
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier: DNoCJhYI1FcLGG23N3UURK4YncWfzo38fuYROxUQLrs=
Subject key identifier: E9:2C:F1:66:AA:50:C1:07:69:1C:DF:BE:15:7F:7B:E2:27:70:5B:4F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0DFF33FAD7396658B13CA4940032AA74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number: 1AE7
Signing time: Sat 26 Sep 2026 23:00:55 +0000
Manifest this update: Sat 26 Sep 2026 23:00:55 +0000
Manifest next update: Sun 27 Sep 2026 23:00:55 +0000
Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
2: 1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa (hash: OR0K6ja0+6tjObcYpglQ6VtaBnvWmTTk4GVSghcFZtk=)
3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
4: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
5: 7fgcMQkmfWwHXhrbNvdl9LWSJKA.roa (hash: pADt641ZfrBrQwfXg3JUa602uETFbQeFY9v2r19pKXI=)
6: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
7: 8wtkHgTyIYhimQQSRQDWERm2Gps.roa (hash: DhO1AlnI2B/H0pM5TQvBuBSWzrEFnklqfqouKCP+vSc=)
8: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (hash: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=)
9: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
10: HDUXqeFC5mTa7lU_RmwELJjd7sg.roa (hash: U543lYj0wOYAaksGChXjX7Bufgd0My2VXcD17aAopUA=)
11: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
12: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (hash: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=)
13: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=)
14: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
15: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=)
16: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
17: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (hash: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=)
18: Xp4_W5QH684_v2ntxjTbXLi7co4.roa (hash: qVI7vhEbL0w9fKHM8ldDF9m2E1ZZAflMgjTOoFsG2NU=)
19: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: Xy+1Bwi0QxH+VmFPOJpTtgC/LwzGTHsuw/XqKhj4d/U=)
20: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (hash: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=)
21: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
22: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
23: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
24: aq6EbRSc2yPXLymWgfc3hs2RSl0.roa (hash: c4jt4ZG6ePsIANqDTyXyyUoY7noOmOWYrKSmA8oP7jY=)
25: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
26: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
27: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
28: gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa (hash: vPMzw8PpBWw8xTWacYUychh/qBw+PTqAXcQqiVGh4H4=)
29: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
30: niGcWz0ThxJygz-PLbVysx_sLZE.roa (hash: g18PU3cPKMc6/2ma47ogKuHWzJTyComhxOWTfFk6wlA=)
31: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
32: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
33: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
34: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:3f:ad:73:96:65:8b:13:ca:49:40:03:2a:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 26 23:00:55 2026 GMT
Not After : Sep 27 23:00:55 2026 GMT
Subject: CN=e92cf166aa50c107691cdfbe157f7be227705b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:7b:fd:3c:8a:f8:1c:2b:ea:e7:10:30:a7:
41:2a:33:28:ea:71:9a:f1:75:a5:ca:f1:2a:7f:c9:
07:ca:86:07:2f:be:e0:bd:68:55:72:ce:55:35:ef:
de:e2:06:0a:9a:56:55:80:d2:2f:61:34:a7:9e:21:
20:6e:7a:4b:7e:27:45:1b:71:19:33:b4:77:e5:15:
f8:eb:30:12:71:b6:df:2f:99:f9:60:47:39:9c:7c:
fa:71:f8:40:06:2c:3f:6d:f4:b1:64:e7:55:51:de:
77:c1:6d:4c:f4:b8:1d:5d:a2:00:6b:cc:2f:a6:0f:
a5:4b:28:94:22:2b:11:c9:0e:29:68:6b:37:3d:94:
af:98:aa:2b:a5:7a:10:77:d7:1f:94:9f:90:a1:19:
36:74:65:ea:13:25:13:8e:f0:d5:90:f1:73:4e:41:
01:43:3d:b3:6a:05:b2:89:0a:c6:4e:ec:04:ef:73:
94:26:9c:f0:fb:df:8c:d1:4f:5a:26:3d:88:ad:b5:
7f:78:35:37:88:03:b6:d9:d4:37:4c:42:86:74:4b:
0e:20:c9:51:7d:69:76:97:43:02:e8:02:ee:a4:4b:
14:7a:59:b2:cd:ea:3a:f9:a8:3b:61:d0:2d:0a:fa:
fb:b6:39:c1:43:ae:ed:90:78:c8:b8:e9:b1:55:8b:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:F1:66:AA:50:C1:07:69:1C:DF:BE:15:7F:7B:E2:27:70:5B:4F
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:77:f4:28:2b:63:89:57:cf:4f:33:68:30:92:11:71:ba:
c5:64:be:3a:f9:ac:c6:dd:e1:6f:8d:e5:c2:63:4f:54:6f:8d:
eb:52:27:77:28:d6:41:e8:ce:93:85:64:47:1d:79:d4:0c:bd:
dc:1b:09:60:ab:d4:1c:eb:35:93:39:92:3c:a2:a7:21:38:70:
4f:11:a0:4a:94:d7:dd:57:3e:21:2a:58:5b:31:df:db:34:7d:
d7:52:ff:08:7c:db:1d:07:15:7e:01:18:2a:8d:7b:39:a5:42:
8c:23:9e:39:67:9f:0f:e2:f4:b8:1b:54:d3:49:56:fa:a0:54:
04:bf:d7:d4:73:8d:f9:89:7c:0e:ac:2a:2b:47:69:f9:90:a4:
8f:80:21:ae:e2:a5:e4:39:77:7c:b9:ef:2a:e7:91:14:0c:95:
49:f1:6a:2c:05:17:be:83:bc:9b:96:47:bb:d4:b1:3a:a1:fd:
6b:cc:62:27:f3:78:ae:75:cf:35:b6:dd:02:fd:03:9b:16:28:
4e:ec:5d:04:e4:ed:30:3e:50:ba:60:46:bb:86:c1:58:3e:69:
cc:5a:97:58:76:d4:c7:a0:68:c0:38:91:08:54:35:cb:06:9a:
f2:a6:77:87:a5:31:86:89:cd:61:be:55:09:16:c6:8a:17:2d:
c5:23:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:36:50 2026 by rpki-client