$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: +2nEy+MEq5qdHMAT+c4ip3Yqoe3JKh8Eg+/+2s7iVGI= Subject key identifier: 9B:DC:09:4D:09:8F:A8:57:AD:44:3E:96:3D:8D:7D:9B:37:97:A2:44 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019CA8339C09EEC2BB60DB71BAF530DC6CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 11D2 Signing time: Sun 01 Mar 2026 07:01:20 +0000 Manifest this update: Sun 01 Mar 2026 07:01:20 +0000 Manifest next update: Mon 02 Mar 2026 07:01:20 +0000 Files and hashes: 1: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (hash: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk=) 2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=) 3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=) 4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=) 5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=) 6: E3X5DvCSlkdtfxAadUSESD3eJrk.roa (hash: kCGyuLKDilqRCLENtFOYzrUVWzlMBuvjueB/aZz2GHM=) 7: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=) 8: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=) 9: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=) 10: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=) 11: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=) 12: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=) 13: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=) 14: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=) 15: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=) 16: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=) 17: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: MVlJJKxe1FUjWaoImlMme13+3zO1d3IV6qpVvTP5zYc=) 18: efcP8-qp6rGIDUknP6ranBAFenc.roa (hash: eCznaG89xquMPr3uYbjxlMYwYWoDIZp7pfe+xehKenM=) 19: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=) 20: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=) 21: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=) 22: pUUSDW7JRITPLH3NewhxW4cUvRY.roa (hash: qkr6YH2kb+kFgIzqY0pDMe+J2a9UaWnHDsLI3Fg85+Y=) 23: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=) 24: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=) 25: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=) 26: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:33:9c:09:ee:c2:bb:60:db:71:ba:f5:30:dc:6c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Mar 1 07:01:20 2026 GMT Not After : Mar 2 07:01:20 2026 GMT Subject: CN=9bdc094d098fa857ad443e963d8d7d9b3797a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:22:02:a3:3c:b1:a5:62:26:c0:c3:c8:42: 45:c8:f0:2c:d8:a4:95:d7:7b:d8:83:b2:51:36:e2: 45:31:26:b1:b1:f6:72:14:59:15:67:d8:29:3f:f7: 8f:a1:ec:2c:41:a4:58:ce:03:04:21:13:83:26:10: 20:39:d1:a0:30:e7:26:ce:98:50:88:44:a8:bf:71: 21:ab:59:f9:5d:ee:72:b1:7c:bc:33:b9:46:60:78: 6e:80:a9:fb:54:54:12:75:af:80:5f:14:74:df:1f: 7d:ed:f0:ca:34:4d:91:c4:56:01:52:2b:d4:a5:4b: 76:a1:76:f7:4d:0d:76:6d:23:e6:16:c2:db:60:01: 45:4a:b4:b9:46:1a:7e:53:56:3a:7a:79:96:ef:b3: fe:54:c2:b0:ae:6d:10:e2:14:9c:12:ce:b5:7e:5f: 99:44:c5:20:ce:60:46:45:6e:38:58:5e:58:23:c2: f6:8a:91:4e:fe:93:66:2f:12:cf:e1:3a:f5:79:6e: b3:8a:11:ed:6e:cf:1b:ff:63:d8:39:57:a3:38:bf: 2a:02:a3:d0:39:45:1c:05:6e:ef:e2:26:da:6b:bb: 42:3b:3e:03:c2:d7:e5:55:41:85:a6:9a:88:c0:5d: 8e:fb:35:4b:fb:29:9d:6f:df:6f:f8:50:91:d9:79: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:09:4D:09:8F:A8:57:AD:44:3E:96:3D:8D:7D:9B:37:97:A2:44 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e0:23:48:de:96:85:56:25:0f:93:07:76:d7:05:c4:69:33: d2:11:a3:b0:bd:e7:2e:31:34:d0:c2:64:84:93:7b:b8:79:ff: 7d:6f:3a:86:db:ed:78:eb:f9:d3:6e:60:88:9c:52:28:e2:60: f4:2b:c5:a3:19:5a:2f:a0:45:de:76:4f:92:9f:8d:c9:78:d4: c6:dc:61:1f:68:cb:9d:4f:aa:fe:f1:23:8b:40:ed:4b:d6:44: 13:48:03:a1:24:1d:4b:e4:02:03:91:9c:a7:de:19:66:0f:a3: 31:ad:16:37:07:1e:26:1f:e6:17:50:f4:70:49:db:b2:b4:6e: 84:f1:e5:25:e9:3e:7d:f9:50:3b:3d:d3:de:08:53:5d:ee:65: 1d:60:95:65:2e:5b:43:ee:81:fc:a1:0d:25:14:1c:70:dd:c0: 6a:8a:51:ce:5b:31:bb:c9:cf:9a:fc:b8:2d:52:75:8d:9e:ed: 0a:80:f6:e4:70:b9:62:50:36:a6:37:e2:a1:14:ce:3f:20:ae: 7c:b0:18:32:cb:c3:33:8e:71:42:b4:d7:d5:72:3e:bd:30:4f: 6c:6d:60:c3:79:2e:3a:6a:32:1f:c5:18:e6:b2:62:e3:c8:ae: 47:82:ee:ae:92:4b:92:65:0f:ac:76:bc:05:a0:9e:6e:d3:b9: d4:60:da:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyoM5wJ7sK7YNtxuvUw3GziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMzAxMDcwMTIwWhcNMjYwMzAyMDcwMTIwWjAzMTEwLwYDVQQD Eyg5YmRjMDk0ZDA5OGZhODU3YWQ0NDNlOTYzZDhkN2Q5YjM3OTdhMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz44iAqM8saViJsDDyEJFyPAs2KSV 13vYg7JRNuJFMSaxsfZyFFkVZ9gpP/ePoewsQaRYzgMEIRODJhAgOdGgMOcmzphQ iESov3Ehq1n5Xe5ysXy8M7lGYHhugKn7VFQSda+AXxR03x997fDKNE2RxFYBUivU pUt2oXb3TQ12bSPmFsLbYAFFSrS5Rhp+U1Y6enmW77P+VMKwrm0Q4hScEs61fl+Z RMUgzmBGRW44WF5YI8L2ipFO/pNmLxLP4Tr1eW6zihHtbs8b/2PYOVejOL8qAqPQ OUUcBW7v4ibaa7tCOz4DwtflVUGFppqIwF2O+zVL+ymdb99v+FCR2XlPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvcCU0Jj6hXrUQ+lj2NfZs3l6JEMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOAjSN6W hVYlD5MHdtcFxGkz0hGjsL3nLjE00MJkhJN7uHn/fW86htvteOv5025giJxSKOJg 9CvFoxlaL6BF3nZPkp+NyXjUxtxhH2jLnU+q/vEji0DtS9ZEE0gDoSQdS+QCA5Gc p94ZZg+jMa0WNwceJh/mF1D0cEnbsrRuhPHlJek+fflQOz3T3ghTXe5lHWCVZS5b Q+6B/KENJRQccN3AaopRzlsxu8nPmvy4LVJ1jZ7tCoD25HC5YlA2pjfioRTOPyCu fLAYMsvDM45xQrTX1XI+vTBPbG1gw3kuOmoyH8UY5rJi48iuR4LurpJLkmUPrHa8 BaCebtO51GDaPg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:29 2026 by rpki-client