$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: DP97UW4xSpPnGnavZMT1FpYFNYHu/HJPHRh+x6yrbAY= Subject key identifier: B5:D2:E2:57:20:47:42:DA:E6:95:90:69:AA:59:D9:D9:7B:F6:F3:22 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 01A08ED785F292B77EAC9FA17C55E892B244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1ABB Signing time: Fri 11 Sep 2026 05:01:24 +0000 Manifest this update: Fri 11 Sep 2026 05:01:24 +0000 Manifest next update: Sat 12 Sep 2026 05:01:24 +0000 Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=) 2: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=) 3: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=) 4: 7fgcMQkmfWwHXhrbNvdl9LWSJKA.roa (hash: pADt641ZfrBrQwfXg3JUa602uETFbQeFY9v2r19pKXI=) 5: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=) 6: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=) 7: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (hash: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=) 8: DSNpmKLkffCpsbXwdQsOEeY_JQI.roa (hash: /h170UamnOLNHRPxFd4yLuyJTcIXETFqpsRpdGA4ykI=) 9: F0bAlGw0a_ZgWrFGu2O1loQKWF0.roa (hash: JRV6yTXc/MA0FsIbtIWAD8eQh5UuzurulideXrLtpMo=) 10: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=) 11: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=) 12: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=) 13: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=) 14: OwOGkj3g_m-8rP4VEqsr21ez3t0.roa (hash: kWNy3fxPtEntltlLWADiH7P4BLQywgI40xILmr+8iRA=) 15: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=) 16: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=) 17: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=) 18: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=) 19: Xp4_W5QH684_v2ntxjTbXLi7co4.roa (hash: qVI7vhEbL0w9fKHM8ldDF9m2E1ZZAflMgjTOoFsG2NU=) 20: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: GaHJmbT4wDjrPkAUCgoWh0R837UrHhGBqNny7m6xra8=) 21: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (hash: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=) 22: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=) 23: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=) 24: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=) 25: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=) 26: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=) 27: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=) 28: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=) 29: jvk6n_RnjcVRgkfuh-yDyKrsKa0.roa (hash: 2KjhqQ8H78xGXBBm5J3fxYf4qp7FfHp4g44MaB56yOE=) 30: niGcWz0ThxJygz-PLbVysx_sLZE.roa (hash: g18PU3cPKMc6/2ma47ogKuHWzJTyComhxOWTfFk6wlA=) 31: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=) 32: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=) 33: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=) 34: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=) 35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8e:d7:85:f2:92:b7:7e:ac:9f:a1:7c:55:e8:92:b2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Sep 11 05:01:24 2026 GMT Not After : Sep 12 05:01:24 2026 GMT Subject: CN=b5d2e257204742dae6959069aa59d9d97bf6f322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:fa:48:39:26:5a:0a:09:a3:37:50:fb:52: d1:ac:92:26:f9:9f:db:72:90:7f:40:e9:80:0c:0a: 84:72:b3:da:34:aa:0c:b3:65:24:d4:e6:84:61:ff: 15:83:51:6e:e9:a6:de:03:25:90:b5:f4:e5:b0:09: 1b:d9:19:f5:4c:67:c5:b3:1d:99:ab:e7:79:3e:70: 5e:2a:60:dd:d4:1b:41:21:a6:e3:4e:d7:6e:52:8d: 9b:bb:dd:06:3c:4d:81:46:95:f3:3d:d9:6f:e9:a8: 9b:23:ff:45:32:c9:ab:a6:8c:d9:e5:32:14:c5:db: 12:77:5d:76:df:ee:88:2d:2a:02:ad:99:17:67:bc: cf:cf:ff:b8:cf:54:04:a0:e5:41:72:30:37:61:33: 87:78:83:7a:7c:da:c5:bb:9c:7f:67:5e:32:89:06: fb:74:a3:c9:b1:be:63:59:09:74:c1:70:d9:c2:33: 1a:2f:ba:74:81:3c:f1:f7:bd:e9:80:e5:6d:f2:6e: 5c:2a:e8:22:f8:33:78:a6:37:5e:bc:fa:d7:2a:bd: 17:66:9c:ac:d1:f3:46:26:fa:0c:7d:05:bd:ca:9f: 14:4e:1f:c9:12:14:59:1c:e8:1e:dd:3f:65:a7:4a: 2b:87:da:75:8c:73:a6:cb:ca:8f:76:9f:75:33:45: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D2:E2:57:20:47:42:DA:E6:95:90:69:AA:59:D9:D9:7B:F6:F3:22 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:6e:75:b1:d1:af:bc:7c:83:78:4b:60:fd:89:2e:19:10: c5:a4:06:ba:34:19:7c:0e:e2:5e:f8:bf:bc:17:3a:17:f7:b9: e0:d3:93:f7:4a:31:57:03:77:76:75:2a:ae:70:7e:36:f2:18: c5:18:f4:e5:41:05:75:42:6c:f6:24:14:71:b7:99:9c:09:bc: 6a:3f:88:24:b0:3f:b5:97:83:1b:7b:7e:b2:a9:a7:2b:94:90: 84:b4:0c:35:be:44:c5:08:44:27:37:de:7b:a0:92:37:fd:b8: 4d:77:31:8d:f5:0e:ee:56:15:12:a2:c3:6c:b8:fc:05:7e:08: 22:e2:f3:11:e5:8b:4d:9d:2c:32:f9:5b:8c:13:60:a2:73:07: 32:90:e4:5d:1a:81:bf:9a:c8:48:b5:7d:6f:f7:55:30:54:10: 86:7a:6d:9c:d4:1d:2f:1a:9d:ff:1f:b7:28:70:81:30:45:8a: b1:b7:98:a8:89:7a:29:bb:3a:c0:f0:ef:5d:a7:04:1d:c3:21: 80:70:e5:31:2c:0e:c3:c9:ca:e3:97:62:46:d1:12:bc:d4:8b: ee:26:0e:39:b4:66:af:ed:c8:9d:04:d1:81:a1:14:e1:74:52: 0b:a1:26:87:79:bf:3c:45:67:12:63:c0:b2:b8:08:d6:75:20: 0d:08:bc:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCO14Xykrd+rJ+hfFXokrJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwOTExMDUwMTI0WhcNMjYwOTEyMDUwMTI0WjAzMTEwLwYDVQQD EyhiNWQyZTI1NzIwNDc0MmRhZTY5NTkwNjlhYTU5ZDlkOTdiZjZmMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpz6SDkmWgoJozdQ+1LRrJIm+Z/b cpB/QOmADAqEcrPaNKoMs2Uk1OaEYf8Vg1Fu6abeAyWQtfTlsAkb2Rn1TGfFsx2Z q+d5PnBeKmDd1BtBIabjTtduUo2bu90GPE2BRpXzPdlv6aibI/9FMsmrpozZ5TIU xdsSd1123+6ILSoCrZkXZ7zPz/+4z1QEoOVBcjA3YTOHeIN6fNrFu5x/Z14yiQb7 dKPJsb5jWQl0wXDZwjMaL7p0gTzx973pgOVt8m5cKugi+DN4pjdevPrXKr0XZpys 0fNGJvoMfQW9yp8UTh/JEhRZHOge3T9lp0orh9p1jHOmy8qPdp91M0UbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXS4lcgR0La5pWQaapZ2dl79vMiMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCdudbHR r7x8g3hLYP2JLhkQxaQGujQZfA7iXvi/vBc6F/e54NOT90oxVwN3dnUqrnB+NvIY xRj05UEFdUJs9iQUcbeZnAm8aj+IJLA/tZeDG3t+sqmnK5SQhLQMNb5ExQhEJzfe e6CSN/24TXcxjfUO7lYVEqLDbLj8BX4IIuLzEeWLTZ0sMvlbjBNgonMHMpDkXRqB v5rISLV9b/dVMFQQhnptnNQdLxqd/x+3KHCBMEWKsbeYqIl6Kbs6wPDvXacEHcMh gHDlMSwOw8nK45diRtESvNSL7iYOObRmr+3InQTRgaEU4XRSC6Emh3m/PEVnEmPA srgI1nUgDQi8EQ== -----END CERTIFICATE-----Generated at Fri Sep 11 07:38:48 2026 by rpki-client