$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: LJFbW3G+jLUFDZ5zXXTN2JsWGvnj3Y/qHvc5735oV/c= Subject key identifier: DF:01:11:D9:31:B7:4B:8D:07:61:7F:58:5B:A3:A0:A8:2C:B5:F7:5B Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019DCD18CE398C783C054D24244C619C5749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 193F Signing time: Mon 27 Apr 2026 04:00:47 +0000 Manifest this update: Mon 27 Apr 2026 04:00:47 +0000 Manifest next update: Tue 28 Apr 2026 04:00:47 +0000 Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=) 2: 4AQpWQisjxEO_3sSCwM5-rsbP2U.roa (hash: pFbTw52/6hBtIeFj35KTMuXcfX4BCXpM3suldN/qkJc=) 3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=) 4: 6dfLDbtcB7Oy08RSn-ZJaria73A.roa (hash: Wireb9R2m79PwBjUJ01lZh3UqGW3cHIaYQJ8loaVfj0=) 5: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=) 6: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=) 7: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=) 8: GRzget217Aq0ecWli8x7_zJ6neE.roa (hash: CY2GikLQYoWTrEF7hrznObW7Yqrk27oq5FD0igjVs3w=) 9: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=) 10: JkYPdWIPBS3UQdqks8w3N-B_PXA.roa (hash: 2dT7jcP61wNOKgKv9kGVucaeX72t3lEMFGix3NDqhMw=) 11: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=) 12: OvfyWv9UIqAtBl_nsQu2JTpIQQo.roa (hash: +BnAMt/KQdaB6b7HaQTEsRH6kJs2SPlugYpLEy1NY2o=) 13: REpPOVSFPxs6XWxXr83I7WsaONE.roa (hash: tWq3UF4A4s+oWUbvh9Wno2oVGe4je8aAL4JtfvCSLWU=) 14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=) 15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=) 16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=) 17: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: yzhtZRACC3MSTWPOpZcNzWNNTqqGTqcgsGcvo7qsRIQ=) 18: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=) 19: ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa (hash: ebvhaLhmgKTiPvOKK+bZy+ARcuy6m/BV6K1apwU9AoI=) 20: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=) 21: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=) 22: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=) 23: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=) 24: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=) 25: gGO6Wa2cmnZm74aqnOmfGcCtdwE.roa (hash: LpVwO5yCck4RFGeVX+quec5Pwk1/JEIhAM+kNuOtKSs=) 26: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=) 27: iBkluHdof_8F1tiIIeu1IUHVsdo.roa (hash: RauoNPl8ybB9uctj5qhY44EnOPIJ7Dn5vhqsB1W7sqI=) 28: mG70oaiQLw1CChve0widRVbMPck.roa (hash: YUzhMfkYxAz3L8ebkuYt8br4uvQAozQEY+LaakqqCkA=) 29: mshfArpzUjCOI3VAXt9ofx-FYsU.roa (hash: E4AU/ALB2gm1Ouwc1urgcMRh4bzLaMU2R6VEybB+8q4=) 30: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=) 31: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=) 32: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=) 33: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=) 34: xygQhFvaDn0KcsXT2TVrBVJGRy8.roa (hash: dsftadFShOGlp8GVX992hYwLlmpdYYKlbeZgmlDhCys=) 35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:18:ce:39:8c:78:3c:05:4d:24:24:4c:61:9c:57:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Apr 27 04:00:47 2026 GMT Not After : Apr 28 04:00:47 2026 GMT Subject: CN=df0111d931b74b8d07617f585ba3a0a82cb5f75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:c2:fd:43:74:24:dc:a7:e8:2c:ac:60:dd: 11:63:6e:58:58:38:d6:95:04:b6:8d:5b:cb:56:36: 97:50:d4:74:f5:05:bd:8c:55:0f:fb:56:f9:47:d8: 4e:89:23:cf:cf:db:3f:70:80:6c:2e:15:d1:01:c3: f6:b7:1b:a4:19:bc:45:e9:85:20:98:78:ec:ef:9a: 48:36:45:f5:4c:fe:a1:53:24:6c:1f:5c:f6:3b:74: a5:03:84:2e:50:11:aa:0e:f9:41:4d:52:90:8b:a6: e0:4a:c1:01:6e:57:27:7b:36:49:81:43:33:4d:d4: e2:70:f8:02:fa:f0:a0:04:46:27:2b:97:0f:20:9e: 59:f7:0b:d9:96:b6:bf:06:61:a6:af:54:d6:38:9c: fc:55:82:b3:ef:9d:bc:f8:a6:79:67:df:7d:56:dc: b3:61:07:b0:20:fe:3e:ee:bb:2f:0c:fa:db:dd:fa: aa:f3:75:37:f9:7d:71:a3:f7:68:7b:89:bf:2d:46: b1:99:97:73:64:41:7a:98:3b:82:38:ab:ae:4a:ab: b4:a1:fd:65:df:c1:87:56:1a:cd:3d:f5:53:ed:e3: 23:88:ec:b8:3b:43:97:a0:e7:96:56:4a:67:4b:25: af:ee:0d:83:67:1d:ed:36:29:8b:6e:ef:0b:6c:60: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:11:D9:31:B7:4B:8D:07:61:7F:58:5B:A3:A0:A8:2C:B5:F7:5B X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f0:11:97:07:b1:ce:3f:5a:52:ae:f0:c8:d3:72:54:fc:74: 9c:5c:fb:20:df:ec:1b:8c:2c:aa:d5:8b:bf:98:53:4e:04:fe: ea:92:fd:d4:4f:aa:85:95:63:d4:a5:e1:ba:34:16:af:3c:c4: d9:8c:a0:e6:a2:d4:8f:4d:d1:66:fa:e6:c6:55:2c:34:88:83: 80:79:74:a4:70:57:7c:1c:89:0e:33:fc:59:91:b7:34:1a:3c: f5:da:97:a2:f3:be:15:ff:15:af:92:e6:89:12:f1:c3:b5:72: 25:44:f9:19:6f:ae:6b:3e:d6:2c:f5:34:5c:62:92:c2:af:9a: 95:6b:c0:f1:d5:71:5b:44:a9:7d:2d:c6:77:29:95:5b:aa:7a: 12:66:01:b5:92:cf:30:f5:42:16:6d:2b:1a:de:0d:1b:2b:1e: 72:9f:5f:6f:5a:01:d0:39:70:3b:e5:5a:45:b7:b3:ad:3c:9f: c8:cf:b1:b4:03:59:c5:a5:a7:22:9b:ff:d6:62:e8:9d:0d:cf: 7d:32:d4:03:2f:57:b0:c4:ef:9a:9f:39:d6:9b:10:42:de:d8: 34:78:a2:c4:1b:b2:01:85:29:dc:a9:28:40:99:d3:f9:7c:a6: 8e:08:b5:94:e2:d3:98:a3:fe:ce:08:60:eb:06:39:b0:3d:e2: 73:8a:18:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NGM45jHg8BU0kJExhnFdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwNDI3MDQwMDQ3WhcNMjYwNDI4MDQwMDQ3WjAzMTEwLwYDVQQD EyhkZjAxMTFkOTMxYjc0YjhkMDc2MTdmNTg1YmEzYTBhODJjYjVmNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0vC/UN0JNyn6CysYN0RY25YWDjW lQS2jVvLVjaXUNR09QW9jFUP+1b5R9hOiSPPz9s/cIBsLhXRAcP2txukGbxF6YUg mHjs75pINkX1TP6hUyRsH1z2O3SlA4QuUBGqDvlBTVKQi6bgSsEBblcnezZJgUMz TdTicPgC+vCgBEYnK5cPIJ5Z9wvZlra/BmGmr1TWOJz8VYKz7528+KZ5Z999Vtyz YQewIP4+7rsvDPrb3fqq83U3+X1xo/doe4m/LUaxmZdzZEF6mDuCOKuuSqu0of1l 38GHVhrNPfVT7eMjiOy4O0OXoOeWVkpnSyWv7g2DZx3tNimLbu8LbGDZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8BEdkxt0uNB2F/WFujoKgstfdbMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/ARlwex zj9aUq7wyNNyVPx0nFz7IN/sG4wsqtWLv5hTTgT+6pL91E+qhZVj1KXhujQWrzzE 2Yyg5qLUj03RZvrmxlUsNIiDgHl0pHBXfByJDjP8WZG3NBo89dqXovO+Ff8Vr5Lm iRLxw7VyJUT5GW+uaz7WLPU0XGKSwq+alWvA8dVxW0SpfS3GdymVW6p6EmYBtZLP MPVCFm0rGt4NGysecp9fb1oB0DlwO+VaRbezrTyfyM+xtANZxaWnIpv/1mLonQ3P fTLUAy9XsMTvmp851psQQt7YNHiixBuyAYUp3KkoQJnT+Xymjgi1lOLTmKP+zghg 6wY5sD3ic4oYhw== -----END CERTIFICATE-----Generated at Mon Apr 27 09:16:32 2026 by rpki-client