$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: VyK0fPFZudOW5PNspcEvLSPgA5Luv9+uaLAd36p+g6w= Subject key identifier: 82:22:5D:8E:84:2E:F4:02:CD:EE:6F:F0:3E:93:56:6D:D5:87:7E:79 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019C98C08A05C7D3DC97619AE5DAD3845142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 29 Signing time: Thu 26 Feb 2026 07:01:20 +0000 Manifest this update: Thu 26 Feb 2026 07:01:20 +0000 Manifest next update: Fri 27 Feb 2026 07:01:20 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: plEdwVqU0G5wrSvAT3XJctMQlqsoKVtK4qEBSG11HvQ=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:98:c0:8a:05:c7:d3:dc:97:61:9a:e5:da:d3:84:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Feb 26 07:01:20 2026 GMT Not After : Feb 27 07:01:20 2026 GMT Subject: CN=82225d8e842ef402cdee6ff03e93566dd5877e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:13:16:9b:90:ec:df:87:fa:56:90:e1:f0: 3e:ed:95:45:6d:8b:91:d3:e1:91:2b:21:9a:d9:32: 67:5f:79:e8:f6:b6:26:44:ad:95:e6:d9:24:32:38: 28:32:f4:22:0f:4d:44:ba:27:26:97:39:34:37:b4: 4c:16:a6:c1:4e:67:5d:a9:ad:71:af:6e:95:ae:f6: dc:96:c9:67:a6:69:a9:43:de:32:fe:80:83:95:e0: 42:69:34:1a:de:74:38:7b:66:be:d6:ea:58:a1:9f: 7e:b7:a0:3e:bb:aa:28:8e:5a:e2:6a:ef:e2:05:d7: 71:59:0c:73:dd:30:dd:30:77:58:36:0e:cd:11:ad: 8e:5b:4b:fe:0b:78:6c:5e:4e:c8:8d:1e:29:5c:95: 63:a3:e4:a4:eb:29:22:36:ff:1a:68:6a:5a:f8:d9: b4:0b:15:b1:88:bb:f8:6a:98:89:f6:17:f1:78:7a: 01:83:1f:be:91:d3:7e:21:51:c8:24:cf:24:fc:cc: eb:b1:01:d9:20:a7:40:08:a1:4b:f2:33:f5:8d:eb: d5:94:d5:35:aa:f3:ac:54:77:37:5b:af:1d:17:59: 64:c4:dc:3b:86:aa:93:d9:ed:df:e1:de:73:e7:48: d1:11:de:27:bf:7c:e1:12:ce:b4:bc:26:b5:23:44: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:5D:8E:84:2E:F4:02:CD:EE:6F:F0:3E:93:56:6D:D5:87:7E:79 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:31:6b:c3:b5:07:30:9b:32:b0:8d:c0:90:d1:c0:f2:d4:57: 6f:3b:81:42:de:4f:f9:4a:0a:4f:57:2d:cd:d6:a8:89:f6:b5: ec:d0:e7:f9:4d:4e:18:96:99:6e:a0:a8:ca:b1:99:f0:e4:8d: b6:f0:75:5e:94:f9:76:da:19:e7:69:74:49:e3:e1:3c:9e:75: d6:e6:78:07:cd:11:4f:9d:1e:2e:fd:ef:a4:d7:b1:e5:15:97: 3b:63:a8:3d:4e:18:12:6c:4c:d1:99:92:ba:b2:0c:62:7c:54: b3:d4:aa:4d:e9:64:ce:47:4f:7a:c8:71:f6:48:a5:fd:a9:07: 10:4c:e9:9e:3c:d8:ed:12:67:08:2b:81:0f:c2:32:15:c8:0a: 6c:c2:be:1c:d4:50:3f:64:47:7e:a5:2c:7f:ad:53:a5:60:0a: 5e:13:03:3d:11:1a:71:03:3d:ae:62:54:0e:29:a4:f4:ac:4e: 5b:db:e0:9b:03:39:b6:f8:54:a5:1a:bf:27:28:4c:a4:96:8f: f2:23:ec:d5:c5:ec:8a:a5:11:ff:92:37:c9:dc:8f:3a:e6:dc: 1b:46:3b:82:08:d8:fb:45:7a:31:01:3a:70:6a:92:ea:45:ee: 5a:aa:36:51:0a:b9:4f:e0:db:62:02:bb:df:49:b5:fb:c4:c6: 4c:96:2a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyYwIoFx9Pcl2Ga5drThFFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwMjI2MDcwMTIwWhcNMjYwMjI3MDcwMTIwWjAzMTEwLwYDVQQD Eyg4MjIyNWQ4ZTg0MmVmNDAyY2RlZTZmZjAzZTkzNTY2ZGQ1ODc3ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65wTFpuQ7N+H+laQ4fA+7ZVFbYuR 0+GRKyGa2TJnX3no9rYmRK2V5tkkMjgoMvQiD01Euicmlzk0N7RMFqbBTmddqa1x r26VrvbclslnpmmpQ94y/oCDleBCaTQa3nQ4e2a+1upYoZ9+t6A+u6oojlriau/i BddxWQxz3TDdMHdYNg7NEa2OW0v+C3hsXk7IjR4pXJVjo+Sk6ykiNv8aaGpa+Nm0 CxWxiLv4apiJ9hfxeHoBgx++kdN+IVHIJM8k/MzrsQHZIKdACKFL8jP1jevVlNU1 qvOsVHc3W68dF1lkxNw7hqqT2e3f4d5z50jREd4nv3zhEs60vCa1I0RHtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIiXY6ELvQCze5v8D6TVm3Vh355MB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzFrw7UH MJsysI3AkNHA8tRXbzuBQt5P+UoKT1ctzdaoifa17NDn+U1OGJaZbqCoyrGZ8OSN tvB1XpT5dtoZ52l0SePhPJ511uZ4B80RT50eLv3vpNex5RWXO2OoPU4YEmxM0ZmS urIMYnxUs9SqTelkzkdPeshx9kil/akHEEzpnjzY7RJnCCuBD8IyFcgKbMK+HNRQ P2RHfqUsf61TpWAKXhMDPREacQM9rmJUDimk9KxOW9vgmwM5tvhUpRq/JyhMpJaP 8iPs1cXsiqUR/5I3ydyPOubcG0Y7ggjY+0V6MQE6cGqS6kXuWqo2UQq5T+DbYgK7 30m1+8TGTJYq1Q== -----END CERTIFICATE-----Generated at Thu Feb 26 17:12:17 2026 by rpki-client