
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: +QMNuYOaU54vm0ioYnko/mvrNdKRDP7xNsxFKvzhZAw=
Subject key identifier: 1D:8E:DF:4B:FB:E5:8F:75:5C:5D:A0:3F:D5:94:F5:4A:0A:8F:E8:0D
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019D2771F55E923D29C16175C5909C90691E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: iAixjUc9Bvtd6B4aDvBnZHI+VwHRSskRGaC58vEgOf8=)
6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f5:5e:92:3d:29:c1:61:75:c5:90:9c:90:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=1d8edf4bfbe58f755c5da03fd594f54a0a8fe80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:b4:6a:d5:f9:90:7f:20:2a:95:71:c7:9d:
54:fc:03:7e:e5:d2:a3:79:7e:19:a3:39:65:78:5a:
fc:93:cf:04:5b:23:d0:9b:c4:e9:2c:9e:cf:da:7c:
78:9d:a0:64:ab:76:aa:7d:42:80:03:22:91:5e:1a:
63:a5:09:53:f9:09:0a:e4:9b:2c:50:84:56:10:2b:
c2:d8:e6:1d:59:f4:82:de:7d:a1:ae:8e:47:ea:a5:
fa:23:16:dc:24:5a:2a:1b:66:e4:fe:a5:a2:56:63:
5d:91:32:e9:99:58:df:2b:40:03:db:11:7b:f7:3b:
4f:62:f8:64:dd:7b:de:5f:11:29:31:9c:5b:f4:d4:
05:21:ce:53:9f:b4:4e:68:84:c8:08:84:da:f0:a6:
60:26:ed:58:57:e8:40:3d:a9:af:02:80:62:98:90:
54:8f:b8:6b:62:3a:d9:d2:1d:bc:df:71:01:9d:1e:
16:7e:87:4a:cb:51:3b:38:eb:ad:a2:b6:81:cf:8d:
c2:41:6c:87:c4:7f:2c:25:f3:6b:1a:ec:06:98:af:
81:ed:7f:d1:08:31:5c:21:b9:ba:95:7b:c0:e6:e4:
a7:78:5f:e8:df:c7:12:30:93:fc:08:79:02:57:80:
9b:63:f2:0f:7c:c1:42:cf:73:21:ac:b3:2e:cc:da:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:DF:4B:FB:E5:8F:75:5C:5D:A0:3F:D5:94:F5:4A:0A:8F:E8:0D
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9f:50:ef:f0:ea:83:f5:5e:99:35:5b:be:31:1b:6b:40:bf:
f8:17:15:62:94:13:0a:96:ae:43:ea:d4:c7:8c:d1:07:c5:15:
c1:75:e5:be:c7:9b:79:fb:54:2d:86:64:c7:ef:3d:a8:0f:8e:
be:40:1c:d8:27:83:33:e6:9a:93:b0:b0:4c:90:13:75:4f:c8:
48:74:5e:6a:2e:f3:b2:e9:4e:a4:08:f5:a1:4e:24:27:e1:a7:
7a:06:cf:58:bd:c9:44:3e:a0:b2:43:34:89:d3:0f:25:73:6a:
67:2a:a4:d9:72:50:60:5a:30:90:26:d1:fd:e5:f9:74:69:ee:
cf:a7:01:38:5f:f4:35:75:48:d4:9f:dd:92:b0:59:a7:d8:a6:
4d:df:51:08:ce:ac:41:00:48:97:68:37:8a:54:67:7c:14:a6:
92:ed:95:e5:db:11:af:12:7f:7f:c9:f4:87:18:e9:0e:e7:80:
a2:a4:46:13:3e:79:55:bb:78:d5:94:b0:f2:0d:89:31:6c:21:
16:97:07:ee:e9:58:3a:98:9b:09:47:14:af:75:f4:5b:2c:e2:
e1:f9:76:c0:b6:1a:23:4b:ff:49:9c:31:b1:bb:74:f7:ba:9a:
3f:dd:70:98:67:6a:1e:fa:4a:9d:2e:ed:9f:ba:b4:ba:8b:f3:
6c:20:f7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfVekj0pwWF1xZCckGkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjYwMzI2MDAwMTEyWhcNMjYwMzI3MDAwMTEyWjAzMTEwLwYDVQQD
EygxZDhlZGY0YmZiZTU4Zjc1NWM1ZGEwM2ZkNTk0ZjU0YTBhOGZlODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTK0atX5kH8gKpVxx51U/AN+5dKj
eX4ZozlleFr8k88EWyPQm8TpLJ7P2nx4naBkq3aqfUKAAyKRXhpjpQlT+QkK5Jss
UIRWECvC2OYdWfSC3n2hro5H6qX6IxbcJFoqG2bk/qWiVmNdkTLpmVjfK0AD2xF7
9ztPYvhk3XveXxEpMZxb9NQFIc5Tn7ROaITICITa8KZgJu1YV+hAPamvAoBimJBU
j7hrYjrZ0h2833EBnR4WfodKy1E7OOutoraBz43CQWyHxH8sJfNrGuwGmK+B7X/R
CDFcIbm6lXvA5uSneF/o38cSMJP8CHkCV4CbY/IPfMFCz3MhrLMuzNqkowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2O30v75Y91XF2gP9WU9UoKj+gNMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq59Q7/Dq
g/VemTVbvjEba0C/+BcVYpQTCpauQ+rUx4zRB8UVwXXlvsebeftULYZkx+89qA+O
vkAc2CeDM+aak7CwTJATdU/ISHReai7zsulOpAj1oU4kJ+GnegbPWL3JRD6gskM0
idMPJXNqZyqk2XJQYFowkCbR/eX5dGnuz6cBOF/0NXVI1J/dkrBZp9imTd9RCM6s
QQBIl2g3ilRnfBSmku2V5dsRrxJ/f8n0hxjpDueAoqRGEz55Vbt41ZSw8g2JMWwh
FpcH7ulYOpibCUcUr3X0Wyzi4fl2wLYaI0v/SZwxsbt097qaP91wmGdqHvpKnS7t
n7q0uovzbCD3wg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:10 2026 by rpki-client