$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: qY7liKR9H08T75fbxim95+zJX9pfKdkPSy+/iyZ7hcM= Subject key identifier: 32:F8:A1:CB:39:72:5D:74:93:81:61:DC:EE:76:74:6A:F1:84:94:95 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 01A0DC16CA2CBBA88A5885E8013F0B2F6DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 0614 Signing time: Sat 26 Sep 2026 05:01:16 +0000 Manifest this update: Sat 26 Sep 2026 05:01:16 +0000 Manifest next update: Sun 27 Sep 2026 05:01:16 +0000 Files and hashes: 1: 1WjvRzOKhnD2a533QX-zWGhy6mU.roa (hash: H5qbHbDAL7jdx9T9KEl6Xakz8nWIjJ0cE1oQa7xKVLA=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (hash: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=) 4: 4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa (hash: N/6K00b1BuFhTw/CFjj1QlwHlKUxym0tqK2UkGVKAtg=) 5: HTNYR2yr94a8EGiK6hAbvtY6o6k.roa (hash: KMWU4G6lDxx80Y3CEw+h1nuvz/CTjsjL+YK1q+mIGr0=) 6: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=) 7: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 8: Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa (hash: LJOqk2hOPW4zF0QKMT6vQWzbYu9x4wpSjNeypKNolNc=) 9: Nb9JZyAefPbjpxi2cVC2-yfzww8.roa (hash: jl0bmDnzSH6frV+fkRxoTDwv3W5rPCZjAk979Fat9xw=) 10: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 11: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=) 12: SAdG_ltq21So6we7PAnL5y8GnAE.roa (hash: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=) 13: TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa (hash: LvtCwiSgCnn6r8P4XA2+zpyeRQdDCd4zCmE86m3gSlM=) 14: XlpVEpCaKbvVp_iIY2abwrGuU7A.roa (hash: PuO/riDrTsvlx5rAd1GX11Jvzo3pxxNGOivQ4nq5cYA=) 15: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 16: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 17: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 18: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (hash: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=) 19: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=) 20: hH36JJO_rAsnohFls8GFE7NlzVk.roa (hash: jYlrJWAsZ9W20ZvqcFDoHNdl1/TJ/d5Ssc/5Jh190NE=) 21: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 22: mb_8DQNRhnYeblZoIpzg5HhO82I.roa (hash: CV9HGV1yyURPXluHri4wm+4FyNp6vBA+4AFnDvt7gTU=) 23: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=) 24: pViHmwqQeVqQnj5hkym3ThYCYhU.roa (hash: rbWNEzeG5z5UiJBRWTWbbSTYvlpCEEASp5X1FRCLxnc=) 25: qlVHtidyMtTQ064ypejRJRTrhIs.roa (hash: 4mWiwniRAL4tXa87dTnfBRs6/ACyraRAiFOgqpNYILY=) 26: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 27: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=) 28: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (hash: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=) 29: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=) 30: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=) 31: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: IKMJkVsuR0ulB+27Jt9ki75sXDfkG+/WMO4CXy91qyE=) 32: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:16:ca:2c:bb:a8:8a:58:85:e8:01:3f:0b:2f:6d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Sep 26 05:01:16 2026 GMT Not After : Sep 27 05:01:16 2026 GMT Subject: CN=32f8a1cb39725d74938161dcee76746af1849495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:a1:b3:43:47:15:b9:76:61:9f:3e:b0:47: 00:a0:37:2c:25:8a:c7:be:b8:31:32:b4:54:1b:58: d4:5d:96:a9:ef:bd:27:43:98:5c:0d:4f:14:d3:6a: 5d:2c:f1:a2:14:27:80:10:9d:79:16:2f:78:ba:e0: 80:58:51:ed:fe:a0:0f:90:df:c2:ff:15:5b:84:82: d6:4a:36:a3:cd:78:24:1b:72:b9:d9:57:6f:1f:99: fa:9a:cb:c2:31:02:db:83:23:7e:70:cc:65:e2:80: e2:f8:8b:d8:74:24:1e:8f:9c:90:3d:53:88:01:4f: 7d:0f:b2:51:12:4a:7d:cf:53:ed:8d:8b:61:95:25: 3e:90:7d:fe:56:2d:66:2a:4a:0e:74:dc:77:c6:29: 5a:c0:c3:7c:f5:1c:9a:b6:17:d5:d8:7f:29:ca:8b: 09:62:02:e7:54:d6:6b:92:55:c1:a0:7c:20:38:32: c8:1d:a3:b6:c0:8e:c8:3a:d2:87:2a:95:58:56:e6: fd:63:8e:71:30:8c:7e:f2:08:53:5a:d8:23:4f:0f: e6:7a:d8:8f:60:ef:3a:9e:02:3b:08:1e:27:ae:f9: 3b:19:e5:e4:28:58:a0:7c:2b:0f:23:c3:ae:14:69: 31:4b:5d:cc:16:5c:5d:9a:e9:f5:34:ae:56:fc:62: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:A1:CB:39:72:5D:74:93:81:61:DC:EE:76:74:6A:F1:84:94:95 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:64:b1:e1:8a:0c:d7:72:27:7e:27:48:25:3d:99:c2:c6:97: 1e:40:e5:5c:4e:69:48:9f:dd:fa:20:1d:3f:b9:a3:40:00:1e: 4f:4c:6a:3d:46:a0:d2:84:8b:d9:c7:de:78:c9:cd:aa:1a:4b: 36:a9:e4:04:e3:f1:ac:9a:57:09:24:82:22:72:36:dc:32:95: 08:24:f1:ed:76:22:1f:1b:69:13:d6:8a:a1:19:8e:87:7c:9c: 41:7f:15:9a:81:43:02:5d:f6:c3:6c:9b:7f:91:83:ca:09:da: 43:75:d2:60:26:1d:e8:10:c6:16:a7:4b:63:a9:77:dc:30:d5: f2:33:15:13:0b:fd:4d:2e:18:a1:96:cf:63:10:4d:e2:c6:59: 87:eb:2d:a3:50:57:df:b0:a2:c8:a2:6f:d2:86:12:dd:ab:9a: f6:6f:4c:be:11:83:78:84:68:ce:fb:31:7d:b3:f0:27:91:5b: 90:e4:50:d7:fb:8d:fc:d6:59:a4:2c:c2:62:ac:7d:4a:96:43: 46:6c:34:47:3a:8f:a4:e0:6f:17:ed:53:ac:88:b5:41:5b:a5: 9c:f8:a9:9d:06:22:c9:79:c9:5e:bb:eb:cd:65:3a:a9:02:88: 50:53:94:c2:1e:52:64:91:68:dc:58:64:e5:7f:e4:d4:d0:0d: 3c:ac:59:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcFsosu6iKWIXoAT8LL23ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwOTI2MDUwMTE2WhcNMjYwOTI3MDUwMTE2WjAzMTEwLwYDVQQD EygzMmY4YTFjYjM5NzI1ZDc0OTM4MTYxZGNlZTc2NzQ2YWYxODQ5NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGhs0NHFbl2YZ8+sEcAoDcsJYrH vrgxMrRUG1jUXZap770nQ5hcDU8U02pdLPGiFCeAEJ15Fi94uuCAWFHt/qAPkN/C /xVbhILWSjajzXgkG3K52VdvH5n6msvCMQLbgyN+cMxl4oDi+IvYdCQej5yQPVOI AU99D7JREkp9z1PtjYthlSU+kH3+Vi1mKkoOdNx3xilawMN89RyathfV2H8pyosJ YgLnVNZrklXBoHwgODLIHaO2wI7IOtKHKpVYVub9Y45xMIx+8ghTWtgjTw/metiP YO86ngI7CB4nrvk7GeXkKFigfCsPI8OuFGkxS13MFlxdmun1NK5W/GKaLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL4ocs5cl10k4Fh3O52dGrxhJSVMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2Sx4YoM 13InfidIJT2ZwsaXHkDlXE5pSJ/d+iAdP7mjQAAeT0xqPUag0oSL2cfeeMnNqhpL NqnkBOPxrJpXCSSCInI23DKVCCTx7XYiHxtpE9aKoRmOh3ycQX8VmoFDAl32w2yb f5GDygnaQ3XSYCYd6BDGFqdLY6l33DDV8jMVEwv9TS4YoZbPYxBN4sZZh+sto1BX 37CiyKJv0oYS3aua9m9MvhGDeIRozvsxfbPwJ5FbkORQ1/uN/NZZpCzCYqx9SpZD Rmw0RzqPpOBvF+1TrIi1QVulnPipnQYiyXnJXrvrzWU6qQKIUFOUwh5SZJFo3Fhk 5X/k1NANPKxZIg== -----END CERTIFICATE-----Generated at Sat Sep 26 08:03:16 2026 by rpki-client