
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: PisxaeUWBIIsUDTGcpP0QS52hhrSqcwWLWNaaC9BSZM=
Subject key identifier: 49:F9:4F:A4:77:4C:49:79:9B:BA:DF:27:70:57:35:8D:A3:79:79:E0
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019F916CB5C36C62F6384085E3165A03EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 16F1
Signing time: Fri 24 Jul 2026 00:00:48 +0000
Manifest this update: Fri 24 Jul 2026 00:00:48 +0000
Manifest next update: Sat 25 Jul 2026 00:00:48 +0000
Files and hashes: 1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: x7+bssLlesEWvdJDl0AY1lucZ6HZbSOl74/k0zaj51Q=)
6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b5:c3:6c:62:f6:38:40:85:e3:16:5a:03:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jul 24 00:00:48 2026 GMT
Not After : Jul 25 00:00:48 2026 GMT
Subject: CN=49f94fa4774c49799bbadf277057358da37979e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:39:72:5a:30:ac:cc:f0:0f:cc:ff:ed:46:
43:33:ae:37:5d:6c:90:ae:83:0c:57:26:8f:2f:ec:
2f:61:fc:19:30:7a:d6:12:e3:81:1d:8a:6c:46:96:
c6:05:c9:d3:40:36:4f:9b:61:61:62:be:e9:bc:bb:
c8:64:33:bf:34:ea:91:38:8d:c5:44:4d:5a:2c:7e:
49:c7:33:21:03:08:b2:56:77:e4:bb:71:df:e2:b5:
bd:96:e9:b9:8b:d9:b1:d9:f0:13:e4:20:54:22:d1:
c3:5b:f9:e3:0d:b0:79:d0:31:24:e6:e9:fd:08:96:
1a:d4:a5:73:2a:30:1b:b4:aa:89:14:45:64:6e:21:
d4:b6:98:c4:4c:28:2a:fe:83:65:92:7a:f9:21:00:
bf:58:27:ec:ad:01:a9:78:7a:4d:a3:1a:d9:35:1f:
92:cb:a1:25:81:88:3d:3f:b9:1e:97:97:e4:92:f2:
e0:2b:24:db:04:a1:74:4c:a2:ad:ae:97:45:2c:94:
4a:0b:62:13:fd:47:8a:f2:c1:b9:c5:44:b2:ac:d7:
e4:64:44:19:c9:38:c2:0b:49:8d:ad:ed:ef:f6:35:
cb:4d:83:1b:3a:24:c0:e6:f1:e3:58:fd:dc:ab:78:
11:04:cd:a2:f4:bf:e1:91:3a:db:07:1b:90:82:c2:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:4F:A4:77:4C:49:79:9B:BA:DF:27:70:57:35:8D:A3:79:79:E0
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:19:06:38:b8:6f:35:18:ed:de:36:32:87:2d:dd:61:ea:
43:be:03:1b:89:92:ba:97:d1:bb:fa:74:ca:72:bf:1a:59:62:
d9:c7:04:97:db:39:69:82:38:d3:b0:9e:e0:49:32:fe:48:84:
21:34:24:80:3c:fc:46:9c:0c:c8:cb:d9:99:b2:0e:32:63:0f:
78:b2:c8:89:06:77:90:58:dd:c9:ca:9f:3a:28:ac:6e:8c:f0:
ea:13:7c:5e:b0:0a:96:a9:06:e4:ef:8a:c2:cc:6f:8d:e5:09:
d0:da:20:06:e1:19:05:04:32:51:ab:29:ba:c9:ad:dc:3b:be:
0c:39:1c:b7:51:c9:95:4d:34:df:b0:38:67:5a:ef:86:b8:b4:
a8:85:3d:a3:d4:73:70:a5:cf:4e:73:48:50:8e:10:e4:b5:86:
23:33:ed:bb:8e:51:bb:31:db:e6:3b:d2:0c:78:f5:bc:83:c8:
ac:27:92:22:6d:5c:fd:c3:d5:b5:b5:68:14:5b:13:60:fb:6a:
c1:a6:54:d0:f2:b3:9d:fb:2c:08:10:30:fe:18:11:1e:74:ee:
64:2f:c9:92:3e:7c:b3:7b:70:ca:bf:bf:ee:92:00:93:c5:14:
b2:5d:08:30:da:a1:f8:aa:10:07:8c:6a:6a:f9:e5:41:4d:23:
5b:6e:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:31 2026 by rpki-client