
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json)
Hash identifier: UWd0Dz7drkt6KXcqOuAJn0ZcRlJmwTuabSFdv5KZX20=
Subject key identifier: FC:42:91:90:C6:AF:E2:32:2A:3D:7C:54:76:B9:1D:33:23:54:5C:CC
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019F92EDCB7445199799EEE573AB963A5DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
Manifest number: 16F2
Signing time: Fri 24 Jul 2026 07:01:25 +0000
Manifest this update: Fri 24 Jul 2026 07:01:25 +0000
Manifest next update: Sat 25 Jul 2026 07:01:25 +0000
Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=)
2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=)
3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=)
4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=)
5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=)
6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=)
7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=)
8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=)
9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=)
10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=)
11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: zm9H1F14P35gTD5XEGVxh254OjZ44ixjbiXXMdRWR18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:cb:74:45:19:97:99:ee:e5:73:ab:96:3a:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jul 24 07:01:25 2026 GMT
Not After : Jul 25 07:01:25 2026 GMT
Subject: CN=fc429190c6afe2322a3d7c5476b91d3323545ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:85:da:be:6f:b9:60:6d:19:85:e9:91:cf:
77:55:ac:7a:bd:4e:8c:d0:4c:4a:a1:0d:2e:c6:48:
40:ac:7d:aa:f6:7f:90:e5:f2:f3:6b:aa:3c:d7:5a:
21:9c:80:77:99:c3:3a:07:63:a7:83:f6:e3:78:f3:
21:1e:fc:36:7a:21:41:5d:b7:36:9e:d9:69:89:43:
32:2b:26:96:42:ba:f5:d0:08:41:6a:c6:21:c6:5e:
90:e5:ee:4b:9f:70:45:22:37:36:26:55:a5:28:54:
92:fd:89:ad:68:30:76:8b:76:af:91:97:d2:0a:ef:
eb:25:18:fe:0b:99:e1:2b:46:d7:51:92:93:8f:dc:
8e:3e:06:f5:b6:9d:d8:8d:56:88:8c:c3:13:49:79:
ea:d4:57:55:f5:65:42:27:a4:3f:39:45:1e:03:42:
04:b9:94:8b:28:f0:3a:07:81:82:71:99:77:99:68:
47:6d:1a:3a:8a:47:ad:20:89:d3:31:11:71:83:bc:
ca:06:66:e0:6c:c1:06:cf:b9:83:46:15:46:94:06:
bb:8a:5e:2e:49:56:61:90:8e:8c:9b:2c:d3:24:dc:
f2:9d:08:af:84:a0:76:1f:a9:ba:6a:e4:81:6e:83:
5b:60:7a:8a:28:92:81:d7:8a:1e:36:d8:50:c0:9e:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:91:90:C6:AF:E2:32:2A:3D:7C:54:76:B9:1D:33:23:54:5C:CC
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:3d:84:53:fd:30:f2:64:7f:d2:b9:65:4c:fa:d9:d8:61:
8e:42:77:ba:b5:87:91:6f:b9:14:46:53:5c:c3:c8:c6:77:3b:
3f:06:31:6f:da:1a:5c:50:32:f1:57:ea:9c:b2:d3:00:dc:fa:
13:6f:c8:47:12:1c:7a:9c:6c:7b:67:99:ae:cf:be:c2:67:18:
a3:d9:d9:cc:09:3f:d2:ad:6b:1e:0a:ba:1e:4c:a9:38:f7:cc:
7d:91:38:ba:a1:cf:fd:43:36:3f:c8:27:16:58:01:12:16:83:
b8:22:24:40:3f:d8:d6:01:37:85:cc:79:f1:72:45:90:00:32:
23:94:66:8b:1d:08:f1:7d:dc:6b:72:c6:54:18:d6:59:b8:fb:
c2:ed:04:45:77:f3:4a:3e:49:0d:fd:91:d0:b4:fc:ae:ee:f1:
3a:d6:b8:36:e4:48:d3:36:e2:a5:89:74:09:e1:29:f3:8e:24:
6d:91:1a:f0:70:0f:db:bb:07:27:2a:71:b8:ca:9a:6d:dd:5a:
85:5c:b0:72:62:bf:be:5e:14:cd:8f:10:9e:23:c5:57:97:13:
6d:f4:b0:11:de:2b:c2:8d:25:67:55:55:2a:d4:ea:02:a7:d0:
60:be:ee:86:8b:e4:6a:fc:62:08:d5:c9:7f:cd:9c:21:40:61:
1b:88:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:14 2026 by rpki-client