$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: URHlxZovAQiLaHo8CAPopcxa9lgwi77bM60HFgzrWtI= Subject key identifier: 4D:EA:2D:D4:22:DE:9E:2E:C2:AA:E4:37:DB:07:83:DF:ED:5D:A7:9A Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019CAA21C4EA81C925493A4E2E127792D2EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 11D3 Signing time: Sun 01 Mar 2026 16:01:05 +0000 Manifest this update: Sun 01 Mar 2026 16:01:05 +0000 Manifest next update: Mon 02 Mar 2026 16:01:05 +0000 Files and hashes: 1: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (hash: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk=) 2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=) 3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=) 4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=) 5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=) 6: E3X5DvCSlkdtfxAadUSESD3eJrk.roa (hash: kCGyuLKDilqRCLENtFOYzrUVWzlMBuvjueB/aZz2GHM=) 7: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=) 8: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=) 9: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=) 10: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=) 11: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=) 12: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=) 13: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=) 14: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=) 15: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=) 16: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=) 17: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: cZG70E2KBoZOjJHoluKnI2zE/pG9JqC3wnWav727vNk=) 18: efcP8-qp6rGIDUknP6ranBAFenc.roa (hash: eCznaG89xquMPr3uYbjxlMYwYWoDIZp7pfe+xehKenM=) 19: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=) 20: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=) 21: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=) 22: pUUSDW7JRITPLH3NewhxW4cUvRY.roa (hash: qkr6YH2kb+kFgIzqY0pDMe+J2a9UaWnHDsLI3Fg85+Y=) 23: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=) 24: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=) 25: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=) 26: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:c4:ea:81:c9:25:49:3a:4e:2e:12:77:92:d2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Mar 1 16:01:05 2026 GMT Not After : Mar 2 16:01:05 2026 GMT Subject: CN=4dea2dd422de9e2ec2aae437db0783dfed5da79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:05:eb:20:01:8d:21:16:35:d8:70:5c:ba: 35:30:eb:89:e2:c2:0e:99:54:07:15:7a:29:6c:8d: 30:43:81:ee:65:37:0d:28:a0:72:9f:30:00:ce:a3: 5c:11:48:a0:d5:dc:62:8f:86:45:da:f3:dc:6f:ca: b9:53:3d:23:5c:75:21:c7:b1:19:2c:5e:c3:e7:3a: b3:03:2a:24:1e:c8:fc:f0:1a:46:f3:f8:2d:89:ff: e9:5f:7e:7c:dd:3d:84:c1:c9:e4:cc:04:78:76:33: 2b:9b:b0:72:20:40:f8:dc:78:4a:a6:36:f3:83:6e: 61:11:a2:64:1a:aa:7d:23:f0:d5:19:a0:62:5c:a6: c3:50:e8:e3:10:c3:5c:ba:7c:cb:6a:84:57:43:95: 9f:6e:7d:43:0f:b6:9e:b4:f8:a9:57:68:6e:ad:a0: d6:5c:5a:02:86:ca:4e:a6:10:ac:f8:ee:eb:e1:f4: b6:ed:bd:78:83:64:c3:a1:0d:34:8f:ce:0c:e0:1e: 03:98:5f:b0:48:cd:1d:47:97:a5:77:8c:41:d9:08: 18:e3:79:2f:f7:9e:88:cb:24:54:3b:e2:d6:1f:8c: 88:0c:67:6d:8c:1b:f2:5b:fa:52:79:1c:74:59:87: 00:e8:80:f1:27:da:9f:12:44:4b:9f:ea:8c:33:c3: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:2D:D4:22:DE:9E:2E:C2:AA:E4:37:DB:07:83:DF:ED:5D:A7:9A X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:d0:5a:a0:3f:a7:9f:b9:21:6c:85:83:7a:d1:6c:ab:2c: ee:91:34:ad:66:f3:c5:a2:90:3f:7c:73:2b:dd:7b:ac:fe:f4: 9c:e6:8b:c0:e3:91:f4:17:a4:b1:7e:1f:40:75:88:69:4e:c9: 08:05:0b:66:d8:bd:eb:13:18:fb:01:12:ea:d9:d1:51:32:2e: 85:66:10:b2:91:69:58:82:dc:8d:4d:e2:d2:b9:c1:74:cb:6b: 72:5a:d3:07:53:bb:44:36:7b:47:42:06:a8:b4:ef:5c:79:d1: 42:31:f5:0e:5d:ae:6f:d6:e4:fc:96:2f:b4:bb:27:76:65:64: 69:6e:98:e5:e2:4a:91:56:78:ad:ce:91:12:04:7d:f9:e9:03: ec:b8:34:72:56:36:2a:39:ad:f1:57:97:86:dc:e0:3e:5c:ba: 67:01:1e:a5:a8:2b:7e:62:5b:b2:6e:3d:d6:a9:54:1c:15:e6: b6:79:af:70:95:6d:c9:74:96:38:e5:bf:61:cb:fa:d1:6f:48: 8c:78:d1:95:b6:07:05:cd:9e:cf:ba:49:87:7b:ae:1e:f4:00: d4:5f:85:40:ff:3d:26:49:f8:b6:ef:bf:f6:8e:29:dd:62:e3: 15:07:6e:31:fd:19:3e:06:46:6d:62:2c:47:0b:6c:bd:f4:fd: a0:c2:cd:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIcTqgcklSTpOLhJ3ktLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMzAxMTYwMTA1WhcNMjYwMzAyMTYwMTA1WjAzMTEwLwYDVQQD Eyg0ZGVhMmRkNDIyZGU5ZTJlYzJhYWU0MzdkYjA3ODNkZmVkNWRhNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nIF6yABjSEWNdhwXLo1MOuJ4sIO mVQHFXopbI0wQ4HuZTcNKKBynzAAzqNcEUig1dxij4ZF2vPcb8q5Uz0jXHUhx7EZ LF7D5zqzAyokHsj88BpG8/gtif/pX3583T2EwcnkzAR4djMrm7ByIED43HhKpjbz g25hEaJkGqp9I/DVGaBiXKbDUOjjEMNcunzLaoRXQ5Wfbn1DD7aetPipV2huraDW XFoChspOphCs+O7r4fS27b14g2TDoQ00j84M4B4DmF+wSM0dR5eld4xB2QgY43kv 956IyyRUO+LWH4yIDGdtjBvyW/pSeRx0WYcA6IDxJ9qfEkRLn+qMM8ORZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3qLdQi3p4uwqrkN9sHg9/tXaeaMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALfQWqA/ p5+5IWyFg3rRbKss7pE0rWbzxaKQP3xzK917rP70nOaLwOOR9BeksX4fQHWIaU7J CAULZti96xMY+wES6tnRUTIuhWYQspFpWILcjU3i0rnBdMtrclrTB1O7RDZ7R0IG qLTvXHnRQjH1Dl2ub9bk/JYvtLsndmVkaW6Y5eJKkVZ4rc6REgR9+ekD7Lg0clY2 Kjmt8VeXhtzgPly6ZwEepagrfmJbsm491qlUHBXmtnmvcJVtyXSWOOW/Ycv60W9I jHjRlbYHBc2ez7pJh3uuHvQA1F+FQP89Jkn4tu+/9o4p3WLjFQduMf0ZPgZGbWIs RwtsvfT9oMLNPg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:36 2026 by rpki-client