
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: vA40Ja9AcWixvXpgAEJi0eDz3nuWpkL/cR0SIpTdCck=
Subject key identifier: 10:22:8A:32:B6:0E:C4:90:E2:08:62:B7:2E:12:18:66:72:F5:3C:A5
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019D27A915B9C674F71C7054F4FCD744604C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0A74
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
2: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
3: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
4: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
5: L-RSq6IUGYToiYDM4n67WQx8VOg.roa (hash: u8ekJ9cjVtYNkxSCsY2smL67ORogBBulUQlW9I6fLOk=)
6: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
7: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
8: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
9: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
10: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
11: UfvcmzB9ufveZXNq6a3lzW1eP7E.roa (hash: nK8nCgu5Jrf1isVMQJjHmLaet1ZMEXT1NgArVFrZdB4=)
12: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
13: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: J3tSydlRnY0Tuw/cCK7g+PFcHDCXy7ynDwYJieVsQng=)
14: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
15: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
16: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
17: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
18: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
19: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
20: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
21: x9kqyHnmkJ25CQE1N5384OaUk1I.roa (hash: YL8POHupulVHn075fwE7OWeKnx0mBQBMzJcWNAFq2jE=)
22: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
23: yeaSVOY_2RKwqxHlxekdt46XnfA.roa (hash: IUmDaJ+QQrXKsNeMI6OsxvyPlW0V65tj0hhIVHsFQrs=)
24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:15:b9:c6:74:f7:1c:70:54:f4:fc:d7:44:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=10228a32b60ec490e20862b72e12186672f53ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:51:6c:37:06:70:cc:d0:bb:2a:08:c5:4b:
11:4d:52:01:77:4f:42:f6:7f:ba:7a:1f:b4:19:fb:
5c:8b:0f:88:64:24:80:77:88:55:3a:92:3b:70:b2:
42:35:ff:ff:ef:d7:89:5b:48:b1:4a:45:fd:0e:9b:
ab:c4:15:70:cf:6a:10:72:8c:dc:73:48:42:8c:9f:
cb:47:cb:c1:b5:be:74:05:dd:82:cb:84:77:e1:ca:
4c:4f:c9:ce:9d:ce:7e:fe:cc:a2:91:32:49:f2:67:
74:59:9d:94:51:50:17:f0:96:4b:44:c3:94:f6:59:
d1:1d:b1:87:3e:1d:e6:e7:a7:50:30:c9:8f:20:70:
4a:54:ef:c2:a9:0a:77:b7:56:0c:e4:9f:f5:d7:c6:
3d:8f:3e:4e:33:93:67:d6:85:fb:e0:24:6c:26:fa:
42:53:ca:28:b8:a0:e7:a1:99:a3:88:c3:64:87:78:
5f:da:b1:2f:2a:a2:b1:28:a5:9a:6b:c4:d2:90:86:
8e:c3:99:1c:da:f9:27:37:75:d3:49:a3:ac:6d:fd:
4f:04:f2:b0:4b:34:f9:4a:8a:1c:b5:57:6e:d8:81:
ea:5e:77:3b:07:11:61:b8:ee:19:ce:22:f1:29:dc:
c8:41:b2:91:31:cb:f6:d5:ce:fb:ff:f2:ba:67:b7:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:8A:32:B6:0E:C4:90:E2:08:62:B7:2E:12:18:66:72:F5:3C:A5
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:72:56:93:28:e6:70:9b:50:b6:c0:ec:b1:f1:08:18:92:
38:0a:82:0a:51:78:4e:29:49:ae:15:92:cf:38:6c:3e:f0:c0:
4e:68:1e:4f:85:70:f7:a2:b9:ce:bc:8d:de:29:dd:87:f0:e9:
d6:76:b1:7b:3a:da:d7:9e:a7:4b:37:e9:36:ea:74:eb:6d:79:
46:c8:46:59:5f:af:a0:f6:00:d2:0a:66:d3:59:6a:de:a7:8b:
f1:5d:d3:74:f1:22:80:a4:a4:2c:8d:b3:d7:aa:a2:12:50:0e:
67:1b:e6:b6:0e:e4:d4:30:a7:cf:94:24:80:78:13:1f:53:38:
9c:cc:18:f5:cf:84:26:f9:fd:c6:76:ae:4a:ee:f8:84:e6:82:
95:ee:ce:6c:bb:aa:9d:b6:98:eb:39:5e:aa:6e:f4:a1:42:19:
c7:c1:5e:69:02:e0:a6:7f:b3:28:11:af:6d:6e:d5:2a:e5:c9:
dd:31:01:2d:e8:6e:5b:38:1c:00:29:bb:e3:93:32:48:01:a0:
79:09:cd:99:90:26:fa:08:c7:03:82:1f:50:1f:cc:a2:2a:f2:
a1:93:da:dd:8f:9e:0d:92:9f:21:5e:26:0c:77:9c:96:5c:eb:
73:9a:d0:bf:ee:97:02:19:ed:3a:42:a7:c9:87:50:5e:82:a3:
31:0c:79:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRW5xnT3HHBU9PzXRGBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwMzI2MDEwMTI1WhcNMjYwMzI3MDEwMTI1WjAzMTEwLwYDVQQD
EygxMDIyOGEzMmI2MGVjNDkwZTIwODYyYjcyZTEyMTg2NjcyZjUzY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ElRbDcGcMzQuyoIxUsRTVIBd09C
9n+6eh+0Gftciw+IZCSAd4hVOpI7cLJCNf//79eJW0ixSkX9DpurxBVwz2oQcozc
c0hCjJ/LR8vBtb50Bd2Cy4R34cpMT8nOnc5+/syikTJJ8md0WZ2UUVAX8JZLRMOU
9lnRHbGHPh3m56dQMMmPIHBKVO/CqQp3t1YM5J/118Y9jz5OM5Nn1oX74CRsJvpC
U8oouKDnoZmjiMNkh3hf2rEvKqKxKKWaa8TSkIaOw5kc2vknN3XTSaOsbf1PBPKw
SzT5SooctVdu2IHqXnc7BxFhuO4ZziLxKdzIQbKRMcv21c77//K6Z7dBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAiijK2DsSQ4ghity4SGGZy9TylMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmndyVpMo
5nCbULbA7LHxCBiSOAqCClF4TilJrhWSzzhsPvDATmgeT4Vw96K5zryN3indh/Dp
1naxezra156nSzfpNup06215RshGWV+voPYA0gpm01lq3qeL8V3TdPEigKSkLI2z
16qiElAOZxvmtg7k1DCnz5QkgHgTH1M4nMwY9c+EJvn9xnauSu74hOaCle7ObLuq
nbaY6zleqm70oUIZx8FeaQLgpn+zKBGvbW7VKuXJ3TEBLehuWzgcACm745MySAGg
eQnNmZAm+gjHA4IfUB/MoiryoZPa3Y+eDZKfIV4mDHecllzrc5rQv+6XAhntOkKn
yYdQXoKjMQx53w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:31 2026 by rpki-client