$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: FbamVhhkl2Q9pDeQ95psf69Lq8GKAGO1ivYj9leBfzI= Subject key identifier: 3B:43:3B:48:1A:D0:7B:F8:BF:31:62:7B:85:1E:13:87:77:5B:B8:B8 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019EBF5B3827AA50EDC98E0960840EB251CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 10DC Signing time: Sat 13 Jun 2026 05:01:26 +0000 Manifest this update: Sat 13 Jun 2026 05:01:26 +0000 Manifest next update: Sun 14 Jun 2026 05:01:26 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: JslUzvVBxu/jtMNhWI8e5wJuPfbB2Z+aI7BjUxWfj2c=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:5b:38:27:aa:50:ed:c9:8e:09:60:84:0e:b2:51:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jun 13 05:01:26 2026 GMT Not After : Jun 14 05:01:26 2026 GMT Subject: CN=3b433b481ad07bf8bf31627b851e1387775bb8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ec:ca:bb:29:eb:cf:1d:b7:19:c9:db:fa:bc: 7f:55:0b:a5:e7:d2:d2:67:f8:95:1f:68:ed:59:66: 05:1f:49:99:12:12:4f:e8:67:56:54:75:87:b9:9b: ae:e6:33:48:3e:6d:c0:a7:fe:1d:2a:57:5d:e5:67: 84:51:5f:5e:7f:a5:00:bd:82:1f:dd:dd:0d:22:07: 13:e9:fe:ed:08:84:6e:dd:ee:01:65:e7:8f:b6:c4: 22:24:fe:53:fb:f0:32:1c:45:1c:09:81:cc:02:cd: 7e:9c:0c:8f:dd:ca:65:0d:80:21:6e:67:26:c1:8c: e7:64:44:ff:35:fe:dd:7d:ca:93:bc:3d:f1:b0:09: f5:15:5b:26:be:34:bd:b5:09:c6:5c:fe:a8:2f:fd: 6d:1a:f7:b9:6e:d1:83:91:3e:91:cb:01:d1:2a:8d: f8:3b:23:57:2d:0a:19:ca:b1:e6:cb:b5:21:29:c7: c0:0a:4b:0b:2b:57:b7:f6:6c:26:8a:fc:91:ba:08: 1a:c6:88:47:aa:21:a1:89:d9:d9:19:ed:0a:b4:32: e2:a4:54:12:65:69:ff:31:8f:de:1c:eb:6d:5e:03: 0b:2d:fd:c6:53:a3:e2:06:4f:86:63:2f:f0:aa:60: b0:8c:48:10:30:a2:49:77:d2:65:dd:49:30:1b:ac: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:43:3B:48:1A:D0:7B:F8:BF:31:62:7B:85:1E:13:87:77:5B:B8:B8 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4c:b2:8e:68:66:ff:95:c9:9a:ba:4d:1c:ce:b6:f7:43:af: 6b:ea:cf:b8:c5:cb:df:df:73:4d:70:4d:e1:2c:74:b8:04:b3: 0e:10:0c:cb:c2:09:b3:78:d4:41:33:f4:ec:20:da:2f:30:4a: 76:c5:31:8b:1b:17:cf:2a:74:ac:97:cb:9b:14:ae:c9:6b:cf: 48:b8:42:b8:4b:52:6d:c6:81:32:24:03:ca:fe:59:17:1c:2c: 8c:cd:a4:61:84:ac:a9:f6:1d:54:b1:f3:9a:f4:fe:c5:f6:fe: bf:66:6c:0b:30:50:94:41:7b:16:a2:4a:5e:29:87:d7:bb:9c: d9:7e:a2:5f:99:a0:1c:a2:36:96:0c:62:42:30:ba:2f:ef:73: d7:24:44:0a:43:e3:5e:bd:5b:5d:15:dd:11:87:e1:cd:87:5b: df:4f:2e:98:a8:0c:c3:d8:f6:7c:3c:a9:30:f7:31:30:7d:a3: 05:f7:15:c4:3d:8a:ef:3a:db:64:ef:48:1d:e0:59:3f:19:98: 6f:d3:b5:26:cc:8a:83:33:b2:7d:de:be:32:af:52:f3:e4:a0: a0:d7:a6:d2:3a:18:f6:17:c2:c7:5f:9b:ce:cc:81:80:ba:13: e1:6e:77:e2:ad:70:8a:ee:1d:11:2e:4e:1d:af:a1:2c:5e:87: 65:70:f9:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/WzgnqlDtyY4JYIQOslHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwNjEzMDUwMTI2WhcNMjYwNjE0MDUwMTI2WjAzMTEwLwYDVQQD EygzYjQzM2I0ODFhZDA3YmY4YmYzMTYyN2I4NTFlMTM4Nzc3NWJiOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uzKuynrzx23Gcnb+rx/VQul59LS Z/iVH2jtWWYFH0mZEhJP6GdWVHWHuZuu5jNIPm3Ap/4dKldd5WeEUV9ef6UAvYIf 3d0NIgcT6f7tCIRu3e4BZeePtsQiJP5T+/AyHEUcCYHMAs1+nAyP3cplDYAhbmcm wYznZET/Nf7dfcqTvD3xsAn1FVsmvjS9tQnGXP6oL/1tGve5btGDkT6RywHRKo34 OyNXLQoZyrHmy7UhKcfACksLK1e39mwmivyRuggaxohHqiGhidnZGe0KtDLipFQS ZWn/MY/eHOttXgMLLf3GU6PiBk+GYy/wqmCwjEgQMKJJd9Jl3UkwG6wr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtDO0ga0Hv4vzFie4UeE4d3W7i4MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0yyjmhm /5XJmrpNHM6290Ova+rPuMXL399zTXBN4Sx0uASzDhAMy8IJs3jUQTP07CDaLzBK dsUxixsXzyp0rJfLmxSuyWvPSLhCuEtSbcaBMiQDyv5ZFxwsjM2kYYSsqfYdVLHz mvT+xfb+v2ZsCzBQlEF7FqJKXimH17uc2X6iX5mgHKI2lgxiQjC6L+9z1yRECkPj Xr1bXRXdEYfhzYdb308umKgMw9j2fDypMPcxMH2jBfcVxD2K7zrbZO9IHeBZPxmY b9O1JsyKgzOyfd6+Mq9S8+SgoNem0joY9hfCx1+bzsyBgLoT4W534q1wiu4dES5O Ha+hLF6HZXD5wQ== -----END CERTIFICATE-----Generated at Sat Jun 13 09:50:09 2026 by rpki-client