
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: inoqTWTOHfnh25JlvAuI8XDxa+8383ZdbnTWgh/YCi8=
Subject key identifier: 8A:25:B0:E5:E7:B3:2E:68:0B:A9:E1:22:C7:82:6E:2C:34:47:A2:C8
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019EA977CDD90038E90114D330E1F17C5C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 12F9
Signing time: Mon 08 Jun 2026 23:01:01 +0000
Manifest this update: Mon 08 Jun 2026 23:01:01 +0000
Manifest next update: Tue 09 Jun 2026 23:01:01 +0000
Files and hashes: 1: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
3: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
4: 6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa (hash: O0/6hTUPh/pNhMmPBODmIvQuruNGiAl8r721VcN/XzQ=)
5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
7: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
8: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
9: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
10: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
11: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
12: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
13: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
14: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
15: PP1tFuKDSWKU3uys7bPZgHmO32Y.roa (hash: ch0uWTewbG9M0McTdfxSKidScKLRv9p9iinr/2CaifY=)
16: RbjX86fcOMSY4QFLKDJwZ2qTveo.roa (hash: N6VxatQ/mIA8OoimGHGJtwJB+iRV96F3haafY4KxDvg=)
17: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
18: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
19: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
20: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
21: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
22: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
23: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
24: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: KmJskXIyOd8YNVnAsen5rEM/SaRkJIUcZhgden6QQdM=)
25: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
26: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
27: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
28: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
29: s5heQ19LizKGGfMDqK5Iq5EUCS8.roa (hash: 3YsMiK/Tzw6pZesf/Yk4bL7YB+iCygnfpI53A+Wi7eo=)
30: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
31: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
32: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
33: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
34: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
35: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:77:cd:d9:00:38:e9:01:14:d3:30:e1:f1:7c:5c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jun 8 23:01:01 2026 GMT
Not After : Jun 9 23:01:01 2026 GMT
Subject: CN=8a25b0e5e7b32e680ba9e122c7826e2c3447a2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:f7:9d:73:03:d2:90:12:14:5c:12:f0:ef:
8a:fa:10:aa:15:0d:b0:5d:4f:bf:dd:ea:4b:d5:23:
ae:29:9e:c7:a7:60:f6:fb:40:4b:64:89:02:c5:70:
7c:83:e7:14:e8:a0:c1:63:a1:f5:70:c4:51:ea:4a:
39:b7:3c:73:57:fa:91:9e:d4:35:21:c8:42:33:39:
01:3c:b7:aa:dd:d7:79:f5:04:d1:0e:1b:9e:d4:0f:
83:72:0e:33:67:f0:98:f2:dd:3c:55:8c:23:56:91:
52:2c:0b:bf:65:24:e4:90:1a:67:c9:dd:c8:7e:e3:
ab:e9:85:08:82:fc:92:40:4d:13:9f:d7:ca:6d:f3:
e7:34:b2:db:b3:79:59:55:be:e6:4d:df:f2:64:5f:
70:50:ed:b5:00:9f:e5:e4:29:f5:4f:8b:62:28:aa:
e8:83:6c:cc:76:2a:10:9e:d9:71:fe:97:6c:a1:c5:
32:69:db:de:d4:e2:2e:e0:83:96:c9:7d:b3:fb:82:
79:fe:86:73:24:a4:32:c1:bc:01:52:da:9d:54:0f:
a0:43:6a:8d:6f:00:40:bc:f7:ce:b0:1d:1d:63:28:
07:a9:2a:48:7d:82:e9:95:4b:73:90:ae:e8:95:d3:
09:47:ec:09:2a:1d:f8:1a:40:21:14:a9:d7:24:64:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:B0:E5:E7:B3:2E:68:0B:A9:E1:22:C7:82:6E:2C:34:47:A2:C8
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:bb:1d:df:7b:bc:58:e4:74:11:2f:a5:ab:52:12:a1:b2:
07:e9:73:75:7a:c1:b8:b4:8d:6e:71:c6:54:6f:eb:5a:fe:7c:
f2:cb:a2:92:9b:39:06:0f:7e:d9:29:c4:a8:72:e5:bc:1a:3a:
26:20:7d:69:6b:39:45:95:fb:43:fb:66:fe:4e:32:0b:03:f0:
82:b8:cd:fe:b4:c4:52:5b:94:d8:17:1a:12:c7:26:ea:3c:92:
0e:bf:5f:8e:03:24:9b:86:95:e7:f5:e3:0b:79:6b:ee:c4:91:
95:a6:10:d7:ae:c7:a4:32:5b:3d:02:c6:b0:10:c5:20:5f:83:
78:fb:09:51:d9:d0:b1:85:ce:f5:57:69:f1:b5:45:ea:c5:9a:
50:5a:2c:0e:02:08:4d:09:2d:c7:e6:19:70:7f:87:32:03:8a:
c9:3f:c9:a0:00:62:d1:98:ec:17:6c:fc:1d:e3:de:00:a1:7f:
5e:6d:51:6f:78:a7:3c:67:fb:e9:14:42:b6:be:47:88:e2:9d:
d7:d2:c7:da:b7:50:c6:e2:6f:33:92:23:2b:35:8b:7e:ab:28:
ab:5e:de:1c:75:a1:bb:e4:25:9e:40:a0:68:52:96:ef:87:7c:
77:8e:76:33:fa:2c:87:91:c0:af:05:e0:d1:70:39:dd:8b:59:
01:65:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 04:39:25 2026 by rpki-client