
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: yxdtcHyJySfC00+xbldQQ/C61HqTsxruzqh/8Dv5En8=
Subject key identifier: C0:4C:D6:07:E6:5E:0B:D4:53:8F:5D:04:E1:4E:32:39:F3:94:5E:8D
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01A10FCD00BE1D8EEE2F22FA362B81FA1CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 17B7
Signing time: Tue 06 Oct 2026 06:00:55 +0000
Manifest this update: Tue 06 Oct 2026 06:00:55 +0000
Manifest next update: Wed 07 Oct 2026 06:00:55 +0000
Files and hashes: 1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: WmwSmBeUkgC+95q+PxtsL/DJ/zS4ovNIbVPqHHOTSmo=)
6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cd:00:be:1d:8e:ee:2f:22:fa:36:2b:81:fa:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Oct 6 06:00:55 2026 GMT
Not After : Oct 7 06:00:55 2026 GMT
Subject: CN=c04cd607e65e0bd4538f5d04e14e3239f3945e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:79:ea:4c:1a:02:49:53:bd:27:a0:5b:54:
9a:e4:85:92:a8:93:81:98:26:7c:9a:8c:e9:e7:c4:
3f:fc:ff:41:36:91:50:c0:b1:66:b7:d5:08:8f:9b:
14:3c:23:f8:2d:29:67:71:54:9c:b7:96:36:13:a2:
e1:16:db:27:10:40:cf:cf:f5:7b:d4:03:ff:53:68:
f7:3d:78:e5:3e:52:a3:24:cc:bc:ff:61:1a:ea:d8:
2e:02:7c:f1:87:ff:e0:81:ea:e4:11:52:69:40:bb:
21:81:c5:6b:d6:59:dc:64:6d:db:01:4c:53:74:74:
72:77:38:84:3d:f6:8c:c8:8a:e9:3f:6b:51:0e:0f:
d8:6e:ea:3a:4e:4e:bd:aa:98:34:92:81:d4:42:96:
88:15:33:27:fd:4b:63:9a:5d:d1:95:b7:04:57:20:
44:23:0f:74:49:59:90:6a:65:84:a5:77:87:27:44:
a6:0a:e1:47:2f:c1:38:c5:8e:f6:52:11:ff:cc:bc:
15:2a:7b:7f:f4:5c:cf:1c:e6:55:fc:a8:72:8a:58:
79:1d:ff:5d:7c:38:94:ab:6b:47:84:69:12:5e:95:
b9:57:69:33:79:9a:64:cc:ea:49:a0:40:e8:be:fb:
ca:25:a9:cb:c5:ad:98:d1:f4:2d:0f:cb:7a:f0:10:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:D6:07:E6:5E:0B:D4:53:8F:5D:04:E1:4E:32:39:F3:94:5E:8D
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:2c:ef:9a:57:f4:0f:f5:54:4c:89:f7:2e:35:ae:9c:4d:
d6:67:4f:17:bb:8d:0e:83:35:f4:16:b0:f0:a4:6b:42:f8:74:
1c:d8:0b:19:1f:58:f8:b8:71:87:e4:d4:9c:dc:26:53:7a:e5:
07:74:45:2f:a0:ad:0a:66:f2:6d:ed:7c:71:b9:d2:0d:69:3b:
64:25:37:5d:83:f8:ae:4d:1c:67:a4:9f:0a:81:b8:c4:6e:b8:
84:f4:b5:92:ee:fc:5f:5b:56:3f:07:97:1c:be:72:d7:59:2e:
65:f4:a8:e3:7c:69:0a:98:9b:09:0a:87:f1:a7:65:17:d9:94:
e6:91:ff:f4:d7:8a:95:71:0f:ea:f1:7d:93:a8:e4:5b:ff:31:
6f:e7:47:a6:a8:b6:b8:2c:47:21:ef:47:23:05:15:dd:45:8d:
f1:af:74:a8:64:50:c1:7b:58:e7:53:19:83:f1:96:39:01:12:
35:13:aa:d4:5c:cb:30:55:c9:49:0a:6e:c6:48:a0:d1:68:7c:
f6:4d:c2:ee:1b:63:24:95:09:17:7c:92:db:27:75:b4:0f:db:
b6:85:6d:54:f5:91:26:55:20:58:c5:2e:52:42:5f:53:7c:de:
67:af:d6:64:4d:61:6c:9a:91:4f:73:8a:20:94:82:e8:c1:c9:
67:1a:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:45:05 2026 by rpki-client