
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: +/Q5mYwjxCB1Uxkklj4ZLzUn1UHBnB1Y2S8zRjx7JXU=
Subject key identifier: 7C:A3:8C:06:D8:A2:1D:8A:07:12:46:F6:19:CA:7E:3B:1A:23:20:5C
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01A0D01275D52191F492BDDCE91B35F2E95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 17A2
Signing time: Wed 23 Sep 2026 21:01:05 +0000
Manifest this update: Wed 23 Sep 2026 21:01:05 +0000
Manifest next update: Thu 24 Sep 2026 21:01:05 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: z8jgSAcm6vexlPH8/J2+RSkUYzpH01ytPfP4flVbRS8=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:75:d5:21:91:f4:92:bd:dc:e9:1b:35:f2:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Sep 23 21:01:05 2026 GMT
Not After : Sep 24 21:01:05 2026 GMT
Subject: CN=7ca38c06d8a21d8a071246f619ca7e3b1a23205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:c8:c8:00:01:fc:75:1b:2a:aa:35:a4:29:
fe:40:d9:9f:9a:e2:84:ef:3d:4c:89:bf:b6:99:d1:
1c:0c:1a:aa:39:f4:dd:ad:be:b9:81:b5:b1:28:36:
2f:1f:0b:ca:3d:20:0e:01:63:1d:bc:88:c8:c3:6a:
25:fa:f4:34:f5:95:ce:04:40:41:82:91:f9:34:47:
41:e3:f8:fc:49:da:d2:b5:b6:9d:ae:93:bd:3d:e8:
fb:16:4b:36:78:59:72:1b:af:9f:30:47:e5:5c:c8:
bf:0b:08:ad:80:9b:9f:41:80:f1:f6:4d:80:0d:33:
16:c7:bc:51:cd:4c:77:be:f0:e4:e4:8c:db:e5:d3:
bb:37:f6:63:ba:51:bc:68:0d:ec:e8:31:b9:9e:2b:
c6:de:04:73:84:83:3e:e8:ed:a6:e1:b7:5f:9b:bb:
e2:c8:dc:36:bd:19:a9:73:29:96:f0:57:c1:ba:76:
d7:4a:3d:46:1a:c9:da:9e:4a:32:90:76:9a:92:53:
dd:a9:df:dd:b0:0c:3d:d7:a3:05:1f:1b:9c:52:7f:
bb:34:85:1f:17:53:84:0c:93:54:9f:33:cd:14:78:
c0:c5:46:50:4a:12:ef:ec:9a:7b:6a:5f:ff:8a:df:
12:b7:60:90:d8:a2:68:66:55:8f:24:03:19:a9:43:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A3:8C:06:D8:A2:1D:8A:07:12:46:F6:19:CA:7E:3B:1A:23:20:5C
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:36:a7:42:d4:32:53:f2:9c:7e:99:67:cd:e7:96:e7:d5:37:
b4:9f:6c:9f:57:37:26:ee:21:33:4e:d1:87:a1:b8:ba:cd:75:
ea:7f:e0:a4:bb:30:22:e6:39:4e:30:2f:17:76:22:94:db:db:
2f:fc:c5:e1:3c:6d:fa:e8:07:16:43:de:35:1b:c4:cb:7d:50:
cd:05:6d:41:bf:2e:1b:a3:49:88:60:5e:d0:4c:56:16:fb:7e:
03:c6:e1:30:a5:e5:8a:1e:a5:5c:a4:45:f6:a9:28:0f:f6:8f:
4f:01:f1:b6:2d:82:75:af:c7:83:4b:ed:26:04:51:64:de:96:
3b:ba:f0:ed:33:a8:b1:8d:ce:a7:5c:bc:1f:d1:da:28:50:c2:
22:f2:e7:08:4b:7a:2c:18:a0:fa:0b:d1:8a:c9:3d:e7:15:d0:
e6:6a:79:37:ad:05:64:c2:4f:9a:65:c5:c5:ff:c2:4d:6f:da:
35:62:fa:b9:48:75:ee:82:28:f8:10:f9:fb:e4:6e:86:90:a2:
f9:11:b3:26:0d:4e:6d:f4:41:3d:15:3f:e6:9c:fb:43:0b:fc:
4b:5b:c5:0f:29:57:41:60:89:3e:73:bd:bc:02:60:86:e6:07:
8d:a4:8b:a9:71:0e:f9:f2:f6:dd:bd:88:35:0a:e2:eb:89:98:
7d:c8:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:05:08 2026 by rpki-client