
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json)
Hash identifier: aU6HnKjrGKOIA/xWoFjz5oQ7k9TePMl4u7DejWTrP1I=
Subject key identifier: A9:CA:BD:BC:33:B2:13:22:4C:71:A4:D8:E6:91:83:B2:D7:80:FE:EE
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019F916D5E40372CB2DC623B2F6083F333B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
Manifest number: 0F0B
Signing time: Fri 24 Jul 2026 00:01:31 +0000
Manifest this update: Fri 24 Jul 2026 00:01:31 +0000
Manifest next update: Sat 25 Jul 2026 00:01:31 +0000
Files and hashes: 1: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=)
2: 8FOWFEWcx16C0mva1ErD1ehkFBU.roa (hash: rn3EeCGq/aMeCBtKEwzF9PyWQiRVYlCrTF4jKTOnpKM=)
3: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=)
4: JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa (hash: GY8WDYpP9OTbPtH0RoRmqRWgz/M7p/6mNp2SWNBriZw=)
5: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=)
6: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: 9sUiESeH7V4WBNd/Gyzw4OGDLrNtdumP3EbEv4vR6/A=)
7: b31NEv9Es8XVDEj8beb9fT9naRs.roa (hash: 3veQsyx85NL4O7dRRCNwd65jcAMA+8SLngv7KreI9GQ=)
8: ezdEdcWRJCsgcDn_h_vHY5ql2OA.roa (hash: 62UG+xnKYTXQWzqTXe9v4fS1uJsLYXFYJa2n8Hu7umU=)
9: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=)
10: lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa (hash: G3jTm9EGu0sPhX18qNKUm9+l3y1AFX35FfUBguFPA5Q=)
11: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=)
12: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=)
13: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5e:40:37:2c:b2:dc:62:3b:2f:60:83:f3:33:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jul 24 00:01:31 2026 GMT
Not After : Jul 25 00:01:31 2026 GMT
Subject: CN=a9cabdbc33b213224c71a4d8e69183b2d780feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:bd:60:88:22:b0:92:92:8b:0d:f3:b4:4f:
42:5a:dd:a9:95:aa:c5:a4:3d:ce:71:41:c9:b1:bb:
16:8e:6e:2e:1e:3e:0f:d0:1f:e8:30:e6:99:24:ef:
52:ff:f5:52:20:ff:80:55:d1:1e:75:6d:1b:1d:a4:
80:bd:54:a4:34:dc:8a:5a:b8:0d:c4:a0:09:93:9b:
28:f0:8c:a3:ed:f5:88:ae:37:f5:52:44:33:c8:b8:
c8:4d:0e:bc:48:0e:6c:73:ca:d6:13:a9:42:49:15:
73:ad:b2:83:e6:f2:96:c1:95:d3:93:29:d2:05:8a:
81:e1:16:d5:c7:ed:92:80:94:d1:36:3d:8c:26:f2:
80:31:1e:45:2e:3b:eb:19:bb:a0:ae:3c:b7:81:e0:
24:5f:98:1a:88:0a:e7:06:7e:79:67:d0:ed:ea:63:
e0:b2:8d:a5:ec:78:25:52:0b:af:72:78:ac:c1:1d:
7e:64:13:32:de:f6:ae:57:57:67:c9:f8:b9:e9:8d:
c5:bb:09:6a:8a:68:b8:7b:80:e5:ed:c8:ce:b5:4d:
10:c1:6b:1d:46:97:6e:f5:b3:5a:8c:ab:12:45:b7:
f8:fb:4b:1c:2e:fe:bb:3a:86:6e:f3:c4:e8:c6:2c:
c0:d5:48:f4:bc:4d:03:7d:c7:05:82:29:c1:bb:5a:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:BD:BC:33:B2:13:22:4C:71:A4:D8:E6:91:83:B2:D7:80:FE:EE
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0d:c2:26:03:09:ec:ee:aa:54:78:4b:a9:ee:3c:00:57:84:
86:cf:7d:24:7d:cc:b4:a7:3d:48:36:f5:97:ef:b6:38:cf:4a:
b2:d6:7d:b0:84:3a:38:eb:97:82:73:4b:ec:4b:75:6f:63:a3:
fb:a4:84:33:cc:39:56:92:3f:56:43:06:da:82:c9:de:a2:57:
93:58:92:09:3b:c4:88:f2:60:f6:c2:88:05:47:b2:76:4a:d8:
77:c4:3e:04:18:25:36:e4:6e:f1:cd:2f:97:32:a9:98:8f:8f:
41:ca:20:1b:5e:f3:38:d5:4d:d2:38:61:f6:09:e2:b1:32:a5:
59:83:ab:42:ce:cd:fb:5e:37:02:70:2f:b4:33:91:fc:a9:c1:
d4:35:a2:c0:d5:93:e8:d4:23:8b:cd:14:29:4b:ae:2e:11:b9:
58:fc:66:65:db:e6:54:1a:3d:ba:31:be:d7:25:f6:13:8d:86:
ff:33:e2:de:76:fe:05:6f:96:0e:49:22:a7:c5:04:1b:04:e0:
77:09:58:da:78:e0:2e:68:c6:c8:93:2c:ea:d9:49:43:03:93:
68:52:94:65:08:db:1a:7f:50:23:aa:47:f5:3f:9c:e3:5f:c0:
5b:1f:29:b7:96:94:0f:d8:09:10:b0:90:d3:dd:61:43:52:5d:
1f:2f:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:40 2026 by rpki-client