
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: f2C5uGni2mPFivnDFueB+J5uIxKonfHBRgK3EZt3+Vk=
Subject key identifier: CE:84:55:49:58:76:9F:FF:55:4F:8E:22:C3:2D:79:BC:D1:BA:11:A4
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019F935B92E850654623B237B61D01949FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 19E9
Signing time: Fri 24 Jul 2026 09:01:19 +0000
Manifest this update: Fri 24 Jul 2026 09:01:19 +0000
Manifest next update: Sat 25 Jul 2026 09:01:19 +0000
Files and hashes: 1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=)
2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=)
3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=)
4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=)
5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=)
6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=)
7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=)
8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: Xw/CG6JRT7MwBUnUVu/1p9Ci6S7hWfCPo69IYW3EZE8=)
10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:92:e8:50:65:46:23:b2:37:b6:1d:01:94:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jul 24 09:01:19 2026 GMT
Not After : Jul 25 09:01:19 2026 GMT
Subject: CN=ce84554958769fff554f8e22c32d79bcd1ba11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:43:fd:ca:da:9b:00:be:5b:ce:bd:67:f8:
5e:13:c2:04:da:c7:16:29:53:30:d3:87:26:94:d8:
b9:68:86:51:2d:79:9e:af:f2:06:60:0a:43:80:87:
55:42:2a:ce:7f:bf:b0:51:38:bd:d5:02:12:d5:bb:
66:7e:5c:ed:6c:be:f2:7e:5e:b4:52:62:2f:f9:93:
3c:fb:0b:66:5f:25:30:3a:3b:dc:fc:ce:4b:19:10:
f4:d0:c3:a4:8b:c9:fe:ad:3b:d9:49:1b:5d:a3:11:
f5:72:18:48:78:ff:61:8f:e0:44:2e:64:e8:b8:a0:
44:2c:1d:6a:69:b4:f2:28:07:f5:86:10:fe:3e:ee:
45:90:ef:3d:94:df:5b:26:41:9f:b9:d5:1b:9a:d5:
a0:a4:2e:ad:e9:da:97:64:44:85:39:d9:2b:6c:97:
0d:3c:79:89:90:88:70:0f:2c:29:59:11:2c:1b:93:
a6:38:df:fc:ad:d8:8a:44:46:43:25:25:4b:73:77:
3b:27:17:b4:1b:18:b4:0a:b1:51:da:ab:81:b4:b5:
e2:d8:76:3c:22:82:cf:e2:65:55:ec:81:94:41:fc:
f5:99:a6:ae:8c:67:e3:30:df:e8:1c:7e:3c:71:e5:
d1:cc:8e:26:b4:b0:01:8b:ad:fe:59:62:17:4b:4f:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:55:49:58:76:9F:FF:55:4F:8E:22:C3:2D:79:BC:D1:BA:11:A4
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:66:32:40:6f:da:eb:7a:e3:ba:fe:33:e9:1c:7f:b5:48:
4c:74:a0:7e:b9:fd:95:ea:75:5b:d0:d4:92:3e:78:34:ee:40:
75:09:0c:fe:8e:b4:58:c2:a5:45:79:60:3a:ea:f7:df:fd:cc:
4e:3a:a0:e2:d8:b0:1e:0f:83:81:2b:0a:95:f8:a1:35:e0:46:
6d:2c:11:76:21:b9:00:5a:20:ef:b2:54:cc:11:f8:99:a1:ee:
4d:0e:c8:fe:3c:a4:30:2a:60:de:fe:b9:71:46:ea:9b:4f:f1:
3d:e7:e0:8d:3b:d1:41:21:12:c8:db:96:99:81:12:23:b7:d6:
a8:2f:ef:2e:c1:67:cf:c2:07:60:34:2c:f2:f8:3a:9e:3c:00:
47:3d:41:22:da:37:69:83:a4:53:a9:86:2b:52:ad:29:ba:8e:
97:ab:80:be:d0:51:60:58:5d:fa:7d:d0:98:00:40:11:ac:0f:
a7:f2:5c:69:43:b1:78:21:7c:d5:2a:d5:e7:d1:6b:98:85:2e:
d7:64:ae:65:bd:a7:c8:e6:28:4f:ae:ac:67:ee:60:08:34:d6:
b0:5e:c7:fc:35:8c:af:70:02:c8:8d:d6:ff:9c:b5:61:75:a3:
1f:38:44:9a:2a:65:81:ae:c2:ea:2b:71:3c:1d:e6:7e:00:4c:
c4:ee:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:50 2026 by rpki-client