$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: d7MMZpZTg8Z65NdkWumC7mnuwG8ThR/a8lP31AkhdxU= Subject key identifier: FC:B1:E3:CF:E5:0F:CB:02:A6:7A:8C:3E:0C:F8:21:56:F7:12:05:7B Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019D2628171DAF62358DE6251ED3B3928F32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 11EB Signing time: Wed 25 Mar 2026 18:00:54 +0000 Manifest this update: Wed 25 Mar 2026 18:00:54 +0000 Manifest next update: Thu 26 Mar 2026 18:00:54 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 4: MDqkmVq0wqQhfctEVt435BlVKwE.roa (hash: UBeCi32yoKfsLWvPk9g+GRflHLIlJW/EWzv3Gosv9dk=) 5: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 6: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 7: Uu6kgZoXxkmNniYXRrRma31jomI.roa (hash: SRpT2c+ZtineJthFU2Lj326eHBfCWg/PI6AuJE6p0HE=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: 0ezz4v0fvHhqnPUAmAE8rgapeFFyREJqWBe58rA6o4U=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 12: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:17:1d:af:62:35:8d:e6:25:1e:d3:b3:92:8f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Mar 25 18:00:54 2026 GMT Not After : Mar 26 18:00:54 2026 GMT Subject: CN=fcb1e3cfe50fcb02a67a8c3e0cf82156f712057b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:72:a7:13:df:0c:f4:ba:cf:b3:66:5c:bc: 05:6d:20:68:91:f7:e9:d7:c4:4b:f1:20:5e:cb:22: 9d:2e:4d:0b:16:12:28:eb:be:ad:64:7c:ef:69:7e: ab:14:97:99:e4:47:0b:76:c4:b1:c5:b9:a2:5e:73: fb:42:d9:39:13:8f:68:d0:d7:7a:31:87:03:91:a8: 48:6a:46:1e:98:6e:54:80:12:d7:dd:42:c7:ab:f8: 69:94:2c:fe:f2:b3:f8:5b:eb:5d:d2:c4:1a:17:e8: ec:1f:e3:d5:11:25:18:e7:aa:c4:1c:b7:10:95:0e: 00:8c:fa:8e:38:ce:9a:c0:9a:da:bf:ba:11:4f:18: 34:8b:0a:dc:e5:ec:8b:c0:59:05:96:5a:80:b3:ba: 09:f9:e9:75:ca:2c:86:45:2a:00:7c:a0:d6:36:39: a3:b5:e6:02:0e:37:d4:8f:34:e8:cb:70:dc:12:19: 53:9c:a2:c2:85:6d:f0:a4:8d:8f:1f:12:37:af:eb: ae:5d:c8:99:3c:9d:8f:fc:a4:46:06:43:37:01:8d: fd:0e:53:4f:4d:54:e4:21:21:e8:a3:28:85:9f:cd: 78:2c:f4:8a:cf:dc:d0:79:70:8d:b8:9e:81:1f:18: fd:36:8d:f8:6c:ae:0c:20:0a:1d:78:7e:5a:0e:3b: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B1:E3:CF:E5:0F:CB:02:A6:7A:8C:3E:0C:F8:21:56:F7:12:05:7B X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:79:de:e0:ba:b1:37:38:4e:f3:83:71:c9:c4:23:b0:5e:21: 38:91:eb:b3:d7:d1:90:15:5c:55:1e:9b:8f:b1:3d:be:a2:52: 07:39:ed:c8:bd:cc:79:51:14:89:8b:76:00:d7:26:4e:05:6f: a0:95:7b:ea:a8:a8:78:c4:23:61:80:7c:28:81:65:cc:9d:0d: 96:1c:a1:3d:35:80:d7:74:5f:73:d1:d8:26:a5:16:03:0f:76: 4c:d9:e4:b3:4e:c5:e8:81:d1:73:fe:97:eb:8c:65:ae:b4:a6: 9a:ce:97:0b:22:94:71:f7:d4:89:e9:cf:64:bd:91:a8:fc:f2: 2d:04:f0:66:12:50:e0:e0:a5:e6:20:4e:eb:e8:f3:18:ec:b4: 7e:ee:23:f6:9e:60:5e:7d:d6:2b:df:01:26:c8:5d:e4:34:c8: 23:08:b5:03:90:5c:3f:9b:d8:aa:cf:12:05:79:d3:8a:71:d7: c4:17:ad:d3:8e:b6:db:4a:66:7a:ea:13:04:37:9a:52:8c:fe: 05:ab:7d:6a:ec:be:a2:bc:d7:b1:4b:7b:60:60:2d:e5:8c:6d: cc:51:ae:f3:89:9b:d2:af:f9:53:4c:e2:44:5c:6c:b9:2a:2f: ff:ec:05:a7:93:52:3c:2a:a4:86:af:36:fd:2d:2a:41:f1:81: dc:36:a1:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKBcdr2I1jeYlHtOzko8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMzI1MTgwMDU0WhcNMjYwMzI2MTgwMDU0WjAzMTEwLwYDVQQD EyhmY2IxZTNjZmU1MGZjYjAyYTY3YThjM2UwY2Y4MjE1NmY3MTIwNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxlypxPfDPS6z7NmXLwFbSBokffp 18RL8SBeyyKdLk0LFhIo676tZHzvaX6rFJeZ5EcLdsSxxbmiXnP7Qtk5E49o0Nd6 MYcDkahIakYemG5UgBLX3ULHq/hplCz+8rP4W+td0sQaF+jsH+PVESUY56rEHLcQ lQ4AjPqOOM6awJrav7oRTxg0iwrc5eyLwFkFllqAs7oJ+el1yiyGRSoAfKDWNjmj teYCDjfUjzToy3DcEhlTnKLChW3wpI2PHxI3r+uuXciZPJ2P/KRGBkM3AY39DlNP TVTkISHooyiFn814LPSKz9zQeXCNuJ6BHxj9No34bK4MIAodeH5aDjvKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyx48/lD8sCpnqMPgz4IVb3EgV7MB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ne4Lqx NzhO84NxycQjsF4hOJHrs9fRkBVcVR6bj7E9vqJSBzntyL3MeVEUiYt2ANcmTgVv oJV76qioeMQjYYB8KIFlzJ0NlhyhPTWA13Rfc9HYJqUWAw92TNnks07F6IHRc/6X 64xlrrSmms6XCyKUcffUienPZL2RqPzyLQTwZhJQ4OCl5iBO6+jzGOy0fu4j9p5g Xn3WK98BJshd5DTIIwi1A5BcP5vYqs8SBXnTinHXxBet046220pmeuoTBDeaUoz+ Bat9auy+orzXsUt7YGAt5YxtzFGu84mb0q/5U0ziRFxsuSov/+wFp5NSPCqkhq82 /S0qQfGB3DahRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:54:24 2026 by rpki-client