
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: QOk1Ldv/N74DNBcJkTWIw1r5I+e753WlObNL9b61sPo=
Subject key identifier: 21:FF:97:3B:CE:EB:F3:94:5B:5C:1C:1B:AC:1A:76:31:4D:87:88:FC
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A0822E59FD618427A2CEC2DFE9E9FCCE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 13F5
Signing time: Tue 08 Sep 2026 18:01:10 +0000
Manifest this update: Tue 08 Sep 2026 18:01:10 +0000
Manifest next update: Wed 09 Sep 2026 18:01:10 +0000
Files and hashes: 1: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (hash: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=)
2: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
3: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
4: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
7: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
8: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
9: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
10: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
11: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
12: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
13: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
14: Q3xAijESeYdlTPBRNmpFnCp3SeM.roa (hash: YwvuP8Q0rR+0UvPl0hG/coqtl5YgB8mhSubSAs1dCWg=)
15: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
16: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
17: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
18: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
19: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
20: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (hash: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=)
21: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
22: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
23: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: zy+xoyu+II9sog0usvtXcb46PVrxp+LqYIwVe1Kf4wU=)
24: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
25: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (hash: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=)
26: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (hash: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=)
27: kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa (hash: sS02QxMncCoHPvN+ZDUnzYl7QCBel0tw7QHGIiNuats=)
28: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
29: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (hash: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=)
30: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
31: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
32: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
33: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
34: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
35: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
36: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:2e:59:fd:61:84:27:a2:ce:c2:df:e9:e9:fc:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 8 18:01:10 2026 GMT
Not After : Sep 9 18:01:10 2026 GMT
Subject: CN=21ff973bceebf3945b5c1c1bac1a76314d8788fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:fc:2b:17:b5:18:16:b4:85:09:d7:2d:70:
f4:9b:34:bd:7d:4a:f1:02:7d:7c:cf:22:be:06:dc:
dc:9e:e3:56:b4:d9:67:11:40:94:b3:08:c9:e6:a6:
28:c8:af:02:af:ab:db:ae:50:ca:dd:f8:94:4c:15:
fb:3c:a6:4d:47:a3:1f:4b:9c:fd:d7:1a:82:ec:6f:
65:a0:e6:77:0d:16:c0:bc:b4:b4:32:d9:a7:e5:a6:
40:1e:63:cc:1c:3d:f1:0c:6e:e2:0a:c9:dd:8b:bd:
6f:76:0b:ea:e0:6f:b9:6e:0f:14:a5:18:05:4b:d3:
23:38:cd:d6:d6:a9:54:54:84:e4:cd:0c:39:75:35:
8b:90:37:34:04:f4:3a:97:52:35:d8:90:5c:f0:2d:
78:27:a3:c0:06:3f:15:1b:f4:16:c3:8a:94:3b:af:
b7:e3:75:39:20:0d:5b:fe:62:b0:40:d0:04:a6:ce:
ec:7d:15:93:58:2b:04:4d:79:e7:33:17:e1:e1:6b:
03:92:e6:6e:c1:26:dc:30:3e:d6:59:4d:dc:38:67:
7f:a3:4f:a4:3e:24:78:7d:21:bf:a9:14:62:05:ec:
78:0d:fb:1a:11:1c:ee:6f:2e:8f:2d:13:93:af:e8:
a0:25:21:aa:25:0e:45:97:38:2d:b5:6a:e9:92:1b:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:97:3B:CE:EB:F3:94:5B:5C:1C:1B:AC:1A:76:31:4D:87:88:FC
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:b5:3d:68:b7:60:4f:aa:d9:65:86:86:bc:90:ae:6e:5c:
5f:79:c5:b7:56:6a:91:bb:f4:da:7a:93:be:5d:dd:c4:9b:97:
89:49:c6:5a:48:3b:26:0b:5e:43:37:45:f5:4d:a8:79:23:c2:
f2:f3:40:50:d5:17:89:a0:a1:76:68:87:d4:aa:43:a0:50:f5:
c2:8f:ff:97:ab:c1:3a:aa:a8:fc:4d:f4:ca:66:de:75:f7:ab:
92:87:b5:3f:25:16:6c:0e:cd:a6:80:76:76:48:81:23:d0:dc:
9c:92:75:1b:78:86:3f:68:c0:24:75:29:ec:6a:10:e6:d3:d8:
db:82:14:19:bf:d7:72:52:70:33:7e:5b:f8:ec:64:95:1a:e2:
0f:78:77:01:5b:a8:ef:0d:ec:08:49:0d:62:b4:58:5e:de:21:
63:0f:93:c5:95:94:41:0f:c2:b1:f7:b8:14:98:6e:a3:64:4c:
05:f3:c7:1d:93:e5:fa:0a:3f:87:b2:0d:bd:57:2c:08:7c:d5:
8c:c6:a2:71:86:84:cf:e8:8c:8f:8c:9d:e7:18:7f:95:3f:e8:
ee:10:c2:45:ff:4b:be:01:9e:0a:88:33:14:5a:49:9d:25:00:
a3:47:56:37:91:39:fd:ed:f1:3d:d1:54:ef:17:72:87:ed:21:
ad:c9:12:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCCLln9YYQnos7C3+np/M4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwOTA4MTgwMTEwWhcNMjYwOTA5MTgwMTEwWjAzMTEwLwYDVQQD
EygyMWZmOTczYmNlZWJmMzk0NWI1YzFjMWJhYzFhNzYzMTRkODc4OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU38Kxe1GBa0hQnXLXD0mzS9fUrx
An18zyK+BtzcnuNWtNlnEUCUswjJ5qYoyK8Cr6vbrlDK3fiUTBX7PKZNR6MfS5z9
1xqC7G9loOZ3DRbAvLS0Mtmn5aZAHmPMHD3xDG7iCsndi71vdgvq4G+5bg8UpRgF
S9MjOM3W1qlUVITkzQw5dTWLkDc0BPQ6l1I12JBc8C14J6PABj8VG/QWw4qUO6+3
43U5IA1b/mKwQNAEps7sfRWTWCsETXnnMxfh4WsDkuZuwSbcMD7WWU3cOGd/o0+k
PiR4fSG/qRRiBex4DfsaERzuby6PLROTr+igJSGqJQ5FlzgttWrpkhuD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH/lzvO6/OUW1wcG6wadjFNh4j8MB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV61PWi3
YE+q2WWGhryQrm5cX3nFt1Zqkbv02nqTvl3dxJuXiUnGWkg7JgteQzdF9U2oeSPC
8vNAUNUXiaChdmiH1KpDoFD1wo//l6vBOqqo/E30ymbedferkoe1PyUWbA7NpoB2
dkiBI9DcnJJ1G3iGP2jAJHUp7GoQ5tPY24IUGb/XclJwM35b+OxklRriD3h3AVuo
7w3sCEkNYrRYXt4hYw+TxZWUQQ/Csfe4FJhuo2RMBfPHHZPl+go/h7INvVcsCHzV
jMaicYaEz+iMj4yd5xh/lT/o7hDCRf9LvgGeCogzFFpJnSUAo0dWN5E5/e3xPdFU
7xdyh+0hrckSWA==
-----END CERTIFICATE-----
Generated at Tue Sep 8 20:36:09 2026 by rpki-client