$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: W7USpJxapnyfTiAB4aNw0Tt05Qr8kLxBlSRDvyv+8nA= Subject key identifier: F1:40:02:72:14:63:C9:4D:D4:68:42:05:FA:6E:BE:78:72:F2:29:B6 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 01A1DF4C4B89A2B0A826EABBC740F9A7202A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 127B Signing time: Sun 15 Nov 2026 13:01:21 +0000 Manifest this update: Sun 15 Nov 2026 13:01:21 +0000 Manifest next update: Mon 16 Nov 2026 13:01:21 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: k2Z9HfzZPZ/Aag+iRlBrPU7WY7DVd+zkK7e5LpMstDQ=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: ZRAagYxm8nFiYY3czShh5lyp9no.roa (hash: 5x6jeH3h5XRxgaIjgqUtVzT6iAVsz4jj0NUwGNa+3aw=) 8: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 9: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 10: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:4c:4b:89:a2:b0:a8:26:ea:bb:c7:40:f9:a7:20:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Nov 15 13:01:21 2026 GMT Not After : Nov 16 13:01:21 2026 GMT Subject: CN=f14002721463c94dd4684205fa6ebe7872f229b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:ea:5c:c7:ad:55:78:7c:ed:0c:72:5f:fa: 43:1f:b8:3f:f8:f0:eb:2b:3a:f9:3a:08:72:a3:33: 4b:d6:74:7f:13:73:b3:b5:32:35:0d:38:ff:c3:d8: 9f:90:24:17:11:ce:10:10:cf:f1:b1:92:d0:36:b8: ba:47:fc:35:9e:e2:37:da:a5:6e:a1:21:e9:e2:a2: 18:9e:82:0b:77:f9:8f:eb:ec:64:08:3e:8a:68:68: 28:c6:2c:f2:ef:96:29:41:d4:5f:30:e3:92:67:5a: 4b:e2:6a:e1:ea:28:03:8d:60:ea:fa:3d:6c:db:98: 73:48:18:e0:08:ef:15:6e:31:0d:d7:55:13:a6:06: d6:c4:5e:fd:3d:66:03:21:91:18:25:39:b4:a6:af: 96:e6:c3:4b:b4:09:54:cf:01:c7:5e:0c:a4:2b:be: e5:cb:3b:de:2c:ca:1d:e9:5f:02:77:02:11:98:6d: 8b:ec:c5:6e:60:16:a0:3e:e8:61:c5:3b:36:df:a6: 60:cb:ba:04:32:ea:cf:8c:70:dd:3d:d9:ac:e5:bd: 15:09:99:e1:d6:34:aa:a0:ea:69:bb:27:f0:06:2a: 6d:95:a2:aa:d0:43:0e:b1:a4:82:96:45:bd:60:46: 00:1b:ad:c9:48:5f:b3:f1:cc:44:c0:da:36:0d:92: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:02:72:14:63:C9:4D:D4:68:42:05:FA:6E:BE:78:72:F2:29:B6 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1d:7e:6e:e5:d9:d0:15:da:1e:aa:d7:01:b1:8b:b3:dd:fe: f9:67:56:eb:c2:ff:e9:b7:94:b0:31:f9:36:d5:e6:0d:59:b0: 15:51:9c:c5:0a:82:ca:5e:f6:98:41:f3:95:8a:3e:8d:8c:e5: b2:cd:a0:77:ef:d5:79:25:ea:09:cc:49:2a:ff:b2:f4:97:8c: 3d:46:cc:28:87:73:50:97:12:24:13:70:00:17:74:42:a5:44: ab:26:2f:02:3e:09:84:99:c0:5e:46:6f:75:37:14:3d:62:4d: b4:fe:4b:7e:9d:c3:06:66:af:f9:23:31:b3:08:9d:3a:d7:c0: ae:d3:02:73:bb:92:ea:a5:8a:13:63:84:b6:4e:de:96:2b:9e: 4f:bd:68:7c:4f:5d:f0:84:5d:44:e4:db:98:ac:c2:07:f0:0b: 4f:60:a5:05:f5:7f:31:d7:f3:7b:7e:2c:1e:42:bf:32:0a:87: d6:bf:57:c7:1e:f3:53:61:51:fa:f9:8f:43:17:05:34:08:67: a3:e7:33:b4:c1:52:78:e7:d9:aa:42:9d:46:91:91:c3:75:7e: 74:06:9a:18:e1:b1:61:d4:44:7a:7b:af:90:46:64:c2:b1:1e: f6:e3:a1:3e:99:7a:fe:6f:88:70:d4:3a:3f:a0:a6:2e:62:4e: 9f:d4:ff:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfTEuJorCoJuq7x0D5pyAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYxMTE1MTMwMTIxWhcNMjYxMTE2MTMwMTIxWjAzMTEwLwYDVQQD EyhmMTQwMDI3MjE0NjNjOTRkZDQ2ODQyMDVmYTZlYmU3ODcyZjIyOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDqXMetVXh87QxyX/pDH7g/+PDr Kzr5OghyozNL1nR/E3OztTI1DTj/w9ifkCQXEc4QEM/xsZLQNri6R/w1nuI32qVu oSHp4qIYnoILd/mP6+xkCD6KaGgoxizy75YpQdRfMOOSZ1pL4mrh6igDjWDq+j1s 25hzSBjgCO8VbjEN11UTpgbWxF79PWYDIZEYJTm0pq+W5sNLtAlUzwHHXgykK77l yzveLMod6V8CdwIRmG2L7MVuYBagPuhhxTs236Zgy7oEMurPjHDdPdms5b0VCZnh 1jSqoOppuyfwBiptlaKq0EMOsaSClkW9YEYAG63JSF+z8cxEwNo2DZISOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFAAnIUY8lN1GhCBfpuvnhy8im2MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB1+buXZ 0BXaHqrXAbGLs93++WdW68L/6beUsDH5NtXmDVmwFVGcxQqCyl72mEHzlYo+jYzl ss2gd+/VeSXqCcxJKv+y9JeMPUbMKIdzUJcSJBNwABd0QqVEqyYvAj4JhJnAXkZv dTcUPWJNtP5Lfp3DBmav+SMxswidOtfArtMCc7uS6qWKE2OEtk7eliueT71ofE9d 8IRdROTbmKzCB/ALT2ClBfV/Mdfze34sHkK/MgqH1r9Xxx7zU2FR+vmPQxcFNAhn o+cztMFSeOfZqkKdRpGRw3V+dAaaGOGxYdREenuvkEZkwrEe9uOhPpl6/m+IcNQ6 P6CmLmJOn9T/BQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:43:36 2026 by rpki-client