
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier: fmD+1J3zZg4OdoLi/R3AXO1B302BWK6EWTRnw+KBViA=
Subject key identifier: 40:C0:93:1E:28:EF:0A:8E:61:E1:FB:2A:F0:F3:FA:28:5E:63:BE:45
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 01A0FF10E1FE51146AA441C59CF17758C903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number: 19EF
Signing time: Sat 03 Oct 2026 00:01:31 +0000
Manifest this update: Sat 03 Oct 2026 00:01:31 +0000
Manifest next update: Sun 04 Oct 2026 00:01:31 +0000
Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=)
2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=)
3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=)
4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=)
5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: m9ffYdTLogyTH/gKC/2imqEFpPdsr+3Zxq5YQtMWqx8=)
6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=)
7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=)
8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=)
9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=)
10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=)
11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:e1:fe:51:14:6a:a4:41:c5:9c:f1:77:58:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Oct 3 00:01:31 2026 GMT
Not After : Oct 4 00:01:31 2026 GMT
Subject: CN=40c0931e28ef0a8e61e1fb2af0f3fa285e63be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:1f:dc:96:37:36:64:65:0c:ab:0a:4c:a4:
3e:e5:40:fa:66:e5:d2:4d:9b:0b:ce:bb:90:a1:23:
eb:97:2b:1b:72:86:6f:b8:1b:db:d7:c5:16:f8:71:
d2:b2:b0:2a:2f:92:1b:27:e8:c1:05:e2:2d:d3:8c:
94:b6:5d:dd:56:6f:32:c9:6b:42:f2:cd:1a:6c:bb:
32:9b:0a:6f:36:78:6d:b6:70:6c:27:23:59:63:e0:
f7:04:02:16:27:80:42:a1:93:da:10:01:d0:77:3c:
ee:4e:67:4d:73:3d:dd:41:6c:b7:8a:86:4b:f9:bb:
6a:6e:ff:63:21:19:12:3b:04:d2:fa:dc:83:e5:1b:
58:7f:ef:bc:2e:6a:59:43:0e:ee:b4:2c:9b:04:36:
b4:93:49:d9:d3:82:68:16:a3:88:46:07:00:9f:6a:
d7:8f:22:7b:b6:06:b9:bc:f5:66:00:ea:29:f2:aa:
c3:21:36:4f:5e:4f:87:ab:ac:f1:3c:b7:3c:6f:69:
5d:e6:3a:7e:f2:96:0a:71:c5:95:7e:d6:e8:4d:b0:
68:3b:ce:0d:8c:fb:1f:0c:19:69:a7:ce:7d:f5:b8:
f2:7c:c4:ab:68:8f:38:14:a3:34:f3:af:5a:f7:39:
60:56:58:76:8f:25:ba:0d:79:b6:55:4c:2a:a7:5b:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:93:1E:28:EF:0A:8E:61:E1:FB:2A:F0:F3:FA:28:5E:63:BE:45
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:6a:b7:fa:63:c6:b3:41:db:20:a0:37:35:f2:82:48:73:
93:fc:e1:d8:07:ff:a7:b7:f0:c4:22:69:8a:09:c0:e2:92:67:
46:2e:6b:0d:2a:7d:5a:f8:d7:2e:25:35:3c:56:88:0d:0a:4c:
f9:bb:85:83:3e:42:da:69:80:23:08:5b:ec:a5:25:43:d8:ed:
61:0d:44:57:8d:e4:b2:45:3a:31:66:ba:fb:d8:a3:b8:76:fe:
9e:8a:c5:74:6d:80:34:24:43:a9:ab:92:22:7c:14:d5:32:35:
84:c4:23:b5:34:3f:a2:57:24:cb:8f:c4:b3:6d:b4:e4:a8:52:
53:b1:aa:0f:5b:b4:fe:30:fa:25:9b:e6:c4:66:a7:af:05:f6:
44:2d:0b:a0:de:a0:00:93:12:df:ce:7d:32:a3:66:36:07:bf:
c3:48:b9:de:c1:c6:4a:e0:7a:d8:dc:c1:c0:0c:34:b4:12:31:
16:fe:b5:f7:3b:6c:db:f2:aa:a3:c1:7f:84:85:1b:4f:92:8a:
40:be:dc:a2:da:14:48:6c:24:de:5f:72:56:a1:90:f6:4a:01:
ad:c5:5a:13:36:61:70:34:f2:1b:1c:c1:7e:a7:77:91:64:7b:
fe:64:3f:66:c7:e0:ab:dc:c9:fd:14:5f:3c:0b:62:7c:58:f3:
a4:9a:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:18:21 2026 by rpki-client