$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: y+dHc/HqlQcJjS7mGkIqCUsoBLcFZOm2an8/XQCGboY= Subject key identifier: E6:AD:4F:3A:47:26:4B:CA:87:A9:32:5C:C7:15:3E:C8:49:CC:0A:2E Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019D25F1F2A022C37ABF8C39DD10C9E31B28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 1008 Signing time: Wed 25 Mar 2026 17:01:46 +0000 Manifest this update: Wed 25 Mar 2026 17:01:46 +0000 Manifest next update: Thu 26 Mar 2026 17:01:46 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: tLWy3taQFGSm/F8zuA8vHktBKVPdbdIPeAzrlgGY2hw=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:f2:a0:22:c3:7a:bf:8c:39:dd:10:c9:e3:1b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Mar 25 17:01:46 2026 GMT Not After : Mar 26 17:01:46 2026 GMT Subject: CN=e6ad4f3a47264bca87a9325cc7153ec849cc0a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:77:3e:a1:a6:81:82:0e:ee:d0:0e:14:bd: ca:f4:ae:f7:fa:13:53:13:08:3f:fd:7b:0a:a7:0e: 2a:eb:34:33:9d:f8:59:78:4f:f7:80:00:08:26:1d: d3:04:f0:15:2b:97:1b:23:8b:47:d7:68:dd:ac:4d: 01:07:d5:f9:84:00:a0:00:81:e6:47:59:0e:ec:44: 43:b5:8c:05:78:64:0c:90:0c:3a:e5:43:99:21:ea: 6c:43:7c:df:c5:61:2a:ee:20:b6:d5:19:c1:18:86: 97:f4:89:9b:cd:5c:fd:5f:1a:b4:ee:a3:a6:26:39: 4e:c7:e6:45:ca:a8:7f:02:2d:72:1b:85:c2:d5:91: d8:68:08:3c:aa:b3:9c:fd:99:75:f3:95:b0:93:66: cb:51:8c:00:a1:01:87:ea:c1:d1:ac:3a:7e:4e:da: e5:1f:83:06:e8:70:6e:e2:3c:59:a3:9a:be:d6:72: f0:0f:9e:4d:c7:56:1c:c1:47:3a:e7:ba:c9:41:f6: 25:2f:fd:9c:e3:06:67:ae:b3:60:97:94:28:6e:98: 9b:24:fe:be:1a:5e:ab:9f:e8:ee:b9:fd:0c:1d:19: be:98:f8:61:26:74:36:92:c4:59:b3:4a:1e:e2:64: 77:92:72:26:60:aa:b8:b4:8a:99:fb:f1:6a:0f:5b: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AD:4F:3A:47:26:4B:CA:87:A9:32:5C:C7:15:3E:C8:49:CC:0A:2E X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1d:02:09:fd:eb:7c:af:4b:12:05:5e:f6:13:2c:f2:d1:a0: a2:f0:64:38:fc:92:43:d0:e6:ef:ef:73:e6:94:21:11:6f:30: ce:2f:af:e9:ae:4f:6c:82:66:93:2b:52:ea:53:b8:17:73:c7: e8:6a:b3:70:8a:1b:1e:87:46:d9:55:85:21:94:61:c3:c0:d5: f5:80:1c:78:07:81:b9:05:b9:b0:f1:c0:11:92:29:2d:dc:a5: 55:68:f8:7a:f0:7e:12:3c:25:5b:1c:11:61:b2:81:85:a4:72: 12:8c:23:bb:fd:e5:2c:65:b9:e1:2d:b9:a7:b7:ba:de:a4:96: 38:a6:04:98:46:72:9a:dd:cc:a4:56:cf:b4:46:7e:16:31:06: 6a:e0:9a:a8:a5:5d:73:ea:ae:b2:92:38:8c:69:b8:61:72:b3: 2f:df:25:5f:e7:ef:61:fd:54:ed:58:de:f1:07:43:d6:e1:35: 67:a5:4d:74:48:38:1a:57:be:04:08:6a:5c:4b:90:88:09:f7: 08:b8:d6:cb:54:8e:32:ba:a1:76:b0:03:23:86:80:b8:bb:d4: a6:eb:42:95:eb:7a:6d:cd:64:a4:17:81:a9:31:34:f4:14:c9: be:11:b9:74:83:58:3b:ec:5e:13:89:28:2f:ce:57:45:65:49: fe:a7:84:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8fKgIsN6v4w53RDJ4xsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMzI1MTcwMTQ2WhcNMjYwMzI2MTcwMTQ2WjAzMTEwLwYDVQQD EyhlNmFkNGYzYTQ3MjY0YmNhODdhOTMyNWNjNzE1M2VjODQ5Y2MwYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzp3PqGmgYIO7tAOFL3K9K73+hNT Ewg//XsKpw4q6zQznfhZeE/3gAAIJh3TBPAVK5cbI4tH12jdrE0BB9X5hACgAIHm R1kO7ERDtYwFeGQMkAw65UOZIepsQ3zfxWEq7iC21RnBGIaX9ImbzVz9Xxq07qOm JjlOx+ZFyqh/Ai1yG4XC1ZHYaAg8qrOc/Zl185Wwk2bLUYwAoQGH6sHRrDp+Ttrl H4MG6HBu4jxZo5q+1nLwD55Nx1YcwUc657rJQfYlL/2c4wZnrrNgl5QobpibJP6+ Gl6rn+juuf0MHRm+mPhhJnQ2ksRZs0oe4mR3knImYKq4tIqZ+/FqD1s2UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOatTzpHJkvKh6kyXMcVPshJzAouMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh0CCf3r fK9LEgVe9hMs8tGgovBkOPySQ9Dm7+9z5pQhEW8wzi+v6a5PbIJmkytS6lO4F3PH 6GqzcIobHodG2VWFIZRhw8DV9YAceAeBuQW5sPHAEZIpLdylVWj4evB+EjwlWxwR YbKBhaRyEowju/3lLGW54S25p7e63qSWOKYEmEZymt3MpFbPtEZ+FjEGauCaqKVd c+quspI4jGm4YXKzL98lX+fvYf1U7Vje8QdD1uE1Z6VNdEg4Gle+BAhqXEuQiAn3 CLjWy1SOMrqhdrADI4aAuLvUputClet6bc1kpBeBqTE09BTJvhG5dINYO+xeE4ko L85XRWVJ/qeE/w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:34:59 2026 by rpki-client