
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: 4mTgla9gijHOd9JpQYeTUpeF51v63HmCvCOVzwYt0dE=
Subject key identifier: 95:2F:78:33:83:1A:DC:BA:A8:78:C3:35:2D:F9:79:30:FE:92:35:EA
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D28847959CD3AB72CB57B4A896C04D11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 121E
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
2: 42QHv4NCGNbp7Pxu2LM-TI8dJyE.roa (hash: Pq3CmtHXNi2sMJxtE8zyI25c7dkwDnVr1Je25jc/W0A=)
3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=)
4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
6: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (hash: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=)
7: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (hash: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=)
8: GXpZDHxC1uL7NvE0ywWqLVqRrk8.roa (hash: ai/mmM4j8VsPqFI9x8nXmUtvk80B5eZwfm0bEbylEzw=)
9: J7ML0tmTR-IBOewX8YYHs4nBV_4.roa (hash: kpDR+GHWgBfokp5uTGzbc36LisYfrVXSCREvmPNgnHE=)
10: KA7dGrzhOQMG7_5Ikp2IvxS1PBo.roa (hash: /KEyJ5aLisoBqoGHi7wko4VMmBTnFGEKwHIeaOcJOUo=)
11: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
12: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
13: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=)
14: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
15: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
16: TjHeI9cL8jxbekpNaPWSrrI5bzk.roa (hash: u/hlhMP/YM9a0R9pHRclT8s5iLLcYZRWVhjjJlmciOQ=)
17: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
18: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
19: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=)
20: XEX0Yqt8GHVlU5dtpVsJiJtXADk.roa (hash: lxlgzUBtgUzC4nWXovBa2rdUzIIq3tRPQSgdtkCQdJg=)
21: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: apHJgXOJ9HnXX+EExN9fBHfud2NXQpCAgIu5yt+/v0E=)
22: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
23: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
24: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
25: qTiRyLsEnxjtY8m64akc8bSBUCQ.roa (hash: y4W4NvBrH8B4WxivgywuyS5lqjtMsvocijUZMFvSjVk=)
26: t4tSZVG2U7gBq5XYHLBclKweH-w.roa (hash: CdY2lVhiF2Ai+El/f43USn+ENAlhU5TdtLUHGiBaFcY=)
27: uy5tSKWMk77XGidmdX5X51c2n2Q.roa (hash: zLzI8G6xgHVV8C2xBsfYSCIHtqR4kIla9juQQRtmqGs=)
28: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
29: yj5bxMYtNcJkVWDxs0AAjqMz_kc.roa (hash: bugT/WniK0ngTqjECEz+sVbv2cbJbdXJGIyfBWBHc+g=)
30: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
31: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:79:59:cd:3a:b7:2c:b5:7b:4a:89:6c:04:d1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=952f7833831adcbaa878c3352df97930fe9235ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:8c:e7:b2:c2:e5:e8:e0:49:be:4e:01:0e:
1a:0e:8e:89:72:d7:ed:6d:3a:72:ed:58:f0:42:27:
03:2d:d7:de:6d:e8:e1:ec:29:9f:fe:41:55:a8:ba:
0f:dd:9a:8a:18:30:aa:31:d1:6a:22:5f:b7:4b:49:
6c:01:86:e4:81:c2:23:20:00:ef:34:ff:7b:c9:f3:
45:b8:ff:a6:36:5a:8e:b8:da:8e:7c:b2:19:aa:78:
47:68:dd:92:f2:b1:e9:32:17:10:b4:ec:f6:27:3a:
15:44:bc:ca:4d:3f:a5:e2:60:2e:c7:b0:a6:6f:6b:
36:9c:f4:7e:ca:b0:91:c1:16:06:84:3b:0f:8d:20:
83:d3:19:dd:e6:2c:de:90:d6:a4:b5:1c:87:88:07:
ae:cd:67:69:60:d2:d7:f2:25:2c:c1:e0:73:8f:2e:
b1:b6:12:4e:75:83:e9:4b:fd:57:84:4a:be:6a:4c:
66:52:be:85:4d:a5:d2:55:fe:17:96:b1:b7:f8:a1:
65:30:04:ed:73:b3:40:a5:c1:4f:2f:c9:d4:0e:02:
1c:73:b3:f5:41:b2:4c:b9:fa:4e:7b:a4:5a:da:4f:
a9:10:ec:fb:a0:37:cd:f2:0a:fe:da:a2:6a:9d:d1:
fb:c6:5b:b3:8b:5e:97:1f:da:84:0c:df:27:f1:4d:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2F:78:33:83:1A:DC:BA:A8:78:C3:35:2D:F9:79:30:FE:92:35:EA
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:90:1f:ff:51:72:aa:6b:87:95:94:2f:cd:31:4b:2b:da:30:
e5:1c:27:c7:e8:9a:56:2b:45:f0:1c:52:e9:53:a6:7c:c1:dd:
f4:b8:ea:eb:6e:c8:9e:4d:5f:85:38:bc:19:be:f3:60:cd:69:
84:bf:84:0b:4e:cd:3b:ce:cc:c0:d3:79:3a:59:34:f8:67:b2:
8c:14:b7:1a:6e:d8:5d:33:22:f8:43:6d:37:34:48:fa:b1:81:
e9:c9:0e:ce:21:4b:ac:0c:a7:2f:16:ca:39:eb:68:6b:12:2d:
86:76:8e:e3:28:b6:bf:99:99:1f:fe:dd:f7:c5:06:87:99:86:
a0:31:6c:22:6a:d3:d6:a0:35:7c:a8:d4:53:9a:8f:f3:bf:6c:
ae:b6:83:41:d6:7b:73:14:a1:48:12:fe:83:68:6d:72:cd:e5:
1d:1a:3b:51:ae:34:f0:6a:3a:0b:e8:98:18:6a:a1:fb:7a:9a:
3f:2e:7d:09:b6:6c:c6:5d:2d:3c:12:10:9c:bd:55:3f:44:29:
0f:0b:04:91:a4:49:fb:d4:78:04:66:58:9e:5d:27:ba:e0:fe:
d9:c1:7f:88:08:f0:a4:ea:a5:07:88:ad:19:b3:41:51:4a:9c:
10:12:ff:dd:53:f4:b6:fe:de:0b:5b:92:03:ed:ca:2d:df:ba:
18:40:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:12 2026 by rpki-client