$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: XMIhskThaCd966+fYG2kiRcGO7bskYcVVeA/9v0oTG0= Subject key identifier: 14:C3:C1:9E:E0:60:E5:D3:51:E3:91:CE:7A:98:CC:24:5F:5D:29:1E Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 01A1DEA77E84A19991424A12401303485938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 02E4 Signing time: Sun 15 Nov 2026 10:01:21 +0000 Manifest this update: Sun 15 Nov 2026 10:01:21 +0000 Manifest next update: Mon 16 Nov 2026 10:01:21 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: Vw+ltPDoV2QjOG8vl1XA/2uYZnEGdYY93X9w1Xg1RvU=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:7e:84:a1:99:91:42:4a:12:40:13:03:48:59:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Nov 15 10:01:21 2026 GMT Not After : Nov 16 10:01:21 2026 GMT Subject: CN=14c3c19ee060e5d351e391ce7a98cc245f5d291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:60:da:15:11:f9:21:3c:e4:32:ec:6a:d5:c9: 72:a1:25:f6:aa:32:9c:16:61:1f:f8:f1:ac:b4:c8: 65:97:6f:b4:31:5d:95:25:13:10:45:db:f3:91:02: 42:0b:14:81:62:66:f3:51:d0:e8:01:ae:68:c7:6d: d3:20:22:76:ef:c8:3a:cb:a7:82:5e:d2:d5:50:94: 5b:d2:37:4e:82:c4:a6:78:20:d3:6f:22:f9:d8:3f: 53:cd:b9:e5:5a:34:eb:35:9a:4a:bd:af:41:4e:c0: c7:fb:ee:d2:27:02:41:15:10:d6:1b:db:dc:e0:02: 86:5a:00:f9:67:77:ea:99:20:6d:9d:6f:71:24:f8: da:43:b3:6c:80:d4:18:a6:32:98:8a:27:aa:8e:39: 4a:de:09:76:47:4b:9d:de:7b:d7:bc:5f:48:fe:61: d2:79:65:ef:8c:a6:21:84:5c:0d:b9:ea:b0:43:32: e1:70:38:8d:d9:9b:7a:15:cb:58:4d:6e:14:81:ca: e7:32:35:b1:33:ca:08:05:8a:b9:01:97:99:46:90: e2:23:62:34:5e:19:f6:2e:9f:c2:4a:e3:32:ba:c6: 79:bd:1e:24:4e:b3:fd:90:bd:69:b6:46:17:74:a3: 1a:e2:ea:97:f0:25:ea:03:07:fe:98:00:cb:67:6a: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C3:C1:9E:E0:60:E5:D3:51:E3:91:CE:7A:98:CC:24:5F:5D:29:1E X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9d:b9:38:aa:31:7e:77:29:42:f3:c2:13:fb:34:ce:f4:e5: ef:56:e6:62:db:19:b6:31:72:a4:af:5f:be:c3:25:e5:ef:14: 8c:80:16:b1:b9:6c:76:ba:2f:e2:8a:d1:72:6f:fd:ce:5f:f9: c8:66:dc:b3:09:36:36:1f:df:3a:0e:31:c4:52:b8:34:49:1d: 44:79:1b:2b:1f:97:36:9a:fa:fd:7b:23:0d:87:1a:6c:99:52: 62:c8:47:1c:3c:56:98:6e:33:1d:96:35:15:2e:15:96:1f:26: 02:a1:21:a9:65:0c:ef:4b:0b:e0:08:b5:cf:30:eb:9b:2e:74: dc:e3:97:7e:fc:44:79:5c:36:4c:b5:d0:fc:a7:2e:5c:db:22: f5:09:70:4f:8a:2b:be:73:75:f8:58:a7:68:83:3c:82:d6:85: 2f:92:b4:50:44:4b:e3:9f:0f:55:75:23:05:41:8b:90:b0:18: b6:6e:3a:61:dd:2b:20:65:22:dc:7b:5f:02:09:70:10:38:6b: ce:2f:c6:be:2d:a4:61:f8:50:11:8d:35:63:ab:c8:c9:01:d9: db:30:8f:7e:35:ee:2e:8c:22:ba:8b:88:70:fb:bb:e6:84:4a: fc:fe:a0:34:ad:54:5a:4d:41:5d:b3:30:3a:81:d8:5b:6d:24: 8e:29:ac:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep36EoZmRQkoSQBMDSFk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYxMTE1MTAwMTIxWhcNMjYxMTE2MTAwMTIxWjAzMTEwLwYDVQQD EygxNGMzYzE5ZWUwNjBlNWQzNTFlMzkxY2U3YTk4Y2MyNDVmNWQyOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mDaFRH5ITzkMuxq1clyoSX2qjKc FmEf+PGstMhll2+0MV2VJRMQRdvzkQJCCxSBYmbzUdDoAa5ox23TICJ278g6y6eC XtLVUJRb0jdOgsSmeCDTbyL52D9TzbnlWjTrNZpKva9BTsDH++7SJwJBFRDWG9vc 4AKGWgD5Z3fqmSBtnW9xJPjaQ7NsgNQYpjKYiieqjjlK3gl2R0ud3nvXvF9I/mHS eWXvjKYhhFwNueqwQzLhcDiN2Zt6FctYTW4UgcrnMjWxM8oIBYq5AZeZRpDiI2I0 Xhn2Lp/CSuMyusZ5vR4kTrP9kL1ptkYXdKMa4uqX8CXqAwf+mADLZ2pObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTDwZ7gYOXTUeORznqYzCRfXSkeMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZ25OKox fncpQvPCE/s0zvTl71bmYtsZtjFypK9fvsMl5e8UjIAWsblsdrov4orRcm/9zl/5 yGbcswk2Nh/fOg4xxFK4NEkdRHkbKx+XNpr6/XsjDYcabJlSYshHHDxWmG4zHZY1 FS4Vlh8mAqEhqWUM70sL4Ai1zzDrmy503OOXfvxEeVw2TLXQ/KcuXNsi9QlwT4or vnN1+FinaIM8gtaFL5K0UERL458PVXUjBUGLkLAYtm46Yd0rIGUi3HtfAglwEDhr zi/Gvi2kYfhQEY01Y6vIyQHZ2zCPfjXuLowiuouIcPu75oRK/P6gNK1UWk1BXbMw OoHYW20kjims9Q== -----END CERTIFICATE-----Generated at Sun Nov 15 17:55:05 2026 by rpki-client