
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier: ROob//56Tk7bGN66lDwHMDQUEXdcy3WT+Mp+O/MHsVc=
Subject key identifier: 5C:E4:7E:21:CD:B8:26:B9:D5:2A:48:CF:42:82:01:B3:2F:12:6E:C8
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019D26CCFE6ADF6A85CBDD22604060E773D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number: 18E7
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (hash: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=)
2: 4AQpWQisjxEO_3sSCwM5-rsbP2U.roa (hash: pFbTw52/6hBtIeFj35KTMuXcfX4BCXpM3suldN/qkJc=)
3: 593uxzhKtaz959jMa3kQfymkQ_A.roa (hash: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE=)
4: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (hash: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo=)
5: 86NmFsLv5F6qdqSCA0-oSMY2krw.roa (hash: sMuaaWRNry574gR2H/keSL0gVnxfPBBx69iwakvlnEQ=)
6: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (hash: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=)
7: HKUtaN-dfGXUJYOdDirxvFEFuro.roa (hash: 3sdIz+qgtS64f/HywrMmhFpAOwBdr5OpjxTWlYYlbmw=)
8: IZIR-QqFsa8iNRaGlSO8v8Uzjtc.roa (hash: Dv1oCgzApSJKf6ojNDameScXxCxuHT1GCr5zFwma0t8=)
9: JkYPdWIPBS3UQdqks8w3N-B_PXA.roa (hash: 2dT7jcP61wNOKgKv9kGVucaeX72t3lEMFGix3NDqhMw=)
10: MXfEYwDEMNeJTrZldVxTqic7F_A.roa (hash: Q6DfII8lOP7vh8wq+rXHgq7qqKldevhwBd8XPOPysQM=)
11: OvfyWv9UIqAtBl_nsQu2JTpIQQo.roa (hash: +BnAMt/KQdaB6b7HaQTEsRH6kJs2SPlugYpLEy1NY2o=)
12: REpPOVSFPxs6XWxXr83I7WsaONE.roa (hash: tWq3UF4A4s+oWUbvh9Wno2oVGe4je8aAL4JtfvCSLWU=)
13: SCrPA3GA7wkPIpwqkvT4SrYbCoo.roa (hash: 68oPMV/2uZO4eFTL1Y6g0K6Op7qXEhzsOm5is9YG8gQ=)
14: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (hash: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g=)
15: UCEmdT26I0EOR3Nt1P8sgXrneEw.roa (hash: 2J9iX7MsnY4Cv8KwFj4V7pkU1D5h+Wv7mrqIWsSr/t0=)
16: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: BJSiXlJERHvhSF/JoWGKUY5uSepma2lgyBUUs2I4j2o=)
17: ZSWzfIcWSott2uw7xDHUNcCRiI8.roa (hash: gJB/RgsBJnFME//8v1yKmshL12G13GJOzg8jBVQ4sac=)
18: ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa (hash: ebvhaLhmgKTiPvOKK+bZy+ARcuy6m/BV6K1apwU9AoI=)
19: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (hash: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU=)
20: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (hash: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=)
21: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (hash: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM=)
22: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (hash: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=)
23: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (hash: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY=)
24: fvRquGdLskZKWulDnfJMDzpLPQU.roa (hash: CR6ZcpCz35mtzaAxSqlJ2NEOBSGjyHieJtOAbogUd+0=)
25: hqktrCsZJqimo2ahj-sAvXASn80.roa (hash: SEvGp2GlMOZxCF6DQljxJGTchNAJHIxC4Qc0ihc5bAQ=)
26: iBkluHdof_8F1tiIIeu1IUHVsdo.roa (hash: RauoNPl8ybB9uctj5qhY44EnOPIJ7Dn5vhqsB1W7sqI=)
27: mG70oaiQLw1CChve0widRVbMPck.roa (hash: YUzhMfkYxAz3L8ebkuYt8br4uvQAozQEY+LaakqqCkA=)
28: mshfArpzUjCOI3VAXt9ofx-FYsU.roa (hash: E4AU/ALB2gm1Ouwc1urgcMRh4bzLaMU2R6VEybB+8q4=)
29: ocKJplJ8TuRnhY1ntHyuKXdy4Wc.roa (hash: x5RgBiRa8IV4sXp81uZeR5Ywcug7uzjY3FWzh766kPw=)
30: pH5Q8YIvm2lz_Y7UeZbsnlaBe-g.roa (hash: c3f/GvYA7/jm6c5hl/6pyDHzWalIYP6p7ErgPc7tK40=)
31: sFDlAae_e4rCy18vO5StHwY2vB8.roa (hash: GEN4RnQNUr/MDnoaeQ1hlzfxdQjw3Q/9DMfhbR8wnfM=)
32: saXVgoVzNRbFAdgTctYGeI4Btug.roa (hash: Ni5nFlKALS6As/RHO2AnppySml8jTNUM8omaVQR73WQ=)
33: w6RnCb60rNGv3gAjkWujRTcsy8A.roa (hash: H98ZsBaauKj3hoC0Er9xgCEZs1kPRFm+P96cYfqARNs=)
34: xygQhFvaDn0KcsXT2TVrBVJGRy8.roa (hash: dsftadFShOGlp8GVX992hYwLlmpdYYKlbeZgmlDhCys=)
35: yohNPkzrer8cwQiW8iZGKozuH7c.roa (hash: iIaRAmzYlr2QGsoZOINgrGoBmvYvUs+m15y7kNeedas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fe:6a:df:6a:85:cb:dd:22:60:40:60:e7:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=5ce47e21cdb826b9d52a48cf428201b32f126ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:d7:eb:67:b5:1c:ba:d7:09:d7:5a:a7:5d:
ea:ec:fa:6d:d8:cf:89:d2:b1:ad:fb:37:fb:9f:ba:
0d:0e:2d:fa:6b:1f:b5:35:d6:5e:46:be:5c:aa:ca:
1e:c2:10:95:f6:54:bd:9a:75:17:95:3c:76:05:2b:
ce:7e:e3:c2:f9:08:0e:e3:e3:a6:ab:92:76:22:49:
3c:d7:0a:19:bb:63:71:82:74:1e:4d:41:f7:01:4b:
73:56:b7:fb:df:c6:71:a0:34:ac:45:be:5d:92:bb:
49:68:7c:bc:c6:49:d1:39:27:66:22:8b:97:80:0f:
1d:58:15:32:8c:ba:e7:6f:49:b5:b3:eb:86:95:4e:
08:ec:5f:c1:45:28:19:69:ab:d0:22:4b:0e:d7:ed:
8c:47:38:13:e8:9a:f2:91:ee:81:7b:52:a8:18:a1:
99:da:b5:79:b7:15:9f:8e:32:ba:d2:a5:cd:e2:32:
63:22:31:6b:02:ea:0f:be:e8:6a:e7:45:5d:28:21:
8e:5e:fc:38:7d:c9:90:a7:8f:c8:16:b1:28:52:75:
93:66:a4:98:92:52:ca:16:06:f7:3f:ad:9f:0d:01:
ad:a2:c6:da:7d:b9:b3:1e:87:d8:cf:54:54:07:08:
eb:d6:fa:c2:a4:60:b0:b7:bb:32:5c:23:2e:a5:1c:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:7E:21:CD:B8:26:B9:D5:2A:48:CF:42:82:01:B3:2F:12:6E:C8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:f4:43:a7:65:4c:bf:18:3a:9b:91:07:de:3a:5f:73:56:
c0:d1:67:14:bb:7b:1d:4e:65:e7:db:68:3c:0a:7b:17:bd:bf:
e8:24:b8:d4:ed:8a:c9:d2:59:0b:25:cf:5a:9b:32:54:db:85:
bb:d0:9a:a8:40:c7:2a:59:6d:c7:28:5c:cd:81:e3:ee:5d:a5:
ae:f3:16:3b:37:cb:1b:7f:7a:33:9e:dc:a9:33:4f:56:4d:a9:
7a:a3:8a:5b:be:0a:b7:00:3f:64:e5:ee:93:38:cb:93:2c:21:
0f:75:e4:74:a7:64:6a:df:ca:5d:45:27:15:e4:73:f3:33:b7:
7f:d8:91:bc:44:f6:03:5b:b4:d0:e2:6d:04:62:36:f0:d2:c4:
ec:df:30:05:c8:dd:2f:3a:a1:f7:29:c7:c8:04:93:8c:54:dd:
c2:07:49:bc:35:b7:89:f1:d8:c7:0f:0d:bd:ee:f1:21:a6:b2:
d8:0b:76:9e:17:9e:39:04:58:73:0d:98:8d:4a:b0:6e:d3:57:
0c:50:5c:89:3a:3f:c8:23:a8:e4:8a:f0:f7:f0:89:6f:79:19:
1b:71:8a:78:d2:6f:89:19:b4:f1:66:a8:21:78:b8:88:56:0f:
aa:26:ad:1b:25:34:5a:52:2b:ea:e9:95:03:99:67:bb:ab:31:
89:6c:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client