnhPa6ZF/oa0vVd8dG771z/ObLjGNP 09Yex3qZcSxJjChs9LIFJTZ12BD8U1zOfsRSlznBuSx379nPAA3ng/fIKnUipoVW qHk5mgFHbWFl4C0D994/xE7m2Zko4JvHM6P14OYp0WLGpE9HkPL53ZndaMDd0Htc +yKmESHGjNVAA8ebBfzvUspSSibtWFoxPgpEppZB4qC3pdRFgpcer4G7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe8ees3XerJ4fm0GSXikBTRyssUMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUInsiG3 rTaVKJGwGSC7xZFs9cpSoCdFrNBQpdf5ITqjSni/IkEnQI/R4SAefTHxsKUmCtiq tXJ54aTPs8qsY+H229z3eGKGp/+KK7LpRcXyr38ILnM1Hrej03UN75BYeDKfpZo6 jvUbcf8V5lr2GPBDP9piKJ7m5U0yT1PNrATuGRuUOWqgub4KPeuw24IidAPc+ZZz vm+hZMN8DGt49A272slhXu504UEzdE3BDBTtUpc6VavceTJHqKa3P8bo9VjoH4Vp +P92/+0TcF/u2FuJa/SfClYPUuCNjT9ca77xm7Y5fPXuE0B+FKThC7YECWZt0xT+ FxcrZebeDr1sWg== -----END CERTIFICATE-----Generated at Sat Mar 7 19:10:03 2026 by rpki-client