$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: nCxKm1ZiJ2+gzspjUaCF/hnqzOUKn4J4UAzTLkqvAYA= Subject key identifier: E9:7A:16:C4:DA:65:CA:78:16:63:12:CB:F0:62:1F:4E:B7:B6:8A:FA Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 01A0D45E0CF1C448E7EBF15D7BF04B9520AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1AE1 Signing time: Thu 24 Sep 2026 17:02:08 +0000 Manifest this update: Thu 24 Sep 2026 17:02:08 +0000 Manifest next update: Fri 25 Sep 2026 17:02:08 +0000 Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=) 2: 1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa (hash: OR0K6ja0+6tjObcYpglQ6VtaBnvWmTTk4GVSghcFZtk=) 3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=) 4: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=) 5: 7fgcMQkmfWwHXhrbNvdl9LWSJKA.roa (hash: pADt641ZfrBrQwfXg3JUa602uETFbQeFY9v2r19pKXI=) 6: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=) 7: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=) 8: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (hash: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=) 9: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=) 10: HDUXqeFC5mTa7lU_RmwELJjd7sg.roa (hash: U543lYj0wOYAaksGChXjX7Bufgd0My2VXcD17aAopUA=) 11: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=) 12: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=) 13: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=) 14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=) 15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=) 16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=) 17: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=) 18: Xp4_W5QH684_v2ntxjTbXLi7co4.roa (hash: qVI7vhEbL0w9fKHM8ldDF9m2E1ZZAflMgjTOoFsG2NU=) 19: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: gV98GzxOsuL9qYF6JHUmDOHYsb8YbGc3L//2BthM+Ws=) 20: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (hash: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=) 21: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=) 22: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=) 23: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=) 24: aq6EbRSc2yPXLymWgfc3hs2RSl0.roa (hash: c4jt4ZG6ePsIANqDTyXyyUoY7noOmOWYrKSmA8oP7jY=) 25: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=) 26: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=) 27: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=) 28: gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa (hash: vPMzw8PpBWw8xTWacYUychh/qBw+PTqAXcQqiVGh4H4=) 29: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=) 30: niGcWz0ThxJygz-PLbVysx_sLZE.roa (hash: g18PU3cPKMc6/2ma47ogKuHWzJTyComhxOWTfFk6wlA=) 31: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=) 32: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=) 33: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=) 34: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=) 35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:5e:0c:f1:c4:48:e7:eb:f1:5d:7b:f0:4b:95:20:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Sep 24 17:02:08 2026 GMT Not After : Sep 25 17:02:08 2026 GMT Subject: CN=e97a16c4da65ca78166312cbf0621f4eb7b68afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:ac:5a:1a:04:af:52:1e:8d:ba:e0:6a:46: 4f:00:2e:7f:ab:e1:75:27:06:5d:f5:d4:81:75:20: 67:dd:ae:b7:f5:b8:b2:5e:0b:9c:f4:c0:72:42:a3: e5:45:75:cf:ab:4c:32:01:2a:16:a8:d4:a0:91:9e: 47:8b:7f:c3:65:8d:43:5c:f1:70:ff:fc:36:52:32: 04:76:ee:5c:6f:a9:94:53:60:01:71:d8:ce:10:ca: 9f:88:59:05:e5:23:19:f1:01:c4:93:ea:ec:71:e6: 1b:a5:c0:26:61:4c:0a:64:91:08:2c:71:f3:96:d9: ab:06:c3:ed:39:91:dc:1e:50:ea:10:6c:18:20:cc: 60:2f:a1:ad:28:f1:06:19:56:4c:ac:ee:a9:68:a7: a5:4b:fe:8c:5b:16:0f:8e:52:b6:c1:87:b0:0f:26: 39:22:b5:f4:a1:ee:a8:ec:20:bf:56:a3:a8:46:3c: 02:7d:2e:ef:7e:2e:5d:59:df:4c:aa:8e:2f:cf:41: 91:5d:8e:3f:1c:3e:6f:42:6f:7d:a4:71:f4:17:1e: 00:57:cc:cb:0a:16:87:20:91:02:14:12:6c:b2:cb: f7:40:63:8f:f4:f5:f4:c2:22:12:b7:9c:73:44:1a: c9:ea:98:a0:5a:22:38:f7:83:89:ac:ce:d7:96:52: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:16:C4:DA:65:CA:78:16:63:12:CB:F0:62:1F:4E:B7:B6:8A:FA X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:03:96:ea:ce:4a:7f:42:9b:c9:2e:b6:ab:1f:b1:12:34:9d: 73:ce:9c:5f:cb:a4:17:cc:ae:cb:8c:48:fb:1f:e9:a6:80:0c: 13:be:f3:0f:82:8b:12:e5:b9:f6:37:2f:41:b4:e7:3e:ae:24: e6:3c:f1:7e:c7:5f:6e:54:88:36:f1:a1:92:21:4b:0d:46:df: fa:3f:da:ab:26:ba:2a:f9:96:57:c9:95:4b:25:af:01:f8:86: 0d:df:20:d6:ca:0c:f6:7f:6d:2f:22:ab:31:17:c9:a0:8d:8f: 15:cf:be:5d:d2:49:79:4b:be:d7:d4:e1:f8:1c:7f:ad:9d:16: 9e:9e:0b:42:5c:91:4b:1d:0c:88:b8:96:15:79:2b:e8:0e:13: 67:08:bc:9e:8f:bf:d2:50:b5:5f:7b:98:92:21:ff:23:f5:8b: 1b:2c:31:4a:ae:64:9d:1a:02:86:f9:6e:94:e2:b6:9d:6c:9c: e9:92:cb:b4:47:6a:89:c4:65:e5:ca:59:44:8c:08:8b:d6:8c: e1:ba:52:c4:60:ef:9c:cc:f5:17:24:62:9b:bf:26:bf:3b:58: 74:db:e6:61:25:23:49:7a:28:44:bb:06:78:b0:f8:70:03:8d: 0f:f5:0d:0b:fd:66:2d:ce:a5:9e:99:66:b2:f0:be:89:47:3d: 45:c0:8b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUXgzxxEjn6/Fde/BLlSCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwOTI0MTcwMjA4WhcNMjYwOTI1MTcwMjA4WjAzMTEwLwYDVQQD EyhlOTdhMTZjNGRhNjVjYTc4MTY2MzEyY2JmMDYyMWY0ZWI3YjY4YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GusWhoEr1IejbrgakZPAC5/q+F1 JwZd9dSBdSBn3a639biyXguc9MByQqPlRXXPq0wyASoWqNSgkZ5Hi3/DZY1DXPFw //w2UjIEdu5cb6mUU2ABcdjOEMqfiFkF5SMZ8QHEk+rsceYbpcAmYUwKZJEILHHz ltmrBsPtOZHcHlDqEGwYIMxgL6GtKPEGGVZMrO6paKelS/6MWxYPjlK2wYewDyY5 IrX0oe6o7CC/VqOoRjwCfS7vfi5dWd9Mqo4vz0GRXY4/HD5vQm99pHH0Fx4AV8zL ChaHIJECFBJsssv3QGOP9PX0wiISt5xzRBrJ6pigWiI494OJrM7XllJyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl6FsTaZcp4FmMSy/BiH063tor6MB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgOW6s5K f0KbyS62qx+xEjSdc86cX8ukF8yuy4xI+x/ppoAME77zD4KLEuW59jcvQbTnPq4k 5jzxfsdfblSINvGhkiFLDUbf+j/aqya6KvmWV8mVSyWvAfiGDd8g1soM9n9tLyKr MRfJoI2PFc++XdJJeUu+19Th+Bx/rZ0Wnp4LQlyRSx0MiLiWFXkr6A4TZwi8no+/ 0lC1X3uYkiH/I/WLGywxSq5knRoChvlulOK2nWyc6ZLLtEdqicRl5cpZRIwIi9aM 4bpSxGDvnMz1FyRim78mvztYdNvmYSUjSXooRLsGeLD4cAOND/UNC/1mLc6lnplm svC+iUc9RcCLVA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:48:13 2026 by rpki-client