
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier: eD2rxhfjhis2MVv9cTV7kPoJtuaGql6NnPPdo0/IH5w=
Subject key identifier: 40:98:3B:26:69:A1:81:19:B7:24:E3:EF:E5:51:78:8F:AF:1F:0C:8F
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019EBF91A926FE0A56F1B3525B74C03B6B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number: 196A
Signing time: Sat 13 Jun 2026 06:00:54 +0000
Manifest this update: Sat 13 Jun 2026 06:00:54 +0000
Manifest next update: Sun 14 Jun 2026 06:00:54 +0000
Files and hashes: 1: 6SfzyA20maGiI5XJBQeDm_u97nY.roa (hash: u3qBuRlWiB0K8K8vlPB1p6jUd1Xd8XzeiX/KEClwly8=)
2: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=)
3: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=)
4: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=)
5: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=)
6: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=)
7: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=)
8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=)
9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=)
10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=)
11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=)
12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=)
13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=)
14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=)
15: UWaCKuifSAXQ_q_qbqARMjeLkuk.roa (hash: xqvi3BTcN1RVOAgMAoZQMY8MT30m6KbWtN2qeSF/sR8=)
16: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=)
17: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=)
18: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=)
19: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=)
20: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=)
21: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=)
22: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=)
23: rtnNKdzuer1cLaHeVd2Efr32DmI.roa (hash: hrsJtWgWWgXT2uF4n4YErrta4DlZR555cIdEsyDsEYM=)
24: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=)
25: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=)
26: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: ILqIgbkkc2l7Wx1b0ySXfWu8RvsMe6xrCXd938uzcs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a9:26:fe:0a:56:f1:b3:52:5b:74:c0:3b:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jun 13 06:00:54 2026 GMT
Not After : Jun 14 06:00:54 2026 GMT
Subject: CN=40983b2669a18119b724e3efe551788faf1f0c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:bb:d0:b1:c2:28:11:c7:65:d6:63:cf:d2:
99:d4:ad:ba:6b:76:3d:d5:ee:0e:39:4d:20:d8:ca:
30:4c:09:7a:bf:e6:53:21:44:ae:74:7d:1f:0c:6a:
0d:e8:26:98:48:1d:c7:fd:54:a3:23:f5:55:4c:c1:
ed:7f:2e:09:46:9f:70:00:11:8a:48:77:42:63:17:
1e:4a:cd:dd:53:86:c8:4f:10:0d:fe:1e:a1:38:d2:
15:95:6e:de:d6:9c:72:18:48:41:38:05:a2:89:78:
71:b0:a4:5f:36:4a:53:48:ea:36:c1:d3:57:82:9b:
66:e8:11:d3:4d:fd:e6:65:53:1d:3c:ec:24:d8:a7:
e3:bc:b0:ca:80:95:39:83:95:de:5b:77:13:37:7e:
ae:c5:7b:09:08:e6:78:08:4d:89:b0:f0:7a:1f:31:
05:44:6a:28:a1:ab:cf:ee:4b:7b:0a:7a:c7:df:30:
84:f3:9a:aa:a4:39:25:7f:73:9a:8e:18:53:99:6b:
f9:cc:5e:66:c8:a0:d8:5e:cc:1e:eb:97:41:80:e0:
14:a6:84:f0:fd:51:35:1b:5d:76:d8:2a:cf:41:e8:
d5:2a:9b:dc:23:46:b8:87:8a:13:4d:0d:7c:05:e1:
cf:38:e3:31:32:23:03:8f:50:60:11:70:20:31:d4:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:3B:26:69:A1:81:19:B7:24:E3:EF:E5:51:78:8F:AF:1F:0C:8F
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:27:84:1f:9b:e6:71:cf:a1:d5:b1:d0:bc:22:90:3e:b7:b1:
46:c2:6e:9a:90:19:31:6d:fe:d2:6a:02:52:45:60:85:b4:62:
5f:f3:e4:fd:ef:12:85:4e:7d:da:e6:34:97:dd:b8:be:dc:23:
33:ac:ef:55:15:5b:a0:5f:0a:1c:e8:6a:8f:a4:e6:0e:f5:f0:
ab:ba:80:7f:d6:d8:21:70:f1:21:21:93:83:42:11:36:af:44:
ca:77:c9:25:04:d1:28:5c:57:52:f4:45:2d:e1:9e:61:0d:3d:
89:a3:d4:6b:e2:88:af:01:80:05:de:a2:dd:ab:d1:3c:54:30:
be:83:84:9b:a5:d5:e7:8e:d7:5b:01:11:2f:d4:e8:a6:99:2d:
34:d2:6d:60:64:ff:30:25:ce:e6:79:6c:23:b0:5d:4e:e2:76:
37:1c:20:cd:8e:ee:d9:5e:9d:d6:6f:e2:9c:bc:85:6d:29:46:
8b:a5:c4:f2:90:8a:07:5d:a4:20:31:fc:0c:c4:89:17:cf:03:
a6:a8:5e:fa:80:b5:52:60:80:a9:ea:63:20:51:ba:60:46:6a:
33:f6:4b:59:f6:79:26:54:70:4b:71:98:7e:14:d5:da:a2:55:
78:05:33:9d:94:28:9b:5a:c9:33:11:84:fd:85:dc:24:f0:89:
0f:58:97:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kakm/gpW8bNSW3TAO2twMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjYwNjEzMDYwMDU0WhcNMjYwNjE0MDYwMDU0WjAzMTEwLwYDVQQD
Eyg0MDk4M2IyNjY5YTE4MTE5YjcyNGUzZWZlNTUxNzg4ZmFmMWYwYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00i70LHCKBHHZdZjz9KZ1K26a3Y9
1e4OOU0g2MowTAl6v+ZTIUSudH0fDGoN6CaYSB3H/VSjI/VVTMHtfy4JRp9wABGK
SHdCYxceSs3dU4bITxAN/h6hONIVlW7e1pxyGEhBOAWiiXhxsKRfNkpTSOo2wdNX
gptm6BHTTf3mZVMdPOwk2KfjvLDKgJU5g5XeW3cTN36uxXsJCOZ4CE2JsPB6HzEF
RGoooavP7kt7CnrH3zCE85qqpDklf3OajhhTmWv5zF5myKDYXswe65dBgOAUpoTw
/VE1G1122CrPQejVKpvcI0a4h4oTTQ18BeHPOOMxMiMDj1BgEXAgMdRLmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECYOyZpoYEZtyTj7+VReI+vHwyPMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSeEH5vm
cc+h1bHQvCKQPrexRsJumpAZMW3+0moCUkVghbRiX/Pk/e8ShU592uY0l924vtwj
M6zvVRVboF8KHOhqj6TmDvXwq7qAf9bYIXDxISGTg0IRNq9EynfJJQTRKFxXUvRF
LeGeYQ09iaPUa+KIrwGABd6i3avRPFQwvoOEm6XV547XWwERL9ToppktNNJtYGT/
MCXO5nlsI7BdTuJ2NxwgzY7u2V6d1m/inLyFbSlGi6XE8pCKB12kIDH8DMSJF88D
pqhe+oC1UmCAqepjIFG6YEZqM/ZLWfZ5JlRwS3GYfhTV2qJVeAUznZQom1rJMxGE
/YXcJPCJD1iX6g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:17 2026 by rpki-client