
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: yKUnKs+prCV97yt+MvLkntsJSMVtt1BvdCa2s0XiQBw=
Subject key identifier: 3A:5B:A4:62:A2:25:14:83:D8:7A:FC:08:45:B0:37:97:3F:B5:8D:05
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019FA86262F43EF12D3B465ED2FDE0A63E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 137D
Signing time: Tue 28 Jul 2026 11:00:47 +0000
Manifest this update: Tue 28 Jul 2026 11:00:47 +0000
Manifest next update: Wed 29 Jul 2026 11:00:47 +0000
Files and hashes: 1: 1SJzKPxq2XZamd2PVyyf5ECKvn4.roa (hash: yGdup30EfkXrap+ZKcBPKLeHpGLend8QV66AYgn6GJU=)
2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
3: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
4: 6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa (hash: O0/6hTUPh/pNhMmPBODmIvQuruNGiAl8r721VcN/XzQ=)
5: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (hash: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=)
6: 9MMkNLQaKevQh8NRJg969azor18.roa (hash: W1vPZO6ptcclgqpYwOGPJY0QSASWp0D2JpcYbjeXEPY=)
7: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
8: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
9: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
10: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
11: I9jna8OKBcPNWTK50faEGCoz-ww.roa (hash: FQajcVi+55/pvRY75uZkUA/ocZfZcLJmQWcIGQZcb7g=)
12: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
13: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
14: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
15: PP1tFuKDSWKU3uys7bPZgHmO32Y.roa (hash: ch0uWTewbG9M0McTdfxSKidScKLRv9p9iinr/2CaifY=)
16: RbjX86fcOMSY4QFLKDJwZ2qTveo.roa (hash: N6VxatQ/mIA8OoimGHGJtwJB+iRV96F3haafY4KxDvg=)
17: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
18: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
19: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
20: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
21: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
22: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
23: XzTPcPuZIAtR3148TDqL-DBLTho.roa (hash: DUtfOVX1Ig6abI7pEVSMB6rYJJ84XUGtt2dbqnxEB4M=)
24: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: YdQcGJy+XQkO1omdILEBWxkT/Ye+JtwLz5cAyc13vcM=)
25: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
26: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
27: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
28: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (hash: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=)
29: s5heQ19LizKGGfMDqK5Iq5EUCS8.roa (hash: 3YsMiK/Tzw6pZesf/Yk4bL7YB+iCygnfpI53A+Wi7eo=)
30: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
31: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
32: wf5sNUg_rbqRFKM77CUPVakyd14.roa (hash: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=)
33: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
34: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
35: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:62:f4:3e:f1:2d:3b:46:5e:d2:fd:e0:a6:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jul 28 11:00:47 2026 GMT
Not After : Jul 29 11:00:47 2026 GMT
Subject: CN=3a5ba462a2251483d87afc0845b037973fb58d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:c9:16:dd:88:8c:60:62:25:7a:c5:b5:ae:
99:de:c7:a2:23:90:93:8e:9c:f1:b7:05:e8:53:cb:
f3:2b:df:7f:39:f7:ea:91:c1:e1:1e:23:58:d4:5f:
0c:1c:82:27:24:e6:c3:20:13:37:36:46:5f:3d:9d:
cf:e1:ba:8f:80:5a:50:00:83:fb:2b:2b:0a:67:7a:
33:4b:dd:c7:a9:e0:c2:4d:33:0a:9e:d8:16:0a:23:
5a:d9:b4:6f:88:24:46:65:4d:80:da:26:3f:5d:87:
6d:01:26:e7:94:6b:02:0d:51:11:1e:1a:33:1f:4f:
26:e1:7b:8c:2e:2b:f0:ae:93:c6:cc:33:3f:b3:6f:
8e:13:22:ac:d0:4f:72:1a:17:49:a5:1d:2d:a0:70:
98:fa:8e:67:00:e9:01:2f:ef:cc:00:3a:77:4b:20:
63:63:46:6c:10:a8:c0:0a:ff:b4:a6:a0:65:05:8a:
44:8c:26:1e:56:4d:24:bc:80:2c:90:20:29:89:ba:
35:a8:d1:83:93:b4:39:55:90:30:a0:38:9e:c8:ca:
a5:ae:3b:8d:c4:11:e9:08:68:bb:e7:53:3a:52:21:
23:2d:d9:1b:30:99:9a:18:50:fc:7f:a5:07:25:f4:
7b:21:d6:4b:bf:3b:9f:d8:8b:01:4c:ae:67:00:21:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:A4:62:A2:25:14:83:D8:7A:FC:08:45:B0:37:97:3F:B5:8D:05
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:af:f5:36:2c:15:5e:a6:82:78:59:df:1c:17:8e:fa:da:dc:
4c:94:24:95:9d:6a:d8:17:56:df:8e:e6:6e:ea:9c:1c:37:94:
ff:af:f3:5c:94:d8:8a:44:0b:2d:00:3c:90:35:4e:95:f0:f5:
ed:1c:2e:31:7a:ab:9a:bd:1e:89:11:bf:44:96:26:1c:4f:8e:
d0:06:79:20:e9:4f:bb:5e:83:e3:e8:c7:46:0c:de:f4:89:8f:
48:ac:7b:71:09:75:85:dd:a8:0f:04:f4:aa:40:85:82:3d:3e:
5a:d3:c8:66:35:b5:51:3c:7a:7a:35:71:e9:aa:84:b1:0f:79:
5d:ab:d8:4d:2f:8a:8c:36:70:76:df:01:2d:8c:69:ac:52:e0:
b6:06:53:c8:c3:88:96:5f:67:79:8a:2a:f5:bb:aa:87:84:91:
20:1b:6f:e9:72:cd:f4:84:53:aa:fd:b6:03:d0:60:17:c2:19:
e4:c4:8c:77:26:c2:1b:20:b3:7d:f5:1b:e4:2b:e1:07:c2:cc:
e9:01:89:61:a0:16:60:5b:cb:ab:28:f7:62:f4:1f:31:07:73:
17:82:05:66:06:fd:34:18:34:4d:02:25:f0:c6:d5:20:9c:94:
90:82:4a:be:b3:f2:c7:bd:ed:31:23:1c:3b:c3:88:58:23:69:
56:9f:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:26 2026 by rpki-client