$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: o8X8Y6xiVMf9yuykT90V+ss3ZnFiK10LOmTMz7u/zCA= Subject key identifier: 3C:26:C7:21:4B:62:F4:F4:D7:F7:09:89:D5:5E:EF:A0:2B:09:47:2B Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019D273B0354A3DAFF0CD86314AE22597797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 040C Signing time: Wed 25 Mar 2026 23:01:12 +0000 Manifest this update: Wed 25 Mar 2026 23:01:12 +0000 Manifest next update: Thu 26 Mar 2026 23:01:12 +0000 Files and hashes: 1: 0Oic1IcERTEb5DlaPzbn0th6N50.roa (hash: bDlBbgczPM559YYoDu7tlNakooG/ffcXd8tnjCuBkcE=) 2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=) 3: 3p_wd6vJjZUyWJtHMCK8ESOv_AE.roa (hash: PxepYwEvTDnK7OgAV3Azq1CJ9rgZFmA7S3U2X7fVhUI=) 4: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=) 5: 6o0kZx4ZEgkwFac5z4NG_DD_P24.roa (hash: NNeSsS+b7iF3LOszOdnT93/ZwRAQjem9ZtjYeB8oOp8=) 6: 80iCgpPXOpxj2QuyhWAAhLXssPg.roa (hash: R9I/2lsnefslGYRmmPeJiUGqHF+AhkybIV+mxlt9CnQ=) 7: CwMnrmC4gxvJOxo4ISqJ8a_D-4o.roa (hash: OFDhWVpTOVd8Jw30rGitjHqq/rmUoGlO3xXz+liY4TE=) 8: E-oIiGlZfX5hqiKQXtKucjllYUk.roa (hash: lyqop0HaLt07HWCMdbsYQ/bfLgKyF02QQKQwg4136FM=) 9: FVXQwmYUOfA-cy8XiaHN8ohstLo.roa (hash: KoIZnDM2RImr+Wy3ZdTY9y9ejiMX27DEBwUolXbHWds=) 10: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=) 11: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=) 12: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=) 13: YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa (hash: zD4f/kaHp2DURR07uKQMW1jZdmkie967aQyuFRXFV34=) 14: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=) 15: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=) 16: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=) 17: nLdceoxheszmwZ7EgAVRBKb1AxM.roa (hash: u/8vHFl3LF/ehT9IM6qIkoEkqLZNXbwVzLVkkwqf2qg=) 18: nV2o0oFyX-lneGR6GzHkwS7FLmg.roa (hash: odxjwKFN7d94aZu6UUbc/PvvX8JBTFfltC6/19R1tdU=) 19: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=) 20: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: GsapvjOI4yin8nlmXExu8p71j6UzpOKeMcwZVQh8UsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:03:54:a3:da:ff:0c:d8:63:14:ae:22:59:77:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Mar 25 23:01:12 2026 GMT Not After : Mar 26 23:01:12 2026 GMT Subject: CN=3c26c7214b62f4f4d7f70989d55eefa02b09472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:18:be:64:20:d1:31:5b:74:26:55:e1:a5: aa:a7:06:bc:70:83:75:bd:ec:49:4a:7c:9c:12:e4: e0:96:dd:6e:a9:09:eb:ff:7c:e5:47:40:0d:74:aa: 4a:ae:e3:c9:98:3f:25:ae:8c:d1:54:0f:c5:b1:43: e5:c1:25:51:43:85:a4:14:23:b1:63:e9:cb:41:19: 3f:7b:ce:cf:70:82:9b:cc:18:cc:9e:d9:6b:8c:16: d1:70:c3:d4:c9:4e:1d:42:01:41:3a:a9:4e:aa:e0: fe:f2:30:07:7b:56:ef:fa:26:02:1f:41:92:21:63: a8:26:24:0d:ab:b8:b7:81:db:37:bc:c7:f6:ee:fa: 2c:d3:b5:77:2c:a9:16:d7:a8:a7:e5:e9:16:fc:b0: 75:15:1d:1a:be:ac:71:39:30:f3:74:f2:c4:46:f1: 2c:a2:39:bd:8a:4a:2c:9e:63:8b:d9:fd:37:61:d8: c1:eb:c3:f3:f7:86:38:28:77:ca:53:0b:69:cd:7b: 3d:af:51:fe:5d:0b:be:1d:1a:0d:4b:e1:f7:76:37: 16:c3:f1:20:e3:0b:ec:bd:87:71:c1:f8:48:8a:cc: 11:eb:2f:78:d7:da:cd:77:1f:a8:ca:d9:5e:5f:48: 55:1d:6b:fa:b9:58:0e:5b:1e:bf:a3:15:8c:c3:4c: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:C7:21:4B:62:F4:F4:D7:F7:09:89:D5:5E:EF:A0:2B:09:47:2B X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ad:ed:53:60:7a:d0:b9:85:8f:ed:8a:2c:22:d5:1e:54:b6: 4f:ca:81:fe:50:6f:4d:21:07:5c:9e:36:fe:4b:80:fe:b4:9e: ed:df:f3:b4:95:93:5a:6c:00:50:b6:e0:9a:2c:06:41:b5:e6: c7:2a:15:4a:99:d7:44:be:24:93:bb:61:01:13:f2:51:f6:b7: 0b:22:d4:8b:ca:0e:c2:b4:1b:fc:02:07:2a:49:22:00:b0:5e: 7a:93:41:b2:ed:4a:eb:0b:4a:cf:99:c4:40:c2:86:3d:93:c9: c6:3b:2e:25:16:04:c4:c3:f1:10:e5:50:99:d7:02:2f:29:6d: d3:1f:5e:29:4b:ba:91:b0:33:8d:17:dc:27:d9:68:f9:86:bf: bc:9b:8f:78:ec:b5:55:b2:68:10:ce:ff:4d:f6:ed:17:22:be: 46:6e:55:00:e6:f3:81:9a:c2:c1:70:fa:eb:dc:ab:5b:d1:38: d2:d0:f5:1f:48:c3:03:8e:67:1c:78:58:d6:ed:57:1a:81:69: 48:26:70:29:d5:e6:7b:d8:b5:d0:e6:16:f7:ad:c5:8f:52:53: 08:af:70:e9:02:34:4d:be:ba:2e:be:83:11:e1:a0:49:04:48: 6c:bf:ae:5a:34:61:b2:af:7c:73:70:f2:a6:72:4c:62:d2:4d: 19:b7:63:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOwNUo9r/DNhjFK4iWXeXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMzI1MjMwMTEyWhcNMjYwMzI2MjMwMTEyWjAzMTEwLwYDVQQD EygzYzI2YzcyMTRiNjJmNGY0ZDdmNzA5ODlkNTVlZWZhMDJiMDk0NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7kYvmQg0TFbdCZV4aWqpwa8cIN1 vexJSnycEuTglt1uqQnr/3zlR0ANdKpKruPJmD8lrozRVA/FsUPlwSVRQ4WkFCOx Y+nLQRk/e87PcIKbzBjMntlrjBbRcMPUyU4dQgFBOqlOquD+8jAHe1bv+iYCH0GS IWOoJiQNq7i3gds3vMf27vos07V3LKkW16in5ekW/LB1FR0avqxxOTDzdPLERvEs ojm9ikosnmOL2f03YdjB68Pz94Y4KHfKUwtpzXs9r1H+XQu+HRoNS+H3djcWw/Eg 4wvsvYdxwfhIiswR6y9419rNdx+oytleX0hVHWv6uVgOWx6/oxWMw0yV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwmxyFLYvT01/cJidVe76ArCUcrMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ63tU2B6 0LmFj+2KLCLVHlS2T8qB/lBvTSEHXJ42/kuA/rSe7d/ztJWTWmwAULbgmiwGQbXm xyoVSpnXRL4kk7thARPyUfa3CyLUi8oOwrQb/AIHKkkiALBeepNBsu1K6wtKz5nE QMKGPZPJxjsuJRYExMPxEOVQmdcCLylt0x9eKUu6kbAzjRfcJ9lo+Ya/vJuPeOy1 VbJoEM7/TfbtFyK+Rm5VAObzgZrCwXD669yrW9E40tD1H0jDA45nHHhY1u1XGoFp SCZwKdXme9i10OYW963Fj1JTCK9w6QI0Tb66Lr6DEeGgSQRIbL+uWjRhsq98c3Dy pnJMYtJNGbdjQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:06:09 2026 by rpki-client