
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier: uyIbOtHw6KVCXtP7pWnCD0tm2fcymhsUTb1baFigzZ8=
Subject key identifier: 2A:A7:D9:D4:F0:B3:AB:9E:3F:5C:03:69:22:C2:FE:91:59:BF:9D:BF
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01A0DB726DD11AB9CD6ABF1B2A1E8F8E64C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number: 1663
Signing time: Sat 26 Sep 2026 02:01:44 +0000
Manifest this update: Sat 26 Sep 2026 02:01:44 +0000
Manifest next update: Sun 27 Sep 2026 02:01:44 +0000
Files and hashes: 1: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (hash: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA=)
2: 5-GtKhoAa66dioBZrpVFfqRz7cI.roa (hash: 8StcYCEG4rjyFat3WS2Tv/dBrTZvUN2GO2Qno0+qmVg=)
3: 73GQds5O9lYETaz_JvZJg5MtNDc.roa (hash: 5CnDcaJnAh40dI/cXcg78sdklFt4ZI6jaj6cDvX3nbI=)
4: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (hash: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0=)
5: 8YzhnSN10hTauaidvQ9SJyu3qro.roa (hash: FtXj7rMNyFmmjhAHs+HHxN9MAe9qfrbQfR9dwyX4aqc=)
6: CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa (hash: xeqybNdNDUhTz+vqC7eFdYvvA3AqqR+6Az4dsTt8u+E=)
7: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (hash: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=)
8: ENi_6t4-opAr9_a4vxGzFuCBblk.roa (hash: PEdUz15lPm1QtLlqU3VVR9fWrexpCofmdV5wAzrfN5E=)
9: I664kINdQYZZixjAjFJ2wff1nBk.roa (hash: DFrf3nmCfO170wrqgfcGuszwxV4XEHBmrCGavXVsdUM=)
10: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (hash: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k=)
11: QEDdRTIUJe_n_5D0ErrIweyWB4Y.roa (hash: pygwk+rXsHzfwQgNiVed0HaRjH+crfTbH842swTjNzA=)
12: QEhSXcwXsu0G-eTWLTcEW4Ss3Kw.roa (hash: 3hazU/kPvVBI6tMsprnBgK/LziRES3Sxxtlr+bH5YbI=)
13: QgQy1th6ID-L5VfO9xAH4yNvVlw.roa (hash: ogOTpvjhwZNOv9mM4eRvXGZKd+Zmqg9jm28SibEw98c=)
14: RNDz_4tH9L_gf3FZK7wHn9W5JTw.roa (hash: iV+7oOHFOY9zS0+jnxTaMolInYSGv9N0+a/6Pd3g5JQ=)
15: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (hash: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=)
16: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (hash: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA=)
17: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (hash: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=)
18: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: Is9pDsS44jh5XgDJc89oCssiMD4L0Jo6DoutER6RF40=)
19: cFW2f7mYQVMT0WQiKum-84YT7Tg.roa (hash: NYhMRFKPP2MvfbOtQ4xBGxpe8K5LETaIrUVLB8Q0RF0=)
20: iENB1Spx9V_JeHkY-UbptgejZiE.roa (hash: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=)
21: kgLefYWiNGknOidoKgqI74KkRkM.roa (hash: Ipm3zXSvjL80LuVqm/7/Xe+Nk5e7+57H/hmJQp4Q0Ps=)
22: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (hash: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE=)
23: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (hash: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc=)
24: rjAJbLG2Zw4o_Pjxfe1qJfc4HJE.roa (hash: PgUAFIkeOTWwErAjDkjVk0mJqFSxps5oqsCSRQBUIgw=)
25: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (hash: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:6d:d1:1a:b9:cd:6a:bf:1b:2a:1e:8f:8e:64:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Sep 26 02:01:44 2026 GMT
Not After : Sep 27 02:01:44 2026 GMT
Subject: CN=2aa7d9d4f0b3ab9e3f5c036922c2fe9159bf9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:61:98:4e:8d:5d:33:e4:35:d2:93:82:27:
02:fd:37:78:a1:a6:2e:21:5c:3d:ea:35:df:f4:80:
46:8f:34:98:26:9e:b7:dc:cb:62:b1:ce:94:6a:dd:
ef:12:fc:8c:7c:99:39:0d:59:d3:17:d8:6d:dd:51:
33:9b:5d:dc:2c:6c:00:e1:33:67:b3:bf:d7:17:6c:
78:a1:94:df:55:e1:2f:b5:ba:eb:c3:b6:f0:46:d5:
50:58:c1:38:ff:02:f2:ed:bd:ea:66:fc:18:30:3e:
9a:86:cd:c6:59:d9:30:f3:dc:fa:29:81:67:12:f3:
ec:09:90:c3:eb:be:49:c9:1d:d9:a7:11:cb:e6:aa:
20:ee:60:e9:3d:3f:09:db:63:2c:d3:d8:d1:e4:2e:
9c:a3:ea:73:4d:7b:12:69:d4:8a:9e:51:6b:01:ce:
da:97:51:f3:c2:ba:4f:19:d9:b6:d3:fa:d3:0b:32:
cb:c3:6f:64:83:e8:43:06:84:ed:dd:64:e5:cf:4a:
b1:4e:84:a7:96:63:61:3f:99:0f:46:2b:cf:04:78:
bc:84:ec:85:f6:3d:0c:e1:b6:3d:f8:64:dd:91:a8:
0e:00:52:5e:15:dc:ea:91:b2:e3:56:42:b6:ff:e2:
92:22:d7:80:aa:13:2b:fd:64:98:b2:6d:78:78:e8:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:D9:D4:F0:B3:AB:9E:3F:5C:03:69:22:C2:FE:91:59:BF:9D:BF
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:19:01:0b:70:b7:b1:63:b6:da:bd:ea:8d:86:fc:4c:0c:
35:d9:ed:cd:7e:6d:0e:24:40:a4:4d:e6:e5:c0:51:ab:b9:d3:
50:53:b7:d5:b1:56:cf:5c:58:c3:22:6b:cc:a3:3c:38:59:35:
58:40:31:1c:d8:93:b6:a9:80:70:20:49:7b:4d:69:27:10:27:
61:35:8a:7a:98:bd:29:83:55:1e:d5:16:fc:fa:ef:cb:74:7c:
5b:29:bb:46:a5:54:2b:f3:e0:df:8e:1d:5a:1b:82:b1:be:a5:
90:89:a1:30:4d:80:65:a9:ae:fa:47:c5:a3:ae:96:e4:be:f1:
11:27:8e:94:7c:56:08:05:35:f0:86:da:ac:fe:5f:a2:9e:e4:
e2:0c:57:63:78:cc:fa:3b:45:31:33:29:56:36:a1:51:39:ee:
0a:d3:5a:76:3c:de:88:6e:98:e9:fb:c6:73:44:67:06:b8:1c:
7d:a0:b4:06:34:fe:2e:e4:21:81:48:8e:2e:3e:2f:44:f6:6e:
07:91:c1:88:43:fd:87:61:d4:3c:6e:5a:73:93:4b:01:c3:88:
8b:90:8e:8a:59:66:2b:63:3d:1b:38:2b:a6:1c:80:7b:9d:37:
01:8f:a2:b9:d0:04:90:b5:1f:e2:2d:8d:e4:05:f4:a1:b6:3d:
3c:37:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:16 2026 by rpki-client