
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: 8krKiwFlwx6TGsqenD99V+CwBTOOhttuNf1rxWPCrBQ=
Subject key identifier: 98:31:07:F3:4C:A7:B2:62:BB:E9:84:A8:9D:46:4C:AF:DF:15:07:9C
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A0BE0BB28980B1E29E8C6D59C8C1C4CACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 1414
Signing time: Sun 20 Sep 2026 09:00:32 +0000
Manifest this update: Sun 20 Sep 2026 09:00:32 +0000
Manifest next update: Mon 21 Sep 2026 09:00:32 +0000
Files and hashes: 1: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (hash: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=)
2: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
3: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
4: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
7: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
8: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
9: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
10: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
11: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
12: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
13: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
14: Q3xAijESeYdlTPBRNmpFnCp3SeM.roa (hash: YwvuP8Q0rR+0UvPl0hG/coqtl5YgB8mhSubSAs1dCWg=)
15: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
16: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
17: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
18: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
19: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
20: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (hash: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=)
21: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
22: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
23: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: iWlJBFy+yjcJHzaXd5gt+ZrflJLmySlLjqupKkWPB3A=)
24: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
25: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (hash: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=)
26: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (hash: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=)
27: kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa (hash: sS02QxMncCoHPvN+ZDUnzYl7QCBel0tw7QHGIiNuats=)
28: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
29: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (hash: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=)
30: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
31: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
32: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
33: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
34: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
35: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
36: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:b2:89:80:b1:e2:9e:8c:6d:59:c8:c1:c4:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 20 09:00:32 2026 GMT
Not After : Sep 21 09:00:32 2026 GMT
Subject: CN=983107f34ca7b262bbe984a89d464cafdf15079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:1c:88:e5:ba:f7:65:77:7e:27:6e:a2:b8:
01:a1:1b:a9:b7:17:ea:55:8f:7b:d3:15:77:24:83:
f9:af:2a:0c:d0:d7:02:e0:36:cf:b3:2a:76:3f:f8:
50:05:56:3c:85:af:6d:6d:0a:86:b1:60:86:01:7b:
62:14:0d:69:2a:41:8f:92:81:a7:c3:2f:bc:9d:6a:
89:63:aa:85:fa:48:ad:40:b2:57:58:ab:b2:c6:fa:
06:5a:01:34:54:8f:d6:34:0b:d2:7c:91:02:93:7a:
61:2c:ae:ac:1c:67:d7:40:c2:45:6c:ac:0f:4c:26:
4b:df:73:10:98:45:26:2c:cc:11:20:88:c0:26:59:
3f:39:6e:1a:7a:a4:b2:7e:6d:95:31:45:42:9d:45:
70:03:86:a6:a5:6d:d8:bd:f6:06:2f:f7:b3:2e:01:
de:e6:40:74:d9:90:95:8f:f7:4a:a9:b7:f5:11:81:
cd:12:9f:87:0c:0b:47:61:b5:a1:87:56:5e:17:48:
b6:bd:b1:14:be:b0:f5:05:18:d1:0e:10:34:35:a4:
9e:ee:8e:9c:ea:9c:3f:20:f9:cf:a3:30:8d:ed:58:
02:df:43:61:c3:25:26:ed:71:68:73:e0:4e:c4:e2:
ce:48:78:b8:41:83:f8:b8:6a:48:6a:5c:82:75:97:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:07:F3:4C:A7:B2:62:BB:E9:84:A8:9D:46:4C:AF:DF:15:07:9C
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:ba:9b:33:65:cf:cc:88:dc:7d:d1:69:8f:03:06:2f:8d:
44:a0:77:77:91:84:7f:39:f0:10:e4:bf:28:c5:b7:dd:4f:4b:
a9:a1:b1:98:b2:2c:76:70:f4:d8:35:f2:6b:a4:6d:1d:d4:0b:
b0:a3:e0:72:cc:b9:ca:a8:9c:b4:8d:29:de:a2:17:a8:47:0a:
88:b5:03:68:dc:d0:cf:74:8c:95:93:75:fb:66:d9:3b:9b:ca:
d2:4a:de:30:2e:d5:91:0e:32:a5:04:be:e0:df:89:85:79:d4:
01:d9:af:93:56:32:2a:9c:05:c9:85:1d:4e:cb:ae:5a:34:d8:
27:76:42:bc:29:5d:80:19:a7:9e:79:c2:e3:2f:6e:e8:7d:b5:
b9:57:8f:3f:cf:3a:55:06:84:c4:ff:aa:e0:3d:e1:a0:a1:42:
5d:fa:95:5e:15:a4:56:03:52:64:62:a3:63:a5:b9:ef:0f:58:
aa:0c:98:92:8d:fb:2c:1a:bb:c3:2d:ea:a4:f1:af:ef:d8:7b:
07:f6:d2:29:b0:91:6a:3a:b2:f9:d0:9e:52:8e:67:58:61:1c:
fd:b5:34:46:44:c0:1c:53:90:56:df:f0:41:f8:23:0e:d4:e2:
f4:2f:d7:05:79:3f:be:02:36:1a:7d:5b:d9:d5:ae:21:76:b8:
5b:22:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:39:04 2026 by rpki-client