
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: S+rFhXFNnQEebvjw9Z0yxU6OLY5PHNddxspFiIyrIXo=
Subject key identifier: 3B:56:76:26:01:F2:D5:A2:F3:8B:F9:F7:CF:97:07:87:8E:AF:2E:AA
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019CD61E6B796EEDE2E69E071C1DCAEFB717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 11EA
Signing time: Tue 10 Mar 2026 05:00:43 +0000
Manifest this update: Tue 10 Mar 2026 05:00:43 +0000
Manifest next update: Wed 11 Mar 2026 05:00:43 +0000
Files and hashes: 1: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (hash: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk=)
2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=)
4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
6: E3X5DvCSlkdtfxAadUSESD3eJrk.roa (hash: kCGyuLKDilqRCLENtFOYzrUVWzlMBuvjueB/aZz2GHM=)
7: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
8: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
9: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
10: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=)
11: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
12: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
13: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
14: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
15: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
16: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=)
17: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
18: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: IbKRn67TTPqjwNPx7q8WDveiZA9iERuWwnj6wZK4uSQ=)
19: efcP8-qp6rGIDUknP6ranBAFenc.roa (hash: eCznaG89xquMPr3uYbjxlMYwYWoDIZp7pfe+xehKenM=)
20: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
21: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
22: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
23: pUUSDW7JRITPLH3NewhxW4cUvRY.roa (hash: qkr6YH2kb+kFgIzqY0pDMe+J2a9UaWnHDsLI3Fg85+Y=)
24: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
25: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
26: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
27: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:1e:6b:79:6e:ed:e2:e6:9e:07:1c:1d:ca:ef:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Mar 10 05:00:43 2026 GMT
Not After : Mar 11 05:00:43 2026 GMT
Subject: CN=3b56762601f2d5a2f38bf9f7cf9707878eaf2eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:42:6b:03:bf:eb:5e:f5:d6:7b:64:e8:d9:
ae:88:ff:98:60:22:b3:e4:bb:0b:78:84:db:dc:9d:
ff:79:80:5b:80:71:06:55:cb:39:e8:f7:bf:88:f4:
0c:8f:e0:34:a0:6e:1c:08:0b:98:22:53:59:78:fc:
aa:30:b8:05:af:fb:ee:02:b1:88:8c:02:77:b9:95:
47:7b:87:cd:d1:a3:fd:37:57:5f:f1:4f:26:f7:32:
bc:b6:09:1a:2e:67:7d:05:47:36:f6:0b:85:b2:a7:
70:72:53:fe:89:fb:09:94:70:eb:a9:30:95:00:86:
35:b6:e4:66:5f:24:04:96:ab:07:97:ba:4f:5b:48:
d6:ce:6e:69:4d:27:f0:25:bf:52:5d:6f:aa:05:e9:
10:01:13:02:24:98:4b:d4:fc:a8:aa:5a:84:ca:b3:
66:fb:5e:c0:e6:6a:e6:79:62:e8:eb:db:03:13:e8:
9a:ab:4e:47:e7:7c:25:5c:4b:1e:b4:3f:65:91:1b:
2d:41:24:0b:30:0c:09:62:d9:94:ea:6a:2a:33:4d:
c9:f5:d7:7c:9e:d5:4a:47:5f:e4:91:bf:33:d7:cf:
7e:34:ee:7f:fc:32:f9:af:89:54:36:47:41:a5:98:
0a:3a:22:fd:e3:7c:d4:42:ea:3c:e2:d1:2d:07:b9:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:76:26:01:F2:D5:A2:F3:8B:F9:F7:CF:97:07:87:8E:AF:2E:AA
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:0a:35:2c:d3:80:d2:fb:d2:5a:29:aa:ac:05:51:0c:08:
2f:69:51:ba:46:87:70:33:50:06:7c:e6:87:3a:95:ca:32:7c:
4b:96:96:e3:ab:d6:bc:73:81:fe:1d:1c:3c:18:5b:d8:1f:fa:
70:f6:84:37:c1:45:00:fa:66:2a:5b:3b:6a:8a:da:a6:70:1d:
e9:6b:83:41:7b:c8:6c:22:56:51:76:64:74:fa:e4:a5:b3:00:
eb:9d:62:11:b6:f2:06:e2:c6:6b:e7:22:02:8a:c3:de:8e:f2:
9c:dd:f3:ea:e5:03:77:37:40:82:70:5e:24:97:23:87:20:d5:
3f:d4:f8:02:2d:2f:ed:ff:a8:45:62:96:3e:37:5c:76:48:48:
aa:a7:76:3c:fe:5d:55:fc:e6:c5:ca:26:32:7d:0f:b2:05:7a:
05:80:6a:f3:2d:24:50:e6:dd:ae:d1:2e:c1:0e:cb:1a:d9:c5:
66:65:8e:a6:fe:bb:1b:2b:41:a5:21:70:41:97:f1:95:39:d2:
bd:19:79:ec:17:c9:91:3a:8b:e9:b6:7e:da:31:0d:70:4b:cb:
6d:e5:a5:5a:7a:a8:65:bb:61:20:77:fe:b2:b4:72:32:6e:a5:
33:e7:39:bf:01:6d:25:57:d4:6b:c4:c5:08:64:1b:95:39:d6:
3a:c6:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:39:45 2026 by rpki-client