$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: bTkIoOq7Us7447szRuujCjo/3FWy2iq4MWCxzc283ow= Subject key identifier: 4D:64:C1:61:A9:28:E3:17:02:19:2A:1C:96:51:C4:18:20:2D:74:8C Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019D9998D601F02FD2848978B4850A20E3B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: AE Signing time: Fri 17 Apr 2026 04:00:23 +0000 Manifest this update: Fri 17 Apr 2026 04:00:23 +0000 Manifest next update: Sat 18 Apr 2026 04:00:23 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: UV9EmISWW+DotugR1LzP9lPiTsS1nNpslkV3yrXTnbI=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:98:d6:01:f0:2f:d2:84:89:78:b4:85:0a:20:e3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Apr 17 04:00:23 2026 GMT Not After : Apr 18 04:00:23 2026 GMT Subject: CN=4d64c161a928e31702192a1c9651c418202d748c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:75:8f:95:a1:c6:d7:ff:71:ef:58:cf:75: 79:a8:88:4c:cc:63:3e:c7:46:b7:ed:9a:2e:c7:09: 2d:2d:fd:ce:c2:bc:eb:51:d1:61:5c:92:1a:cd:2f: 3e:55:b3:cf:b9:e8:4b:8e:95:da:62:68:a8:cb:38: 09:47:20:88:a0:76:84:76:fc:d7:e7:11:87:1f:d9: 7a:9b:76:f2:eb:f3:ff:44:1c:24:cf:53:ca:a6:f6: 29:53:c8:db:37:f7:8e:56:14:c8:ff:22:9e:d0:08: 0d:a6:b5:7c:d2:c4:30:19:80:80:2d:50:42:c9:49: 20:4e:35:ad:52:d7:e7:3a:1d:e5:59:49:2f:8a:54: 77:d9:cf:11:2b:ad:1f:3a:9e:67:7c:c5:f5:27:05: 5a:ce:a7:30:3c:68:3a:fb:ce:73:41:4b:8a:c0:5e: dd:3b:96:e2:6d:ad:1c:be:20:f6:ed:12:37:7d:04: 4a:2c:4f:cf:b3:59:4e:b9:78:de:15:02:ae:7a:be: a0:8e:bd:31:16:c3:63:e6:86:dc:97:af:04:ce:a0: d1:a3:74:0b:dc:c5:d1:6e:05:3c:80:ee:33:ec:33: b0:1c:48:bf:b1:b0:16:88:e8:13:12:3e:c9:d6:86: 17:22:f1:a4:3d:aa:73:f4:b6:37:2d:85:8c:1c:5b: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:C1:61:A9:28:E3:17:02:19:2A:1C:96:51:C4:18:20:2D:74:8C X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:c5:6c:cb:6f:0f:e8:1c:85:7c:ea:ce:37:e7:69:00:1a: e8:38:87:17:9c:84:e8:10:64:c4:ba:5d:c8:4f:e3:d2:c7:70: 66:3f:a9:f9:df:2e:79:55:a2:03:8a:b8:56:be:2d:ad:ff:5a: 9c:4a:d6:23:c8:fa:fd:12:98:c4:c0:04:a3:53:07:1e:e2:8e: 95:94:f0:1c:fa:00:d3:ce:93:21:0b:66:4d:1e:9f:f5:81:6d: 94:2f:c3:d7:70:2b:77:66:26:e5:9e:af:8c:4e:de:4c:1d:39: 09:94:80:16:fc:55:9b:84:40:27:ff:5f:38:7c:ad:e4:b5:86: 9b:09:c4:82:a3:a0:40:96:9d:15:b8:68:26:12:84:88:b6:e8: 1d:f4:32:7d:49:ed:bd:03:a1:26:61:99:5d:a3:10:5f:eb:23: 84:70:1a:16:ad:ca:0f:88:ab:15:68:1f:79:89:9d:ea:ca:87: 31:83:9d:c6:a6:37:17:98:ec:2f:46:98:d9:65:95:0a:7a:02: 78:0a:5c:6d:ff:d2:2b:05:95:ef:43:eb:fe:03:8c:52:d5:d2: e8:82:97:2e:a7:ee:28:6d:93:ab:6c:9c:44:de:b2:61:33:23: 62:de:b8:33:09:8d:19:ed:27:3f:c1:67:97:78:a7:71:d0:06: 13:b7:31:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmNYB8C/ShIl4tIUKIOOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwNDE3MDQwMDIzWhcNMjYwNDE4MDQwMDIzWjAzMTEwLwYDVQQD Eyg0ZDY0YzE2MWE5MjhlMzE3MDIxOTJhMWM5NjUxYzQxODIwMmQ3NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fN1j5Whxtf/ce9Yz3V5qIhMzGM+ x0a37ZouxwktLf3OwrzrUdFhXJIazS8+VbPPuehLjpXaYmioyzgJRyCIoHaEdvzX 5xGHH9l6m3by6/P/RBwkz1PKpvYpU8jbN/eOVhTI/yKe0AgNprV80sQwGYCALVBC yUkgTjWtUtfnOh3lWUkvilR32c8RK60fOp5nfMX1JwVazqcwPGg6+85zQUuKwF7d O5biba0cviD27RI3fQRKLE/Ps1lOuXjeFQKuer6gjr0xFsNj5obcl68EzqDRo3QL 3MXRbgU8gO4z7DOwHEi/sbAWiOgTEj7J1oYXIvGkPapz9LY3LYWMHFtLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1kwWGpKOMXAhkqHJZRxBggLXSMMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW7FbMtv D+gchXzqzjfnaQAa6DiHF5yE6BBkxLpdyE/j0sdwZj+p+d8ueVWiA4q4Vr4trf9a nErWI8j6/RKYxMAEo1MHHuKOlZTwHPoA086TIQtmTR6f9YFtlC/D13Ard2Ym5Z6v jE7eTB05CZSAFvxVm4RAJ/9fOHyt5LWGmwnEgqOgQJadFbhoJhKEiLboHfQyfUnt vQOhJmGZXaMQX+sjhHAaFq3KD4irFWgfeYmd6sqHMYOdxqY3F5jsL0aY2WWVCnoC eApcbf/SKwWV70Pr/gOMUtXS6IKXLqfuKG2Tq2ycRN6yYTMjYt64MwmNGe0nP8Fn l3incdAGE7cx5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:06 2026 by rpki-client