
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json)
Hash identifier: 3ENzxCKd6Z99GaW5HMBqD7AiEijIpZDGINOroONcllY=
Subject key identifier: 5D:6B:24:9D:8B:03:F5:FA:D8:C0:A1:F2:23:51:37:C0:4A:8D:86:64
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019E1F48301C53F804650CCE2FDD56DB4DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 03:01:25 +0000
Manifest this update: Wed 13 May 2026 03:01:25 +0000
Manifest next update: Thu 14 May 2026 03:01:25 +0000
Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=)
2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=)
3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=)
4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: r7Zlxw0Y+JwF5QBpsnYsI++1SfE1SBM6CHnZpUcMriU=)
5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=)
6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=)
7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=)
8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=)
9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=)
10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=)
11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=)
12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:30:1c:53:f8:04:65:0c:ce:2f:dd:56:db:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: May 13 03:01:25 2026 GMT
Not After : May 14 03:01:25 2026 GMT
Subject: CN=5d6b249d8b03f5fad8c0a1f2235137c04a8d8664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:df:f7:84:b5:20:b2:1e:5e:d0:c8:9b:a0:
7f:51:bb:1e:a8:e9:e0:5f:9c:7f:bb:b6:7e:2d:69:
bc:d2:76:aa:9f:41:3e:5e:b6:58:f5:f0:1c:f2:ed:
8e:fb:91:1c:92:8f:df:2f:19:98:cc:dc:81:5e:01:
c5:19:c4:44:c0:d0:d3:f2:52:13:29:0e:f0:79:93:
63:89:fa:8f:8f:67:cf:68:09:3d:f2:b8:7d:67:0f:
aa:74:72:ed:9d:ad:14:ba:c1:2a:2a:52:6a:2d:23:
9e:f8:86:09:45:45:d4:5a:d8:40:14:77:72:58:d4:
0e:96:f3:ec:5c:dd:cd:20:7d:52:de:95:80:7c:21:
d8:7b:02:ba:91:4b:75:8e:83:8f:77:2c:5b:80:83:
ec:97:f7:61:ad:2f:46:20:18:1f:f9:07:cb:92:7c:
86:04:24:ff:7e:aa:a6:40:15:06:d2:ea:be:b7:6a:
a0:6e:3d:55:9c:ca:61:d7:19:99:77:fc:72:05:20:
9a:c4:74:b9:46:0b:18:83:1f:ac:b1:58:b0:0e:8b:
01:c7:bd:d1:7d:14:ab:b1:aa:ff:cb:62:07:f9:fe:
97:23:a6:b8:4b:d2:b0:93:ac:3a:92:e4:99:8a:74:
86:9b:af:97:99:82:6a:61:7f:22:dd:93:e8:5f:34:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:24:9D:8B:03:F5:FA:D8:C0:A1:F2:23:51:37:C0:4A:8D:86:64
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:03:f9:bb:3d:71:52:b7:52:99:57:4c:fc:a5:7d:6c:a5:64:
b9:5f:eb:3a:7a:46:1a:83:e1:a9:e1:e8:af:a8:b6:09:0e:0b:
2c:2e:b0:5a:bf:0a:f9:5e:42:97:73:ab:e9:55:89:36:c6:f8:
93:c6:d1:f3:f0:c6:6e:0d:f7:4b:39:8e:5e:75:95:d9:61:07:
23:9d:b1:eb:dd:2f:20:b6:39:df:a1:67:5d:85:39:9e:9e:ef:
d6:e0:ad:e7:69:65:b6:03:eb:db:c7:40:82:8a:72:ce:92:7f:
f1:72:98:fe:3b:74:cb:4f:45:5c:dd:5f:2d:4d:ee:cc:5d:c4:
f1:bd:bf:55:94:c9:70:74:1b:bc:7a:73:25:c0:f7:42:05:42:
3f:dd:6e:94:5b:1e:4d:bf:c2:76:6c:35:a1:a3:2b:53:ba:2e:
7e:20:d5:57:1c:8f:37:4e:aa:c7:2c:b5:4e:73:96:5b:09:5c:
6d:af:97:ca:14:bb:e8:fb:77:53:67:7e:69:fc:86:6a:14:71:
0e:55:c1:98:81:40:e7:4f:58:f1:4b:aa:7c:1f:b6:69:ec:ab:
05:43:95:47:57:5e:75:e4:09:75:15:6a:0b:71:c3:c9:95:c3:
dc:74:c4:b5:48:1e:66:8e:b7:b3:86:ce:d8:75:e4:c0:c6:6c:
1a:ec:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:19 2026 by rpki-client