$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: NB2KFRCptcRd1CVa9TGPttp79FmIcwMhm8lRISNQm7E= Subject key identifier: 17:2C:1D:63:B0:C4:4D:53:E9:EF:F1:86:3F:12:0D:D4:24:A8:C8:76 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 01A1073804B98F187743D3A699F01D4D12B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 1AB4 Signing time: Sun 04 Oct 2026 14:01:14 +0000 Manifest this update: Sun 04 Oct 2026 14:01:14 +0000 Manifest next update: Mon 05 Oct 2026 14:01:14 +0000 Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=) 2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=) 3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=) 4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=) 5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=) 6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: E31n5Z3CU/kwu75WO/MGse+AftxzKkVxoLEFqBHqeXQ=) 7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=) 8: qBpYYsX5EY1iMFA0Pj4QSJlPDjU.asa (hash: Z0r1rVJzdOHFwXXuyD4RMI8J3uhDKI5yg8b1DBp6vzE=) 9: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=) 10: utVvz_2zL-EeYbGI4JyxvPVNUDo.asa (hash: 7iy+jOFotMzLTvIA5sNqjzvMdNUTu9coEXVSF+yDsMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:07:38:04:b9:8f:18:77:43:d3:a6:99:f0:1d:4d:12:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Oct 4 14:01:14 2026 GMT Not After : Oct 5 14:01:14 2026 GMT Subject: CN=172c1d63b0c44d53e9eff1863f120dd424a8c876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:84:bd:e3:00:ee:b9:1a:74:66:d6:3e:7f: 99:c4:34:e2:e5:98:3f:c9:95:1f:d3:46:e8:5b:fd: 0a:7f:4d:13:d8:69:d0:92:30:59:96:bc:17:2e:99: 8c:23:4c:b2:ad:1d:40:7f:c8:60:c4:89:2e:c1:43: eb:27:fa:b6:b2:f1:d9:2a:4f:9d:92:d5:88:b9:3c: ca:8b:1d:76:f5:4e:9b:2d:5d:53:5d:94:4d:1c:26: eb:e0:97:8b:93:f9:2b:4c:e7:81:9d:31:01:cb:80: 18:aa:77:9a:d5:96:af:55:0a:53:3f:2e:6a:95:f7: d7:98:a2:ee:0c:81:2f:2b:d7:33:78:2e:c9:99:02: f3:e5:b0:9c:8a:53:c2:80:b1:27:fc:62:0b:8d:7c: 2f:ce:75:fb:a6:ec:27:94:52:ee:0d:9f:9b:93:c0: 22:44:9b:29:3a:58:2c:5a:55:c7:91:35:3f:10:7a: 22:70:09:32:2f:e9:b5:6e:ac:cc:16:ab:1a:08:dd: 8a:0d:ac:54:9c:07:4c:74:13:54:30:a6:10:c8:09: ac:eb:5f:53:ec:52:33:9f:01:7b:ba:06:38:50:3b: 40:bf:3e:c6:a8:a8:42:ef:9a:2c:1f:d9:56:af:dc: 51:2a:a0:46:9d:f2:cc:5a:49:08:e9:49:ad:41:57: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:1D:63:B0:C4:4D:53:E9:EF:F1:86:3F:12:0D:D4:24:A8:C8:76 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:97:70:54:db:89:9a:ec:fa:c0:21:e6:1e:57:7d:63:57:a7: 50:f9:33:e4:cc:32:29:c0:fd:b7:6a:e6:10:a2:02:92:3c:8a: 2c:13:48:9b:5c:c6:37:07:87:ce:c9:90:9f:c2:0e:4a:04:eb: 5b:bb:35:ca:5c:e7:30:13:8b:cc:82:ff:09:05:e5:d1:dc:50: eb:44:eb:12:41:7a:80:f9:5b:cd:43:4e:32:3a:c9:e5:47:28: de:15:03:ae:96:40:62:26:5a:56:21:80:71:4c:29:cf:d4:69: 26:dd:8f:bd:51:1b:50:16:f2:c7:b9:71:d9:aa:82:5c:07:22: e2:20:cc:b5:07:95:90:ea:67:9c:20:0c:69:3a:af:6c:c7:0c: 99:7c:7f:42:9e:9c:bc:20:4b:72:e7:5c:8d:e9:74:03:b9:61: 29:ca:00:37:f5:94:83:aa:c6:ca:dd:73:7d:96:7b:fb:5a:07: ff:e3:30:2b:92:0b:00:64:21:e6:e8:53:50:b9:6f:3b:4d:3f: 54:db:10:48:b6:8c:19:c5:09:94:d5:4e:1d:a9:57:1d:ad:7a: 04:f5:f8:ab:c6:70:9b:9a:23:45:35:5e:50:be:83:61:4b:bc: 02:ec:5f:73:43:52:0e:18:17:bc:a6:0b:54:76:c5:ea:9a:95: c9:93:bd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEHOAS5jxh3Q9OmmfAdTRK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYxMDA0MTQwMTE0WhcNMjYxMDA1MTQwMTE0WjAzMTEwLwYDVQQD EygxNzJjMWQ2M2IwYzQ0ZDUzZTllZmYxODYzZjEyMGRkNDI0YThjODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7KEveMA7rkadGbWPn+ZxDTi5Zg/ yZUf00boW/0Kf00T2GnQkjBZlrwXLpmMI0yyrR1Af8hgxIkuwUPrJ/q2svHZKk+d ktWIuTzKix129U6bLV1TXZRNHCbr4JeLk/krTOeBnTEBy4AYqnea1ZavVQpTPy5q lffXmKLuDIEvK9czeC7JmQLz5bCcilPCgLEn/GILjXwvznX7puwnlFLuDZ+bk8Ai RJspOlgsWlXHkTU/EHoicAkyL+m1bqzMFqsaCN2KDaxUnAdMdBNUMKYQyAms619T 7FIznwF7ugY4UDtAvz7GqKhC75osH9lWr9xRKqBGnfLMWkkI6UmtQVdzmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcsHWOwxE1T6e/xhj8SDdQkqMh2MB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZdwVNuJ muz6wCHmHld9Y1enUPkz5MwyKcD9t2rmEKICkjyKLBNIm1zGNweHzsmQn8IOSgTr W7s1ylznMBOLzIL/CQXl0dxQ60TrEkF6gPlbzUNOMjrJ5Uco3hUDrpZAYiZaViGA cUwpz9RpJt2PvVEbUBbyx7lx2aqCXAci4iDMtQeVkOpnnCAMaTqvbMcMmXx/Qp6c vCBLcudcjel0A7lhKcoAN/WUg6rGyt1zfZZ7+1oH/+MwK5ILAGQh5uhTULlvO00/ VNsQSLaMGcUJlNVOHalXHa16BPX4q8Zwm5ojRTVeUL6DYUu8Auxfc0NSDhgXvKYL VHbF6pqVyZO9vQ== -----END CERTIFICATE-----Generated at Sun Oct 4 18:44:33 2026 by rpki-client