
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: CPSUblhdF3sbaKkq8NfG1oCvy5I4MsdpJE1NmekQabU=
Subject key identifier: 62:06:59:B7:AB:FA:E3:47:DA:2B:FF:39:D7:71:6F:39:F9:8C:78:B2
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0D12464E7E684BA25CD36D37E59A9F66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 060E
Signing time: Thu 24 Sep 2026 02:00:18 +0000
Manifest this update: Thu 24 Sep 2026 02:00:18 +0000
Manifest next update: Fri 25 Sep 2026 02:00:18 +0000
Files and hashes: 1: 1WjvRzOKhnD2a533QX-zWGhy6mU.roa (hash: H5qbHbDAL7jdx9T9KEl6Xakz8nWIjJ0cE1oQa7xKVLA=)
2: 22VKqsoF6YnHioFgIyM1cB53zy8.roa (hash: ARfo70H8qjNrnmwt7+R6arxwp4fmQrb5Zru8EDN1xxc=)
3: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (hash: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=)
4: 4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa (hash: N/6K00b1BuFhTw/CFjj1QlwHlKUxym0tqK2UkGVKAtg=)
5: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (hash: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=)
6: HTNYR2yr94a8EGiK6hAbvtY6o6k.roa (hash: KMWU4G6lDxx80Y3CEw+h1nuvz/CTjsjL+YK1q+mIGr0=)
7: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (hash: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=)
8: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=)
9: Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa (hash: LJOqk2hOPW4zF0QKMT6vQWzbYu9x4wpSjNeypKNolNc=)
10: Nb9JZyAefPbjpxi2cVC2-yfzww8.roa (hash: jl0bmDnzSH6frV+fkRxoTDwv3W5rPCZjAk979Fat9xw=)
11: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (hash: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=)
12: QwCOKdbePnvsbjZvbr8oTKEBsxc.roa (hash: 8AV8DmzA8AEomAqDKifpPNjwCJakRLYpNDSFvcMb0w4=)
13: SAdG_ltq21So6we7PAnL5y8GnAE.roa (hash: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=)
14: TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa (hash: LvtCwiSgCnn6r8P4XA2+zpyeRQdDCd4zCmE86m3gSlM=)
15: XlpVEpCaKbvVp_iIY2abwrGuU7A.roa (hash: PuO/riDrTsvlx5rAd1GX11Jvzo3pxxNGOivQ4nq5cYA=)
16: Y76_y_xLVztNK39T96pu_rBSKLo.roa (hash: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=)
17: ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa (hash: UZXVUv3S3cNg6npRSvbm/y2Rp2w5vhtlG82p6sftGJ8=)
18: bj44VJDQrpOwawRUkessJ1R8jYY.roa (hash: z80ifPC0ZLzcF5tnL4jWIKImO3qEDSXM3xUBgVNcb54=)
19: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=)
20: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (hash: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=)
21: hBYMpOiwx939MIxYETSVpypgnWU.roa (hash: VYu4jP7LA16518TTkGafdx1wEfQ7qeulsxq1ASMUCmw=)
22: hH36JJO_rAsnohFls8GFE7NlzVk.roa (hash: jYlrJWAsZ9W20ZvqcFDoHNdl1/TJ/d5Ssc/5Jh190NE=)
23: mIbPn5Fu1i-5d1fHezHRRGzZKrA.roa (hash: I/QPZ60E1dnV7fEylkUrWhV1PLhWOtr75mYtpDkfL/Q=)
24: n1Q1cgW0X9OV5LSgftaI_FlyK4Y.roa (hash: 6h9fclPG/rsrAtgt1k8LVscNVfrkJ+2xLM+cUHLONGs=)
25: pViHmwqQeVqQnj5hkym3ThYCYhU.roa (hash: rbWNEzeG5z5UiJBRWTWbbSTYvlpCEEASp5X1FRCLxnc=)
26: qlVHtidyMtTQ064ypejRJRTrhIs.roa (hash: 4mWiwniRAL4tXa87dTnfBRs6/ACyraRAiFOgqpNYILY=)
27: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=)
28: rN9h_mo4r9s5UTguLdOSFdhPSnI.roa (hash: HTTRXKWiAGJWuSeHvmuWFfb2ufcPVMm/mGoMaVAl6Uw=)
29: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (hash: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=)
30: wjwT5xErc6jgMZ7sAjqbr1k2O1w.roa (hash: Us9NbhU/z0WjYWqlRH/S/KtIq7Xzz6kYdW91JESXokg=)
31: y-OM-U7sOF-cjNb2s-_tfw50GRw.roa (hash: tFAk+2h+DTHha1/z4sqqqPG0x3vaR1FdXgyUx3q0bPk=)
32: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: Kduyol1bjpjTxExe3ptCdb1vQaW4S5TillBQ8UInKiQ=)
33: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (hash: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:64:e7:e6:84:ba:25:cd:36:d3:7e:59:a9:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 24 02:00:18 2026 GMT
Not After : Sep 25 02:00:18 2026 GMT
Subject: CN=620659b7abfae347da2bff39d7716f39f98c78b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:b7:08:cf:dd:b2:0f:32:1f:0c:54:8d:9d:
04:70:ae:95:03:7c:2e:fe:19:c4:8f:76:03:60:9f:
6a:cb:9a:11:7c:09:ee:f7:7d:84:ba:77:e5:95:99:
47:c6:21:ce:7a:26:e8:fc:e0:ae:a0:7f:32:8f:6e:
94:16:d9:68:13:41:64:cd:86:f4:c0:6c:63:60:f7:
95:ec:b2:f5:c3:1b:f8:70:d1:e7:d5:c6:e3:07:95:
a2:85:35:de:a2:bf:73:00:7b:cf:c6:79:cc:88:59:
65:95:5b:07:a8:e5:2c:61:99:06:20:79:de:74:db:
26:84:c9:4c:8f:10:4f:77:d0:79:78:08:be:3a:5b:
9d:08:ed:dc:ac:8c:48:b0:33:d3:18:b2:6a:87:48:
e3:ec:22:49:c6:22:8d:9b:6c:8e:72:3e:a6:f7:e4:
91:f2:09:62:e1:55:8f:95:78:0a:ef:f1:ad:c1:29:
b1:45:d6:da:cf:5d:31:73:9b:e3:e7:da:22:20:73:
39:0c:88:14:ec:c9:3e:29:1c:a9:f9:4f:2f:8f:c8:
a2:ce:11:90:dc:b6:78:d5:ca:3f:15:58:f1:57:44:
9a:bf:93:5d:fd:f1:31:78:8c:7a:5a:1f:8a:72:e0:
4c:7e:1d:55:04:cd:57:dd:be:6c:11:7c:56:12:5e:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:59:B7:AB:FA:E3:47:DA:2B:FF:39:D7:71:6F:39:F9:8C:78:B2
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:e6:ee:f8:50:39:27:ba:0d:1b:29:c6:15:cb:e1:59:e9:
0d:7e:69:61:c6:40:d9:dd:4b:4c:c2:c3:f7:54:e2:e4:b7:99:
4f:fe:17:b1:d5:77:31:ea:0f:18:f5:13:b8:3d:56:1b:17:c8:
55:14:c2:db:0e:d1:c5:04:45:8c:25:06:27:ca:3f:50:4f:ef:
27:5b:05:53:c6:67:b5:29:81:f0:ef:f6:a7:36:ab:fb:d9:7f:
d1:b6:1b:a8:83:39:42:9d:e0:ac:38:43:99:0b:47:6d:d6:a1:
a8:62:71:e6:0a:3e:3f:ea:cc:ab:75:41:e9:ab:c4:a7:b2:23:
03:8e:e3:75:94:c1:d3:51:11:fb:6b:3c:04:fb:1c:26:ed:be:
8b:44:c9:eb:19:b1:56:06:05:9c:68:93:58:fe:2f:63:2f:ae:
5a:ac:6c:c6:bf:c0:7d:57:a7:60:64:b6:b7:45:73:33:e1:b6:
13:7e:7f:cb:2a:8f:d8:23:9a:b7:90:8b:31:df:3c:40:cd:06:
04:53:3f:ba:05:08:41:ef:97:4c:0f:8e:34:eb:d0:b9:08:e2:
de:82:00:d3:4b:47:45:eb:d9:36:55:72:1b:16:7a:8b:6e:1a:
b0:79:79:fd:bc:bf:22:db:60:c2:de:db:5c:2a:d0:63:8d:a5:
87:21:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:38 2026 by rpki-client