$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 4dw1Uqlkf8z5eFpLVyNnnWQX1fTG/wX0ygS/qCuPdYE= Subject key identifier: DD:4A:27:56:77:28:66:D8:71:C1:9D:08:E8:8B:03:08:C1:92:E3:18 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 01A0DC178D6317728D557948C9053A68DB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1AE5 Signing time: Sat 26 Sep 2026 05:02:06 +0000 Manifest this update: Sat 26 Sep 2026 05:02:06 +0000 Manifest next update: Sun 27 Sep 2026 05:02:06 +0000 Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=) 2: 1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa (hash: OR0K6ja0+6tjObcYpglQ6VtaBnvWmTTk4GVSghcFZtk=) 3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=) 4: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=) 5: 7fgcMQkmfWwHXhrbNvdl9LWSJKA.roa (hash: pADt641ZfrBrQwfXg3JUa602uETFbQeFY9v2r19pKXI=) 6: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=) 7: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=) 8: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (hash: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=) 9: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=) 10: HDUXqeFC5mTa7lU_RmwELJjd7sg.roa (hash: U543lYj0wOYAaksGChXjX7Bufgd0My2VXcD17aAopUA=) 11: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=) 12: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=) 13: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=) 14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=) 15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=) 16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=) 17: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=) 18: Xp4_W5QH684_v2ntxjTbXLi7co4.roa (hash: qVI7vhEbL0w9fKHM8ldDF9m2E1ZZAflMgjTOoFsG2NU=) 19: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: uNwvENBuwEzy3ulXoRBVtGV3T6lULI7dkzJ43D3kGRU=) 20: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (hash: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=) 21: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=) 22: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=) 23: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=) 24: aq6EbRSc2yPXLymWgfc3hs2RSl0.roa (hash: c4jt4ZG6ePsIANqDTyXyyUoY7noOmOWYrKSmA8oP7jY=) 25: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=) 26: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=) 27: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=) 28: gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa (hash: vPMzw8PpBWw8xTWacYUychh/qBw+PTqAXcQqiVGh4H4=) 29: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=) 30: niGcWz0ThxJygz-PLbVysx_sLZE.roa (hash: g18PU3cPKMc6/2ma47ogKuHWzJTyComhxOWTfFk6wlA=) 31: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=) 32: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=) 33: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=) 34: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=) 35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 05:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:17:8d:63:17:72:8d:55:79:48:c9:05:3a:68:db:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Sep 26 05:02:06 2026 GMT Not After : Sep 27 05:02:06 2026 GMT Subject: CN=dd4a2756772866d871c19d08e88b0308c192e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:b6:b0:8d:bd:3f:ff:8d:34:fc:a8:81:1e: f8:f2:40:fa:9d:f0:8f:e1:cf:df:f7:17:ec:2f:bc: c1:fb:6a:ca:83:75:43:8d:8b:cc:c8:ac:4a:26:d0: 06:98:ec:6a:6f:95:6d:c9:a7:f0:71:39:4b:a0:27: 98:36:e5:1c:90:78:c7:ed:2a:ee:71:da:7e:2b:a6: 85:0b:d1:98:b6:d0:7e:07:1a:3e:d4:eb:43:37:74: 21:ea:37:b0:c4:3f:67:ae:60:c3:6c:68:f7:61:d5: 56:9e:c8:69:f4:4a:84:15:ee:65:26:a5:cf:22:7e: b9:a7:80:3b:83:55:4c:37:04:6f:ab:4b:57:cd:37: 23:ee:22:f6:a2:f7:6e:71:f9:18:0f:d9:ee:28:b3: 28:cf:cc:3f:59:8a:5f:0b:ea:c6:58:da:cf:ae:b8: dd:09:27:71:36:36:e1:e8:50:3c:31:c4:04:9a:83: a9:f7:b7:a0:6b:ec:65:52:a2:f9:d6:c9:4b:1a:32: 9e:6c:b6:be:27:70:2b:29:63:cc:f7:b0:2b:f5:74: e9:94:cf:1e:3b:6b:80:dd:56:f8:79:ac:32:ff:20: d6:54:85:9c:5e:d4:1a:55:51:18:1d:03:50:1d:f2: 74:d8:a9:f8:7c:bb:b4:84:dd:de:75:f2:8d:d7:70: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4A:27:56:77:28:66:D8:71:C1:9D:08:E8:8B:03:08:C1:92:E3:18 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d8:c9:7e:10:f1:3f:29:7b:f8:3e:47:0f:91:b8:36:73:e8: b4:39:81:b6:b8:3c:07:3f:0f:42:75:48:38:89:0d:12:60:ba: 1b:5c:8e:80:8a:83:72:3d:4a:59:ff:dd:0f:04:f6:f6:69:ea: e9:af:ff:cf:c0:5c:53:08:30:ea:b4:e1:ca:1c:d7:f1:e3:bd: 57:cc:af:7f:76:85:d5:17:db:00:b1:3d:5d:30:6d:61:44:86: cd:8d:c0:25:2d:25:7a:e0:a4:5e:04:6f:53:05:31:f2:5a:01: e2:a0:8b:a9:35:fd:f7:bf:10:e4:1e:cf:f3:6d:26:9a:4b:4e: 2e:d4:c3:58:dd:ac:16:c1:5a:ca:6f:5a:2f:e6:40:bd:da:86: 2b:70:89:31:42:91:cd:55:90:50:5e:46:84:a0:9d:82:c7:b1: 7d:e1:d2:c2:ae:e2:3d:f7:0e:97:c9:b7:25:11:db:9a:22:b5: e5:b9:19:4b:09:83:ff:b3:77:e3:ad:b7:54:9d:7b:7d:3a:61: a3:59:82:59:d8:21:50:fc:e0:8f:ed:ed:be:ed:36:af:33:98: 97:0e:d5:8f:73:56:48:e2:4a:79:ee:74:3f:25:f1:7a:f2:27: d8:39:5b:87:d4:48:14:84:90:de:4a:2a:87:31:15:95:35:2f: c5:ec:f9:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcF41jF3KNVXlIyQU6aNtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwOTI2MDUwMjA2WhcNMjYwOTI3MDUwMjA2WjAzMTEwLwYDVQQD EyhkZDRhMjc1Njc3Mjg2NmQ4NzFjMTlkMDhlODhiMDMwOGMxOTJlMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5u2sI29P/+NNPyogR748kD6nfCP 4c/f9xfsL7zB+2rKg3VDjYvMyKxKJtAGmOxqb5VtyafwcTlLoCeYNuUckHjH7Sru cdp+K6aFC9GYttB+Bxo+1OtDN3Qh6jewxD9nrmDDbGj3YdVWnshp9EqEFe5lJqXP In65p4A7g1VMNwRvq0tXzTcj7iL2ovducfkYD9nuKLMoz8w/WYpfC+rGWNrPrrjd CSdxNjbh6FA8McQEmoOp97ega+xlUqL51slLGjKebLa+J3ArKWPM97Ar9XTplM8e O2uA3Vb4eawy/yDWVIWcXtQaVVEYHQNQHfJ02Kn4fLu0hN3edfKN13CRDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1KJ1Z3KGbYccGdCOiLAwjBkuMYMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNjJfhDx Pyl7+D5HD5G4NnPotDmBtrg8Bz8PQnVIOIkNEmC6G1yOgIqDcj1KWf/dDwT29mnq 6a//z8BcUwgw6rThyhzX8eO9V8yvf3aF1RfbALE9XTBtYUSGzY3AJS0leuCkXgRv UwUx8loB4qCLqTX9978Q5B7P820mmktOLtTDWN2sFsFaym9aL+ZAvdqGK3CJMUKR zVWQUF5GhKCdgsexfeHSwq7iPfcOl8m3JRHbmiK15bkZSwmD/7N34623VJ17fTph o1mCWdghUPzgj+3tvu02rzOYlw7Vj3NWSOJKee50PyXxevIn2Dlbh9RIFISQ3koq hzEVlTUvxez5dQ== -----END CERTIFICATE-----Generated at Sat Sep 26 14:28:22 2026 by rpki-client