
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier: 6uUetEoMV/QXwek5K+KnLMXmZjT7jOZAIzlAzWGS+9A=
Subject key identifier: 40:85:5B:9A:CE:49:59:E8:92:43:7B:CD:B1:30:D8:D5:C0:0F:7A:07
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01A0D538F354EAD308E7B2D5107FCF9E6010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number: 1AA6
Signing time: Thu 24 Sep 2026 21:01:14 +0000
Manifest this update: Thu 24 Sep 2026 21:01:14 +0000
Manifest next update: Fri 25 Sep 2026 21:01:14 +0000
Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=)
2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=)
3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=)
4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=)
5: NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa (hash: W3nGwB/5l82VyTMniD79KQw9BOTXPJR7EjkBzNDA5Zw=)
6: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=)
7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=)
8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=)
9: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=)
10: egISSsj_emXqIzTgWR5rt0OsUxI.roa (hash: PGCg7xxw/0+DVy2qN0rYw5NAol7r6pcd4sImkT4t1IQ=)
11: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=)
12: gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa (hash: QBi5IqWkfubZgMUQCUMhG623BzbGTNquHl5ghz5pfQU=)
13: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=)
14: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=)
15: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: OkE7doJk6XdXGeqM58GWnEN0BFGdE5j2HGqWd1ASQeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:f3:54:ea:d3:08:e7:b2:d5:10:7f:cf:9e:60:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Sep 24 21:01:14 2026 GMT
Not After : Sep 25 21:01:14 2026 GMT
Subject: CN=40855b9ace4959e892437bcdb130d8d5c00f7a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:f4:89:0b:a9:61:8c:56:8b:72:e3:7d:3c:
03:31:f8:c5:97:04:69:5b:66:3c:03:1d:59:29:e3:
f1:fa:27:03:a9:02:2f:ce:fc:8f:a2:af:57:8e:40:
c6:01:63:d3:d1:b0:ec:85:06:bb:7c:06:b9:c0:c5:
93:6f:6e:75:21:4e:43:b9:13:23:c3:3b:b5:3e:f7:
3e:bf:2e:16:04:a8:98:ec:fb:60:29:c8:6a:fe:e6:
ca:3d:0e:76:e7:33:f8:d6:d3:7e:98:f8:f4:7a:ce:
d9:ff:ca:d1:c9:15:ea:0a:f2:2f:e0:84:01:3e:76:
86:d8:9f:b7:fb:ab:fb:d1:0d:95:25:f6:e4:45:69:
50:2e:42:77:a6:99:85:f4:38:71:56:75:38:41:09:
66:d8:70:f2:e1:4e:44:e9:60:d4:b5:a3:1d:c2:10:
2b:34:10:cc:59:56:4f:1f:b6:73:f1:c9:9d:8c:2b:
97:9f:ff:3f:85:cb:01:14:c4:6d:fb:e0:a4:70:d4:
cc:67:9d:4b:f1:10:fa:3f:6d:04:ae:0f:3e:fd:4a:
33:45:08:85:c3:9d:dd:e1:09:af:c5:b6:94:d7:3a:
c6:d4:d2:21:3d:09:47:1f:ef:99:e9:80:b4:ef:a8:
49:cb:d2:d8:d4:9b:b5:cb:59:b0:79:4f:42:17:03:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:5B:9A:CE:49:59:E8:92:43:7B:CD:B1:30:D8:D5:C0:0F:7A:07
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:05:c0:47:0d:84:96:fa:5c:6e:36:2f:74:aa:35:f9:d9:01:
b1:46:d0:33:72:a8:55:5c:1d:77:29:f2:a8:da:2e:6a:99:e8:
b8:b6:ac:73:73:9b:03:78:a7:c2:ea:2c:0d:9a:01:69:68:c0:
0d:fc:29:04:17:36:10:01:38:06:87:21:e5:17:bc:fe:a5:cc:
ae:8b:34:66:15:ee:04:43:ec:4b:d1:43:92:e6:b2:c4:a2:77:
6c:4c:9f:2d:38:96:5b:ae:23:c7:04:1e:21:8d:d8:bd:41:ec:
4f:bc:7d:d6:62:59:dd:7c:24:2d:e4:6a:c3:82:29:9d:04:e6:
50:22:9b:0a:9c:ef:d4:2b:86:e8:6c:6b:9f:e9:ad:6c:b4:e9:
64:d6:e3:e9:bc:01:ed:bf:98:23:96:94:f0:f7:5a:2c:45:44:
96:ac:af:88:95:98:93:89:85:8a:e8:69:e9:1c:b0:45:6d:9c:
cb:91:3d:15:51:f8:ea:3c:e9:c7:10:60:08:ef:66:9c:e3:f2:
e3:0f:07:d8:92:c6:12:78:23:18:6a:a1:49:47:e1:92:57:4d:
c9:e4:f5:4c:86:65:5b:e5:3d:10:36:e7:d3:4f:52:68:41:e5:
de:f7:73:23:8c:ec:98:91:5f:d3:3e:66:de:bf:b1:a0:43:e8:
98:4e:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:36:16 2026 by rpki-client