$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: 3M3nRucQZ1RRKYys6ljoS7wqvIREkzqR1izB8zx7UAQ= Subject key identifier: 98:7B:AC:FA:1A:9E:0F:66:BB:AD:62:2F:D8:C0:23:BA:BC:BE:B3:BF Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019D2997620D1891634743D6FBC19096D5E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0CA5 Signing time: Thu 26 Mar 2026 10:01:19 +0000 Manifest this update: Thu 26 Mar 2026 10:01:19 +0000 Manifest next update: Fri 27 Mar 2026 10:01:19 +0000 Files and hashes: 1: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (hash: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY=) 2: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (hash: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=) 3: A956JOTlQ59lmcfnxZy--QUzGfo.roa (hash: RPpgTtbeiF27op+abzwfLowJGRtGnDFgjON32ZJTVfk=) 4: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (hash: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY=) 5: Fekxz83cw-qipMMKalFLm9cHDBA.roa (hash: 4P+8/TrggLqnTQMU/nWTl1kPGOuK4OJ+/hRBkU2gXhY=) 6: FjbhwRaWG8H0F9gsOugZzmYyQhI.roa (hash: eQ55wapBZou4y5GxsaxVO10r26QYB8emildRQ31E6/w=) 7: G1cVObMPOvr58gYfpMZUUg6xloA.roa (hash: kQwqsilWz22JvDZwbOTxkGaryBQcc34+YA+JEVWKuas=) 8: KIJR5bkAO_pGUiMhRohQVSBU_kI.roa (hash: S9jYnqRzYwb6R8b1IcOy2MFwYiHVTAAwBFBwHGspJjA=) 9: TQ7ysTGQIakmu4CVTNc31GK2dfs.roa (hash: MScEjjiTLmx3/HT0srp+gqbybWKE16rip04S7ew+ay8=) 10: Tx1QRE1K0CqqbNISdem5mSeFyhY.roa (hash: TsoYEEq1X+nTDdaU6FQwegqSC4XnT5STovO4gDOXBsw=) 11: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (hash: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY=) 12: WhpdbusgONQkGfJUmuHu3hC04fM.roa (hash: dMwJ/FCdVp8IZAqayVtrT8hk8KNS++zwBXrsEJV7xwo=) 13: X0kSuarZ-g_McCBdBJMAHOmD78E.roa (hash: Gr2z6DPYOsIVXCMbomTNzbkS+4fkBpnvaCGP+zUJOhk=) 14: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: NI/jBjiyJ+9RaOZFJU0SdxIj+/4Q9LMeOs3nckhZVXM=) 15: aGx-mWhigRE4_KS4p7V620T7uRA.roa (hash: uYU/8IkqjXFpdqBKotX53i7emMpJhAXYS06trCmNRIw=) 16: rKBqA4AVr8V474f1fS0u1WEme_g.roa (hash: Ztg6Dzjy4Iu5rj4fL+sFN+yMeB/hu7159PSBkLZlOq0=) 17: tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa (hash: xN2ctTPtxjMiIigccibut/P5bneSpRG4NOTR23KVdug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:97:62:0d:18:91:63:47:43:d6:fb:c1:90:96:d5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Mar 26 10:01:19 2026 GMT Not After : Mar 27 10:01:19 2026 GMT Subject: CN=987bacfa1a9e0f66bbad622fd8c023babcbeb3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:d4:93:34:1a:62:3a:de:95:41:5f:a9:36: 67:44:0a:1a:3d:36:8d:5e:71:59:81:db:99:77:5a: a2:04:6b:18:15:55:a6:77:ad:a7:67:ad:8f:f3:b7: a5:ef:29:52:b2:78:01:66:81:88:69:08:c3:a5:79: 8a:7c:ec:e7:d0:78:17:70:e8:bf:f8:ef:5e:28:52: c0:b3:e6:41:d7:2e:a2:12:e1:b5:65:2d:3f:5a:6b: 84:b1:e0:07:a8:81:59:90:45:df:7d:6a:5f:de:d0: 98:18:2a:8c:1d:af:f9:4e:40:40:70:8f:66:38:25: 6d:25:38:24:4e:1b:24:ea:4b:7b:11:40:fa:75:57: f4:90:ca:cc:7c:79:91:81:aa:a0:25:53:bf:21:76: 0a:f1:fa:a9:d7:a2:81:a7:73:2b:7f:71:58:23:72: d0:d2:5d:9e:52:07:1c:4a:50:35:19:b0:a9:97:2a: c1:9d:10:0b:27:8c:76:bb:2c:d8:2f:1f:5b:e8:58: be:90:fc:cf:5c:6d:e3:4f:0d:0c:1d:99:de:1e:b0: 14:0c:fc:06:1d:34:9e:0c:86:b3:28:8c:c4:d6:8d: 2b:c8:a3:bf:c0:7c:c0:cb:41:db:25:d2:b5:30:fb: 05:de:17:3e:b5:9b:0e:72:da:d5:bb:d8:47:a1:15: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7B:AC:FA:1A:9E:0F:66:BB:AD:62:2F:D8:C0:23:BA:BC:BE:B3:BF X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b9:e9:d6:b7:5a:4f:61:39:98:87:b6:02:33:0b:3f:1b:b8: e6:1d:9a:84:60:a3:a4:03:fe:79:45:f9:6a:1d:2d:ea:cb:88: 69:77:04:dd:3d:84:65:70:b2:88:27:c4:dd:d8:cb:f0:ef:17: cd:3c:84:0a:51:c6:70:1e:19:ac:34:bd:86:6c:a8:cb:5e:15: 45:6a:57:23:c3:5f:48:69:3c:c1:09:ed:b7:3f:0c:0e:62:84: 10:e2:53:c0:68:59:ed:d5:bd:c8:69:bd:1f:cf:af:ab:ae:74: 0a:60:a9:a2:99:31:7c:c9:09:08:83:b7:5c:27:3d:55:01:c2: c9:a9:e2:ae:25:60:f5:6f:10:f9:c7:31:7e:a1:2d:9c:48:95: d6:62:7a:51:b0:5f:49:81:a2:f8:64:3d:0d:e8:6a:f9:5d:da: b3:b0:91:1d:dd:4b:9a:ee:74:b8:51:ea:69:8f:da:85:32:a4: 33:f9:7c:df:fc:20:a4:c2:01:36:40:d7:21:e3:7e:13:bd:f1: 18:21:b9:bf:dc:c6:1e:ae:d1:51:a0:72:cf:11:a2:44:17:92: 50:8b:a7:4e:10:40:6c:1f:01:f9:95:b2:c3:08:9e:37:1f:58: 4d:c0:2f:13:94:5b:96:0f:8a:6f:af:52:ca:49:2e:81:ca:56: 35:eb:b4:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pl2INGJFjR0PW+8GQltXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMzI2MTAwMTE5WhcNMjYwMzI3MTAwMTE5WjAzMTEwLwYDVQQD Eyg5ODdiYWNmYTFhOWUwZjY2YmJhZDYyMmZkOGMwMjNiYWJjYmViM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplbUkzQaYjrelUFfqTZnRAoaPTaN XnFZgduZd1qiBGsYFVWmd62nZ62P87el7ylSsngBZoGIaQjDpXmKfOzn0HgXcOi/ +O9eKFLAs+ZB1y6iEuG1ZS0/WmuEseAHqIFZkEXffWpf3tCYGCqMHa/5TkBAcI9m OCVtJTgkThsk6kt7EUD6dVf0kMrMfHmRgaqgJVO/IXYK8fqp16KBp3Mrf3FYI3LQ 0l2eUgccSlA1GbCplyrBnRALJ4x2uyzYLx9b6Fi+kPzPXG3jTw0MHZneHrAUDPwG HTSeDIazKIzE1o0ryKO/wHzAy0HbJdK1MPsF3hc+tZsOctrVu9hHoRWBMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh7rPoang9mu61iL9jAI7q8vrO/MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7np1rda T2E5mIe2AjMLPxu45h2ahGCjpAP+eUX5ah0t6suIaXcE3T2EZXCyiCfE3djL8O8X zTyEClHGcB4ZrDS9hmyoy14VRWpXI8NfSGk8wQnttz8MDmKEEOJTwGhZ7dW9yGm9 H8+vq650CmCpopkxfMkJCIO3XCc9VQHCyaniriVg9W8Q+ccxfqEtnEiV1mJ6UbBf SYGi+GQ9Dehq+V3as7CRHd1Lmu50uFHqaY/ahTKkM/l83/wgpMIBNkDXIeN+E73x GCG5v9zGHq7RUaByzxGiRBeSUIunThBAbB8B+ZWywwieNx9YTcAvE5Rblg+Kb69S ykkugcpWNeu0sA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:42:42 2026 by rpki-client