
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier: JFbX9AuB+cxQmoBEa1ogk6DgtEcc5XZhH6bjQnEmpZU=
Subject key identifier: A6:05:F3:15:51:41:EB:A6:75:52:CE:84:AB:24:9B:3F:74:31:3F:FB
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019D284DFDDC0EA47C94F40B7BA09B3FF529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number: 198F
Signing time: Thu 26 Mar 2026 04:01:32 +0000
Manifest this update: Thu 26 Mar 2026 04:01:32 +0000
Manifest next update: Fri 27 Mar 2026 04:01:32 +0000
Files and hashes: 1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
6: Kmr3pHYGiQ8rF_aLCLdEEAuSJv8.roa (hash: c6JJRLSE54Sg8jCWe6ZQVWMUaGOPCZrrRi0owG58GPg=)
7: Pvn1sDVjILuUf8msJ5VZP479WF0.roa (hash: jZ6WQLkfwl/0u9y6sf/wa468+lQRBSAIQn7x5A7+mJI=)
8: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
9: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: LN/EfkhcFxcx1lzeiJt4saUKxoi1QPg6dUEUdvjXLI0=)
11: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
12: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
13: mqe-2S01wCRmbYGtBayg02FrRsw.roa (hash: fOY9uvamxbATZPUQraK6vr94VAZu6K4zqsGp75pWFSk=)
14: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fd:dc:0e:a4:7c:94:f4:0b:7b:a0:9b:3f:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 26 04:01:32 2026 GMT
Not After : Mar 27 04:01:32 2026 GMT
Subject: CN=a605f3155141eba67552ce84ab249b3f74313ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:aa:70:6f:3d:46:77:bf:9c:12:c0:24:e1:
61:9b:f1:46:7c:5d:3f:5c:2e:67:c1:70:86:77:d2:
74:88:5a:fe:4f:6b:92:fd:0e:5f:eb:f5:92:05:99:
a7:19:0d:7a:98:a1:6f:2c:f2:3b:f7:5b:fa:19:ae:
6c:09:a1:b7:4e:ec:e1:56:4d:1b:5b:ad:f6:49:7f:
94:2a:d0:29:b2:e3:a4:0d:eb:a9:7c:55:24:ce:21:
12:be:30:57:70:79:03:07:ab:8e:05:6e:de:34:91:
e4:62:69:37:1c:c9:62:12:6b:31:e2:82:52:4a:54:
4e:f6:ef:77:d0:be:72:84:ab:d0:ea:ac:3e:b9:01:
9c:ec:33:9d:17:ff:12:06:d7:18:00:e3:9c:49:b5:
44:b2:fe:a1:f6:18:d4:34:6e:29:94:e0:8c:12:47:
05:65:3c:44:72:a1:9a:2b:95:09:9c:6a:7f:66:87:
7d:19:39:a8:95:43:1e:cd:4a:46:c3:26:27:b9:32:
c4:6e:4b:8f:0e:43:5b:20:30:73:1c:c7:24:33:4c:
07:0e:5a:c9:fd:24:7b:c8:bf:0d:c5:77:ab:92:bb:
60:35:68:0d:45:cb:8f:02:ed:22:69:d7:e3:ed:04:
b6:40:b8:4b:ba:4d:06:85:8f:d7:a0:57:2a:c5:5c:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:F3:15:51:41:EB:A6:75:52:CE:84:AB:24:9B:3F:74:31:3F:FB
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:88:f4:ce:ac:58:e6:0d:0a:fb:2a:20:15:9c:90:a6:27:e2:
37:e7:c1:fa:d9:2f:c1:12:72:bb:0d:83:9c:27:cd:cb:51:8f:
e9:9f:8d:d9:1f:8f:02:9b:1b:5b:6b:d0:82:e4:4f:de:27:56:
67:cb:db:7c:bc:4a:31:7b:43:58:6f:27:5f:82:9e:4e:7b:5d:
e0:f4:ee:34:56:d5:fb:da:0b:0a:57:65:73:af:70:e8:ca:f4:
5d:d1:ee:d9:59:bd:11:fe:d0:f6:f7:80:54:ff:93:02:67:54:
10:a9:62:32:00:2a:16:b2:2c:a2:5c:25:e9:5d:f4:b9:5d:32:
77:01:c2:4a:6e:aa:d7:24:70:28:5c:13:40:a1:15:69:87:58:
e1:9a:6f:89:bf:35:07:ab:e8:58:c6:8d:de:41:62:af:a6:82:
b6:72:2f:18:76:69:7d:c1:a0:1a:86:a4:11:f0:93:6b:9a:e3:
ad:90:b7:94:0e:dd:36:1a:73:0d:44:fd:21:da:09:aa:96:58:
9e:af:19:ba:27:b8:0d:d6:4c:62:66:d5:e5:89:0e:3e:0d:a5:
5a:40:32:d5:f4:c4:c3:4f:86:d0:fd:36:1a:07:51:ba:e9:57:
f0:c4:68:5b:16:22:2a:22:b9:7a:1a:9c:2c:f1:2b:68:67:a8:
61:36:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:40:05 2026 by rpki-client