
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: Ua2bW17NKyy4WT+GwehAMad0cacjfTeNJKljr/szArw=
Subject key identifier: B9:D7:B4:B3:9C:75:0D:F1:76:DD:A6:A8:CC:5B:0F:E8:FD:82:9F:A7
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019E1CB4ED7BD8004CE5DF38FA6EC02C6685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 163C
Signing time: Tue 12 May 2026 15:01:19 +0000
Manifest this update: Tue 12 May 2026 15:01:19 +0000
Manifest next update: Wed 13 May 2026 15:01:19 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: SIQqTvMSWT+jqJKjsc+WG7XcrbkMLgNpz1v34cf2PwE=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ed:7b:d8:00:4c:e5:df:38:fa:6e:c0:2c:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: May 12 15:01:19 2026 GMT
Not After : May 13 15:01:19 2026 GMT
Subject: CN=b9d7b4b39c750df176dda6a8cc5b0fe8fd829fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:e6:24:23:be:a6:cd:fc:e7:8c:79:48:09:
2f:7a:97:24:2c:ea:dc:09:cc:f0:a6:13:dd:93:bb:
b7:22:92:a6:a9:78:b0:73:1b:5e:c0:c6:e1:f0:fa:
ce:96:09:12:3b:ef:0f:b3:a3:f5:85:0d:ec:51:27:
b5:c3:c9:48:fa:bf:a7:5f:76:c6:b4:43:f7:f4:b6:
f9:73:5b:6b:d2:fd:df:69:87:6a:87:95:88:11:73:
4c:a2:d9:a5:0f:c8:53:00:71:f4:42:e5:38:01:0c:
94:f8:f1:7d:dd:d7:3e:44:61:a0:d1:65:16:d6:89:
35:21:a0:00:af:53:96:84:fa:13:8b:ce:20:fa:05:
4b:2e:8c:6c:ff:c3:64:bc:99:22:37:23:c8:9b:73:
83:36:3d:31:3e:7b:7f:0f:28:c1:f6:76:6d:54:7f:
65:53:dc:1b:3e:43:f0:1d:ce:79:53:a8:b3:d8:07:
9c:3d:45:9b:4c:66:c2:6a:ac:1d:75:fb:da:35:98:
a4:0a:5f:12:de:b1:10:f7:5f:dc:e2:3f:5f:a6:58:
f0:0c:ef:e1:90:60:0e:1e:d6:07:7a:e9:8c:0c:04:
ad:b5:2c:a4:4d:c2:2a:ee:85:3c:c2:28:8a:e4:39:
4d:02:fe:32:ea:0c:5f:8c:85:7c:98:67:c0:22:00:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:B4:B3:9C:75:0D:F1:76:DD:A6:A8:CC:5B:0F:E8:FD:82:9F:A7
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:ce:d4:09:b5:6b:c1:c1:be:e0:1a:ec:7e:5f:3f:80:75:
4f:24:b4:d2:70:f2:2a:81:32:8d:80:f4:12:3d:df:4b:da:32:
b7:03:34:df:0b:f1:52:f5:45:1f:0b:bf:ea:3d:9a:89:44:4f:
5a:f4:85:d8:c0:66:f0:a4:d8:72:61:cf:f1:4f:a8:4d:a4:f3:
de:51:05:c0:16:f4:9a:64:b0:9c:98:ed:af:a0:cc:a5:24:b0:
53:96:68:3a:8a:c0:9e:1d:0b:b3:53:e2:a1:35:1e:f5:77:c0:
4d:70:b0:a5:06:32:4e:db:42:ba:76:51:61:bf:8f:4d:44:b6:
6f:f6:2c:5f:7e:54:fd:20:da:b1:16:e6:a4:b2:ed:8f:ef:e8:
32:7d:ac:7d:8e:57:9d:0a:61:5b:45:4a:1d:e7:13:26:4e:5d:
52:e8:ac:3a:24:6f:38:1e:99:21:58:ec:7d:dc:7c:4d:af:5f:
ff:b2:23:53:0a:8f:ba:37:c3:3b:a5:66:17:f9:47:8e:98:49:
13:d2:97:2d:64:ca:73:ff:14:e5:6b:b1:34:83:4b:0b:72:73:
3c:cf:7f:7b:73:7a:c9:2e:4f:a5:49:29:b5:c1:62:23:1c:74:
76:c3:e5:46:df:22:11:fa:12:68:53:08:d8:d9:74:1e:03:4e:
fd:c5:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:19 2026 by rpki-client