$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: USxZ+ynmxq+afIAKn4PAYGEbQh1/+qiBibDo+FAepk8= Subject key identifier: 14:2B:D7:29:81:9A:59:EF:01:E1:60:A7:D2:4A:4D:42:4B:1D:0E:7F Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 01A0C66AF1FAD3C0283135B506134F06360A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: E0 Signing time: Tue 22 Sep 2026 00:01:32 +0000 Manifest this update: Tue 22 Sep 2026 00:01:32 +0000 Manifest next update: Wed 23 Sep 2026 00:01:32 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: hnplcLBajIrgsaPm6TAjnT7q4WS/R//ZBSLZPHijops=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:6a:f1:fa:d3:c0:28:31:35:b5:06:13:4f:06:36:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Sep 22 00:01:32 2026 GMT Not After : Sep 23 00:01:32 2026 GMT Subject: CN=142bd729819a59ef01e160a7d24a4d424b1d0e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fe:7f:20:4c:70:f4:89:0f:8e:42:f5:3e:50: 76:ca:45:92:50:87:1e:e4:cc:ea:91:3b:33:7a:00: 2f:3f:2d:aa:bb:d5:1f:e8:4b:bd:cc:5d:ac:af:b9: a6:58:36:c9:5c:81:e2:f4:de:6a:cb:b3:a0:9a:f3: fc:d4:65:a3:b1:2e:6a:e4:50:9a:82:65:ed:3c:e4: 17:f1:1a:a9:d1:bb:1f:1b:31:f2:cf:01:4c:31:c1: 15:cf:50:a1:03:a6:03:9a:86:e1:73:6d:6f:33:9a: 3d:64:71:81:e2:d7:be:7c:76:01:5b:e0:ae:6c:7f: 6c:5d:2f:13:a5:1d:4b:80:76:38:61:fd:7a:49:87: 75:aa:6a:1d:c9:7f:e3:9c:43:44:9e:6f:82:84:0b: 45:0d:73:1b:48:bf:64:1c:0a:14:21:a5:1e:37:e1: d5:b9:8b:b9:1e:66:03:77:01:5d:b6:c7:36:e4:f8: 97:58:03:ac:e8:a5:21:93:4c:2b:aa:65:91:f9:e4: e1:b0:46:20:84:7b:2a:e7:33:a3:cd:21:38:ec:1e: 3c:22:d4:65:30:c8:28:a1:23:ba:e6:aa:06:4e:60: 8a:24:5b:ea:db:2c:aa:6f:0e:83:f2:7b:5b:c1:81: 0b:5d:61:51:82:bc:0a:1b:d0:fd:d6:9b:21:0f:76: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:D7:29:81:9A:59:EF:01:E1:60:A7:D2:4A:4D:42:4B:1D:0E:7F X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ae:20:2c:5b:8d:28:96:1e:62:91:fd:5a:29:c4:bb:1c:84: fd:66:aa:f9:ee:e4:10:02:5b:d3:6a:1a:2a:2a:02:96:8a:e8: 8b:88:1e:64:4a:1d:4d:81:06:5a:bb:3e:2f:2a:03:80:1f:78: a7:3a:c4:a4:c5:f4:19:5c:18:fa:3d:f4:09:89:82:d3:ee:f6: 02:d9:06:b2:d5:9f:68:85:73:fe:a0:34:83:61:5e:a5:a2:cc: a4:67:9f:ea:87:66:b5:6c:87:74:45:97:bd:05:c9:53:ab:0d: 66:d3:88:57:93:ab:54:f9:95:e8:24:ca:da:f9:c7:ce:69:55: 21:dc:0f:cc:0f:7e:89:87:f1:32:26:7b:9a:8c:78:39:63:8e: 76:18:c2:92:37:00:8b:c8:7c:9a:19:99:d1:39:28:58:bc:54: 2a:85:14:80:04:45:3e:e2:e5:58:6e:87:31:41:66:95:b1:63: 49:87:f3:06:4e:dc:df:e4:fb:12:c7:64:e6:a1:36:85:9d:89: 03:d1:10:66:7e:47:8e:99:7f:e0:36:73:fa:4d:17:b9:46:f9: 29:bb:f4:f2:dc:4b:ac:93:72:fa:9f:cc:6b:29:00:78:43:c1: d3:32:a5:93:78:a8:bb:41:d2:51:f6:ac:23:68:c1:3b:c4:a6: 86:6e:a8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGavH608AoMTW1BhNPBjYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwOTIyMDAwMTMyWhcNMjYwOTIzMDAwMTMyWjAzMTEwLwYDVQQD EygxNDJiZDcyOTgxOWE1OWVmMDFlMTYwYTdkMjRhNGQ0MjRiMWQwZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v5/IExw9IkPjkL1PlB2ykWSUIce 5MzqkTszegAvPy2qu9Uf6Eu9zF2sr7mmWDbJXIHi9N5qy7OgmvP81GWjsS5q5FCa gmXtPOQX8Rqp0bsfGzHyzwFMMcEVz1ChA6YDmobhc21vM5o9ZHGB4te+fHYBW+Cu bH9sXS8TpR1LgHY4Yf16SYd1qmodyX/jnENEnm+ChAtFDXMbSL9kHAoUIaUeN+HV uYu5HmYDdwFdtsc25PiXWAOs6KUhk0wrqmWR+eThsEYghHsq5zOjzSE47B48ItRl MMgooSO65qoGTmCKJFvq2yyqbw6D8ntbwYELXWFRgrwKG9D91pshD3ZOqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQr1ymBmlnvAeFgp9JKTUJLHQ5/MB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka4gLFuN KJYeYpH9WinEuxyE/Waq+e7kEAJb02oaKioCloroi4geZEodTYEGWrs+LyoDgB94 pzrEpMX0GVwY+j30CYmC0+72AtkGstWfaIVz/qA0g2FepaLMpGef6odmtWyHdEWX vQXJU6sNZtOIV5OrVPmV6CTK2vnHzmlVIdwPzA9+iYfxMiZ7mox4OWOOdhjCkjcA i8h8mhmZ0TkoWLxUKoUUgARFPuLlWG6HMUFmlbFjSYfzBk7c3+T7Esdk5qE2hZ2J A9EQZn5Hjpl/4DZz+k0XuUb5Kbv08txLrJNy+p/MaykAeEPB0zKlk3iou0HSUfas I2jBO8Smhm6oiw== -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:41 2026 by rpki-client