
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier: K18sxlHhoV6408XNn8rpE2JsLxuaIHLxTLMMHH1zCRE=
Subject key identifier: 30:F1:FE:B8:98:25:B2:C2:11:15:7F:DF:7D:47:8D:37:64:4B:19:D2
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01A0D872AECB8841AA38AE746C93A735F8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number: 167C
Signing time: Fri 25 Sep 2026 12:03:09 +0000
Manifest this update: Fri 25 Sep 2026 12:03:09 +0000
Manifest next update: Sat 26 Sep 2026 12:03:09 +0000
Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=)
2: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=)
3: A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa (hash: Vg1LcQNz/XKk+x/pf6T3VfFuldheMFgMWkJ/JA6myNs=)
4: AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa (hash: NHQMdNh4Ym+0k0zIiZ+2OzU8E5q7yos10YV7kXoqN9k=)
5: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=)
6: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=)
7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: YXGu4dOB1ZUZrm4kojsLOcvj+J/qmo6lCriZN1ydMNI=)
8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=)
9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=)
10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=)
11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=)
12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:ae:cb:88:41:aa:38:ae:74:6c:93:a7:35:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Sep 25 12:03:09 2026 GMT
Not After : Sep 26 12:03:09 2026 GMT
Subject: CN=30f1feb89825b2c211157fdf7d478d37644b19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:72:c7:46:5b:eb:10:ed:92:57:d0:98:24:
c0:2e:5a:c7:79:6d:e8:af:f8:67:85:51:db:5b:f4:
79:20:b0:e6:db:f7:59:87:87:67:4c:2c:e4:52:da:
27:e2:e3:c0:5a:1f:5f:7f:47:b2:32:21:ae:73:c0:
21:38:27:57:98:ea:29:84:c0:96:30:5a:ea:fb:14:
f9:72:58:ba:4e:df:70:8e:7f:ba:de:22:a6:26:19:
5c:51:9d:83:cc:0b:26:c6:1c:a8:47:79:08:8b:eb:
9e:c5:8b:6a:ec:9c:0f:e2:96:2c:3d:fb:41:cc:53:
fe:4b:25:87:e7:a3:3c:f2:e9:41:05:84:3d:da:3a:
92:1b:f7:33:e2:cb:11:02:4f:ae:65:e8:5c:40:55:
ee:30:cf:3c:7b:3c:58:92:eb:59:b4:61:07:c2:de:
36:1d:be:3d:d2:c3:f8:aa:be:b4:f8:9c:ef:c0:df:
6b:77:d6:6f:12:6a:46:db:bc:d8:06:42:df:0b:c4:
37:56:04:86:73:83:93:2a:18:ff:5f:27:5d:ee:f1:
cd:2b:cc:d0:9f:96:67:bc:47:ac:f4:52:58:85:65:
bd:d0:2e:42:04:96:b0:91:d8:8c:6b:d8:9f:65:2d:
1d:65:f6:2b:ea:05:68:be:3f:95:3b:08:55:97:3c:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:FE:B8:98:25:B2:C2:11:15:7F:DF:7D:47:8D:37:64:4B:19:D2
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:72:4b:46:b5:67:b0:38:70:7c:5d:54:41:6a:2d:c0:be:
f8:01:ee:0e:9f:88:c7:b8:56:f7:0d:cb:7b:e0:2e:87:a5:1a:
99:ef:7d:e5:70:e9:5f:05:42:f7:73:8a:8b:33:44:9e:b7:93:
3c:1b:b0:51:d2:1d:53:08:5c:79:34:bf:a8:97:ee:64:f0:07:
84:84:08:e1:05:ec:93:8a:8f:a0:fe:07:bd:bf:9b:82:32:7d:
52:53:aa:94:32:67:d4:8c:79:b3:fa:ea:e3:3f:e1:c9:8d:d0:
1b:35:16:1e:8f:24:11:63:ca:9b:90:f0:6d:8d:a5:d6:69:1e:
6a:a0:1f:b5:d6:ab:a0:88:ae:60:a4:6e:fc:8c:0c:f1:32:aa:
d7:85:7a:6c:d6:4b:d1:7a:f6:df:82:b5:db:3c:10:61:7a:05:
4b:46:25:cd:a1:bd:06:9b:df:89:33:bb:d6:de:4a:ac:eb:64:
28:12:65:1c:0a:c3:40:c2:06:a5:15:e4:7c:ee:f9:92:b7:8a:
a3:7e:3d:c2:e1:44:04:ac:82:19:d9:b2:71:27:1a:f7:20:7c:
90:13:18:9c:ff:60:c4:16:92:47:30:d3:44:7c:ee:dc:1c:f9:
ab:92:54:59:f2:0d:5e:98:94:13:80:9a:74:e2:41:ba:02:ac:
27:95:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:05 2026 by rpki-client