
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier: YB4nMYsHkNhgyt8FbIG/NqaaFDP77YuXHYe8wBQr7XQ=
Subject key identifier: 7F:97:F4:1D:F4:F2:6E:79:6E:74:BE:56:DC:72:E3:BF:BC:74:3D:16
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 019E1D59AC0AE53D2545AA5DFB44340322E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 18:01:16 +0000
Manifest this update: Tue 12 May 2026 18:01:16 +0000
Manifest next update: Wed 13 May 2026 18:01:16 +0000
Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: dnajjIYKfbVYQnQngarzpVfussoiH2hy4CKGT+nRfb8=)
2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=)
3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=)
4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=)
5: cYgMOmj6u6TwRZVxPY0GRuR_57c.roa (hash: PFEwcIm0GvfowU+QS3ePDAQm79limgzxJJZAQhsXoQM=)
6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=)
7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=)
8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=)
9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=)
10: zt_YvrwgG8U0qs9ZxDXsKeZ9EVw.roa (hash: t0BRGsA3yMu+tS9ODb23oVtqY4JggUZywQTE6WaROKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ac:0a:e5:3d:25:45:aa:5d:fb:44:34:03:22:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: May 12 18:01:16 2026 GMT
Not After : May 13 18:01:16 2026 GMT
Subject: CN=7f97f41df4f26e796e74be56dc72e3bfbc743d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:de:0a:1d:c8:e4:5d:28:73:55:c2:31:ce:
51:75:72:22:fa:22:66:de:56:28:1d:93:42:5b:14:
9b:fe:6a:79:a1:db:44:62:63:52:88:64:d3:af:aa:
d1:0a:95:a7:d0:1a:5e:09:34:58:81:82:6d:eb:00:
8f:73:a7:24:48:39:e4:58:06:82:04:9a:0f:7c:6e:
b9:11:1d:5b:ae:c2:de:df:02:7a:97:d5:50:f5:3e:
b8:e0:39:97:c8:77:4e:31:29:58:71:93:30:d5:d6:
72:e8:4d:99:c4:33:f2:67:c8:2c:e2:69:62:c9:39:
46:80:8b:19:df:78:b7:88:56:5c:79:e9:8a:d3:72:
60:bc:13:d4:c3:40:c8:e6:19:05:2e:d2:ff:53:3b:
b8:8f:fc:e6:d0:a8:57:9b:a2:a1:a2:df:db:46:ef:
b9:f0:39:bd:8a:e3:6a:aa:13:f4:66:01:fc:9f:b4:
03:8f:9c:72:8d:c8:31:12:d4:91:d8:19:d5:76:9e:
86:ab:f1:4f:d1:8e:6e:9f:c5:1e:ff:87:c5:35:c3:
c6:90:8a:6c:68:95:74:4d:cb:2e:da:ed:ff:c3:95:
fb:c0:b9:a1:ee:46:5c:d7:7b:a1:d7:73:f8:39:45:
cb:b4:23:c6:5c:69:2f:c4:b3:ac:47:b3:83:2a:42:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:97:F4:1D:F4:F2:6E:79:6E:74:BE:56:DC:72:E3:BF:BC:74:3D:16
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:22:6c:0d:8c:9b:b9:8d:5f:86:7e:fd:15:f4:36:6a:87:
3a:83:23:56:f6:f1:03:08:b7:55:09:1a:43:6f:96:a5:8d:7f:
43:03:48:fd:f2:35:61:fb:c5:12:df:df:84:b3:68:1a:9e:da:
7f:67:e5:6b:cd:4b:62:de:89:df:6a:30:6d:9c:c8:3d:3f:c0:
a9:82:b8:2f:82:c5:d7:85:07:9e:d9:73:6f:b0:5a:d3:cc:2e:
1d:6e:16:49:26:bc:2b:40:4a:09:6c:06:98:5e:0f:3a:78:d2:
49:e8:0a:57:3d:9e:22:01:ec:ec:42:8c:b6:8f:df:2b:3c:f8:
9a:a4:1b:f8:1b:ac:36:33:53:35:27:63:ff:e7:48:46:5f:a5:
4e:87:57:89:b6:94:ec:bd:bc:df:98:ac:a3:04:37:74:c1:1f:
1a:53:fc:a4:aa:0d:ea:62:fe:7d:3d:5e:f3:a9:50:89:77:74:
17:e8:0e:d5:b2:e7:48:6d:f2:05:60:75:07:d4:9f:97:0d:61:
0c:7e:4f:da:36:e6:9f:a0:91:78:69:b6:90:fa:6e:ba:81:f9:
3e:cf:08:4e:4c:68:3c:76:f6:58:62:87:68:df:30:de:6c:da:
ac:98:2e:1d:ff:9a:fd:4c:63:85:ab:48:2b:14:fe:d5:1a:77:
72:96:a5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:26 2026 by rpki-client