$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: y79UGUS2xtuwwiK2Ye2GPYs3krE+69sBbf4u72ZCNMM= Subject key identifier: B8:33:38:0E:21:02:B3:B2:13:11:97:A1:94:21:EF:53:03:60:61:2F Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 01A0CCA2F934F7A5CC3EF326A42BCD4F372B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 13D8 Signing time: Wed 23 Sep 2026 05:00:27 +0000 Manifest this update: Wed 23 Sep 2026 05:00:27 +0000 Manifest next update: Thu 24 Sep 2026 05:00:27 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (hash: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=) 3: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 4: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 5: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 6: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: diapvHIEMWTXBeuvlbVAG0vIT+HiCNV3lovO0VCQ3CA=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa (hash: nMWSXjyhyxXgusKdou/8sfu2TMwgZlwVJi6zwp1S97s=) 12: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 13: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a2:f9:34:f7:a5:cc:3e:f3:26:a4:2b:cd:4f:37:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Sep 23 05:00:27 2026 GMT Not After : Sep 24 05:00:27 2026 GMT Subject: CN=b833380e2102b3b2131197a19421ef530360612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:39:c5:dc:23:05:f6:e6:34:3a:07:27:91: 7f:cc:bb:51:e1:33:89:7f:1e:99:a3:18:01:9b:1b: 69:88:bb:10:55:05:e8:e8:c7:d3:70:51:ca:75:df: 6a:2c:e0:83:56:df:a5:69:c4:70:63:c7:18:68:84: 1c:32:b7:dd:8a:eb:a5:0e:da:4e:52:71:51:c0:c0: d5:65:4b:a4:cb:ca:9c:a1:89:3b:ad:f4:34:c4:62: d8:aa:1a:62:45:f1:fb:59:3d:a5:f0:6f:47:67:c5: c9:4e:82:a3:d0:dd:5e:65:62:95:22:dd:e1:19:f7: 08:83:05:ed:79:5d:47:8c:41:ce:65:90:3b:c3:a9: b7:93:84:9b:57:c7:e9:93:55:af:1c:80:16:08:37: c4:3d:07:a3:7a:3d:a7:dc:78:94:4a:02:f9:b6:1a: 1f:f7:1c:43:00:9d:4c:38:38:42:46:8b:da:5d:c2: 07:1d:52:5f:f1:12:f0:92:21:22:02:02:e6:8f:80: 8d:41:dc:bc:b4:85:4f:c9:17:9a:5f:f9:f9:11:41: 9c:56:1a:b8:3b:ac:f0:47:c6:2d:f0:17:7c:9c:f9: c8:ee:e9:e4:2c:84:38:cf:58:87:cb:c7:d3:14:b2: 6e:e5:96:47:39:b0:ac:45:01:4a:d1:2b:7c:62:45: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:33:38:0E:21:02:B3:B2:13:11:97:A1:94:21:EF:53:03:60:61:2F X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2c:34:37:bc:6d:e9:c5:5c:9c:85:26:50:26:17:42:26:73: b7:9f:0d:4d:f8:c6:b9:ec:b5:39:63:85:94:93:8a:38:87:46: fa:e2:7b:78:bd:1f:dd:b8:d4:a4:d3:ba:82:ca:a2:83:df:3b: 62:df:4e:4a:60:26:2c:fe:cd:a3:ea:cf:04:02:42:c7:13:0c: 7a:c9:96:41:22:69:51:32:50:1d:08:7a:3f:a1:80:14:01:9b: 13:6e:72:aa:ed:7d:fc:53:c2:a3:39:56:e1:0a:3f:ea:cd:33: d4:5f:a4:85:f8:be:f3:c4:a7:ba:39:05:2a:e0:48:ee:95:7b: a2:3a:d0:0e:de:c6:7d:73:14:d2:26:70:72:23:e8:77:a0:29: 76:35:31:6d:ba:03:91:a3:d2:12:6f:97:01:0e:fe:99:fb:30: a4:93:db:dc:0e:a3:db:24:b4:72:c9:7e:a4:4e:88:90:08:3b: 23:ac:24:c2:0d:ed:28:ec:8c:10:cf:58:65:ad:f8:6e:45:0b: aa:ee:c1:d1:79:86:9d:df:7d:76:f2:50:48:88:af:fc:17:44: e7:4d:a7:25:1a:c7:ad:a4:5f:66:1c:ba:9d:03:dc:bc:71:1f: 83:14:6c:d9:0f:25:6d:22:0a:3b:b0:36:16:16:33:48:31:ed: f1:06:f2:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMovk096XMPvMmpCvNTzcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwOTIzMDUwMDI3WhcNMjYwOTI0MDUwMDI3WjAzMTEwLwYDVQQD EyhiODMzMzgwZTIxMDJiM2IyMTMxMTk3YTE5NDIxZWY1MzAzNjA2MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37E5xdwjBfbmNDoHJ5F/zLtR4TOJ fx6ZoxgBmxtpiLsQVQXo6MfTcFHKdd9qLOCDVt+lacRwY8cYaIQcMrfdiuulDtpO UnFRwMDVZUuky8qcoYk7rfQ0xGLYqhpiRfH7WT2l8G9HZ8XJToKj0N1eZWKVIt3h GfcIgwXteV1HjEHOZZA7w6m3k4SbV8fpk1WvHIAWCDfEPQejej2n3HiUSgL5thof 9xxDAJ1MODhCRovaXcIHHVJf8RLwkiEiAgLmj4CNQdy8tIVPyReaX/n5EUGcVhq4 O6zwR8Yt8Bd8nPnI7unkLIQ4z1iHy8fTFLJu5ZZHObCsRQFK0St8YkVBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgzOA4hArOyExGXoZQh71MDYGEvMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSw0N7xt 6cVcnIUmUCYXQiZzt58NTfjGuey1OWOFlJOKOIdG+uJ7eL0f3bjUpNO6gsqig987 Yt9OSmAmLP7No+rPBAJCxxMMesmWQSJpUTJQHQh6P6GAFAGbE25yqu19/FPCozlW 4Qo/6s0z1F+khfi+88SnujkFKuBI7pV7ojrQDt7GfXMU0iZwciPod6ApdjUxbboD kaPSEm+XAQ7+mfswpJPb3A6j2yS0csl+pE6IkAg7I6wkwg3tKOyMEM9YZa34bkUL qu7B0XmGnd99dvJQSIiv/BdE502nJRrHraRfZhy6nQPcvHEfgxRs2Q8lbSIKO7A2 FhYzSDHt8Qbysw== -----END CERTIFICATE-----Generated at Wed Sep 23 11:32:32 2026 by rpki-client