
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier: gA3n47vJhPEP9lnPN2er3Uti29XaPNTtgvop3rgnJOw=
Subject key identifier: 65:A9:06:10:93:3D:D1:6D:42:B7:4F:DA:BF:D1:24:24:C3:B9:AD:36
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019D2A3BEA29352F026E8C79384FCE0EDCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number: 1990
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
6: Kmr3pHYGiQ8rF_aLCLdEEAuSJv8.roa (hash: c6JJRLSE54Sg8jCWe6ZQVWMUaGOPCZrrRi0owG58GPg=)
7: Pvn1sDVjILuUf8msJ5VZP479WF0.roa (hash: jZ6WQLkfwl/0u9y6sf/wa468+lQRBSAIQn7x5A7+mJI=)
8: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
9: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: RZ7t03HwYCxOvpf2cQBb+sKwfd+1yg3QjcxPXp+QIRM=)
11: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
12: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
13: mqe-2S01wCRmbYGtBayg02FrRsw.roa (hash: fOY9uvamxbATZPUQraK6vr94VAZu6K4zqsGp75pWFSk=)
14: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ea:29:35:2f:02:6e:8c:79:38:4f:ce:0e:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=65a90610933dd16d42b74fdabfd12424c3b9ad36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:28:c6:a0:eb:a9:70:04:7b:8b:de:3b:39:
42:9a:fc:7a:4f:33:11:11:be:85:e3:90:9c:58:1c:
36:c8:fd:55:70:e5:64:ea:b7:33:80:6a:3b:d1:d4:
1c:b1:c9:be:38:ca:08:68:e1:6c:66:f5:56:ee:4a:
a9:dc:f7:b9:d6:80:ec:10:ed:ad:ad:ee:99:a6:79:
7a:a9:8f:b9:22:8b:b4:73:aa:16:ec:18:7e:5e:ec:
62:9b:13:61:b2:dd:16:e3:6f:00:e5:bb:43:ec:ce:
26:55:76:c6:2f:c6:dc:ce:0d:fc:ad:55:55:5c:b7:
26:9b:23:38:d6:b5:30:40:8b:e0:6e:ec:87:14:74:
01:ea:61:aa:2b:97:8a:27:7b:d1:b2:94:2d:c1:78:
8e:63:91:25:f0:70:31:19:22:20:ba:e3:14:e8:fa:
46:61:c1:67:71:ae:db:c2:d3:bf:08:70:3b:2d:17:
52:65:1d:34:f8:68:39:b7:1d:89:d7:82:85:1a:92:
eb:35:a7:30:8f:54:8b:6d:50:fd:cc:09:89:d5:46:
49:23:fe:59:c7:1a:07:e6:1f:fb:aa:ee:75:3b:7b:
0d:67:a6:8f:69:19:0c:4a:81:4a:35:88:a3:3a:9d:
cd:99:6a:b9:a1:20:62:87:96:15:33:7c:0a:e2:9c:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:06:10:93:3D:D1:6D:42:B7:4F:DA:BF:D1:24:24:C3:B9:AD:36
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:4c:a1:35:9c:29:7b:27:ec:fe:92:3c:69:3a:05:65:b6:
74:d3:a7:a7:a9:17:3e:76:5c:84:70:de:7e:ae:05:48:59:0f:
d9:6f:9e:9c:30:7b:04:fb:82:a4:fd:c3:65:be:3a:ba:07:00:
ba:2e:2a:d6:e1:95:77:be:d6:91:25:2b:86:d1:24:02:f7:68:
99:f4:82:b6:0f:16:c6:18:dd:52:22:98:f4:b2:e2:ca:a0:7d:
ec:28:15:f4:f7:b7:0c:b5:73:d6:5a:13:19:fc:a5:83:aa:54:
63:13:39:9f:82:35:1e:82:3e:a3:1f:39:2f:22:60:4d:62:85:
e0:a2:40:e0:ad:65:68:28:f9:18:ba:71:d9:07:7d:cd:db:a4:
ab:5f:8a:cd:ec:3b:ec:89:73:b9:89:92:af:d6:7c:3d:97:aa:
fa:8c:3e:7e:26:e6:d2:4b:49:9a:76:c0:9b:31:c0:93:14:62:
cf:b0:24:f7:b3:db:27:60:eb:08:a5:83:50:c4:ed:28:6c:05:
68:d0:94:7e:6a:20:8c:3e:bb:11:ee:88:3c:b1:90:7b:b1:39:
72:14:96:24:15:b7:12:7b:a8:00:3d:ea:00:c1:dc:fa:d7:61:
cd:76:e9:8c:8b:c5:4b:a8:8c:2e:2e:ad:70:7b:6f:e6:da:e8:
f2:a7:75:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO+opNS8Cbox5OE/ODtzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYwMzI2MTMwMTAyWhcNMjYwMzI3MTMwMTAyWjAzMTEwLwYDVQQD
Eyg2NWE5MDYxMDkzM2RkMTZkNDJiNzRmZGFiZmQxMjQyNGMzYjlhZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9IoxqDrqXAEe4veOzlCmvx6TzMR
Eb6F45CcWBw2yP1VcOVk6rczgGo70dQcscm+OMoIaOFsZvVW7kqp3Pe51oDsEO2t
re6Zpnl6qY+5Iou0c6oW7Bh+XuximxNhst0W428A5btD7M4mVXbGL8bczg38rVVV
XLcmmyM41rUwQIvgbuyHFHQB6mGqK5eKJ3vRspQtwXiOY5El8HAxGSIguuMU6PpG
YcFnca7bwtO/CHA7LRdSZR00+Gg5tx2J14KFGpLrNacwj1SLbVD9zAmJ1UZJI/5Z
xxoH5h/7qu51O3sNZ6aPaRkMSoFKNYijOp3NmWq5oSBih5YVM3wK4pzmxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWpBhCTPdFtQrdP2r/RJCTDua02MB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIVMoTWc
KXsn7P6SPGk6BWW2dNOnp6kXPnZchHDefq4FSFkP2W+enDB7BPuCpP3DZb46ugcA
ui4q1uGVd77WkSUrhtEkAvdomfSCtg8WxhjdUiKY9LLiyqB97CgV9Pe3DLVz1loT
Gfylg6pUYxM5n4I1HoI+ox85LyJgTWKF4KJA4K1laCj5GLpx2Qd9zdukq1+Kzew7
7IlzuYmSr9Z8PZeq+ow+fibm0ktJmnbAmzHAkxRiz7Ak97PbJ2DrCKWDUMTtKGwF
aNCUfmogjD67Ee6IPLGQe7E5chSWJBW3EnuoAD3qAMHc+tdhzXbpjIvFS6iMLi6t
cHtv5tro8qd19Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:55 2026 by rpki-client