$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: YD665JkgFQ9B43Hdfykbl2xgxqQCxVkD5ymciUsh1EE= Subject key identifier: 2F:B2:BA:D8:AD:B5:91:9D:D4:8F:8D:65:A5:6B:01:70:59:ED:5D:99 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 01A1291F00A21DB29252AF03F4D5F1475ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 0286 Signing time: Sun 11 Oct 2026 04:00:59 +0000 Manifest this update: Sun 11 Oct 2026 04:00:59 +0000 Manifest next update: Mon 12 Oct 2026 04:00:59 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: nGnfcFjzxug++46W44m5MfrY6DDdtRWxcwNSYb3uo+4=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:1f:00:a2:1d:b2:92:52:af:03:f4:d5:f1:47:5a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Oct 11 04:00:59 2026 GMT Not After : Oct 12 04:00:59 2026 GMT Subject: CN=2fb2bad8adb5919dd48f8d65a56b017059ed5d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:97:63:a9:4f:95:46:e8:9c:d2:e5:5e:38: b6:47:94:ac:ef:df:7e:91:ce:20:f0:61:07:be:97: a4:62:8b:50:f5:25:bc:86:cb:bd:4a:2b:b8:e5:a9: 8a:2e:b7:8b:38:56:f3:94:20:fd:a1:92:eb:96:47: af:88:19:ef:14:40:b5:05:ae:62:0d:cd:ad:18:e6: 31:03:a5:42:5d:cd:59:b2:31:93:ec:ba:79:9b:8f: 30:57:c8:66:0d:a5:fe:23:fa:0d:7b:6f:af:e2:22: a2:33:c1:59:8d:d8:b3:54:09:00:da:3d:62:fe:0a: d8:6a:86:a3:ef:8b:f1:db:a0:5b:db:c0:ce:8e:b1: 8e:80:5c:3b:fc:83:b9:49:7b:7c:af:34:f1:da:12: 86:82:c1:38:3f:8b:60:8b:6a:ff:1f:6d:16:5c:2f: bd:51:56:e4:96:e1:ee:cd:11:d4:5b:35:52:e6:a3: 5b:f3:d1:31:e4:d3:6e:24:01:2c:80:b1:57:1b:d7: fb:fd:0c:75:78:4e:be:34:f9:5d:4e:7b:fd:e0:df: ef:b2:ec:28:e3:8b:bc:5e:ab:93:eb:ba:bb:3b:85: d1:2a:a5:b1:30:d3:85:bb:b4:14:cd:33:3e:b4:73: 0b:59:ec:50:8a:b1:98:36:e6:f1:1e:da:0d:04:5b: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:BA:D8:AD:B5:91:9D:D4:8F:8D:65:A5:6B:01:70:59:ED:5D:99 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3b:da:85:af:51:9f:9f:b6:4d:17:e1:0b:4f:88:54:42:73: 71:2e:69:51:dd:b0:03:85:6c:86:0d:80:56:a6:76:cc:85:44: 72:2a:d9:51:c4:a5:46:d8:d9:18:a2:c4:da:02:74:cd:2e:e7: c6:5d:92:1a:67:9a:96:92:f7:0b:3c:ad:70:09:a3:38:16:1a: 6f:6a:19:03:7f:e8:62:4f:9a:8f:f1:46:9c:98:6a:73:bf:cf: 16:d4:c3:1c:54:1c:e6:3b:85:95:5d:c6:53:6f:9f:f1:09:03: 31:0d:21:a0:c1:29:ba:90:62:5a:ff:6d:4c:f0:de:37:59:22: 93:df:e0:8b:80:4e:d7:8e:76:8a:2f:91:26:4c:d9:ee:88:f6: 87:aa:c3:0d:3c:55:35:d3:47:44:7e:2f:37:97:f6:40:4f:d2: de:b3:d7:56:01:30:f2:be:65:06:19:80:9d:ef:94:9e:67:15: de:31:67:0e:3a:37:25:18:ad:a1:36:b2:7f:7d:4f:82:6b:41: 24:d0:6b:dd:7d:eb:fb:d5:9d:95:3f:dd:85:84:7f:b9:ed:c1: 23:2f:60:fe:f5:31:ce:bc:21:64:9e:63:a8:18:d1:ca:f8:b4: b3:c5:77:cf:8c:62:cc:a3:da:89:ec:fb:fe:14:b4:e5:b5:f0: 30:21:0c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEpHwCiHbKSUq8D9NXxR1reMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYxMDExMDQwMDU5WhcNMjYxMDEyMDQwMDU5WjAzMTEwLwYDVQQD EygyZmIyYmFkOGFkYjU5MTlkZDQ4ZjhkNjVhNTZiMDE3MDU5ZWQ1ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNWXY6lPlUbonNLlXji2R5Ss799+ kc4g8GEHvpekYotQ9SW8hsu9Siu45amKLreLOFbzlCD9oZLrlkeviBnvFEC1Ba5i Dc2tGOYxA6VCXc1ZsjGT7Lp5m48wV8hmDaX+I/oNe2+v4iKiM8FZjdizVAkA2j1i /grYaoaj74vx26Bb28DOjrGOgFw7/IO5SXt8rzTx2hKGgsE4P4tgi2r/H20WXC+9 UVbkluHuzRHUWzVS5qNb89Ex5NNuJAEsgLFXG9f7/Qx1eE6+NPldTnv94N/vsuwo 44u8XquT67q7O4XRKqWxMNOFu7QUzTM+tHMLWexQirGYNubxHtoNBFti2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+yutittZGd1I+NZaVrAXBZ7V2ZMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojvaha9R n5+2TRfhC0+IVEJzcS5pUd2wA4Vshg2AVqZ2zIVEcirZUcSlRtjZGKLE2gJ0zS7n xl2SGmealpL3CzytcAmjOBYab2oZA3/oYk+aj/FGnJhqc7/PFtTDHFQc5juFlV3G U2+f8QkDMQ0hoMEpupBiWv9tTPDeN1kik9/gi4BO1452ii+RJkzZ7oj2h6rDDTxV NdNHRH4vN5f2QE/S3rPXVgEw8r5lBhmAne+UnmcV3jFnDjo3JRitoTayf31PgmtB JNBr3X3r+9WdlT/dhYR/ue3BIy9g/vUxzrwhZJ5jqBjRyvi0s8V3z4xizKPaiez7 /hS05bXwMCEM7g== -----END CERTIFICATE-----Generated at Sun Oct 11 13:53:25 2026 by rpki-client