
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: TkNJEmEBe6UNqniLteh1Q53ajIPhgykHIdMK/mue23s=
Subject key identifier: F8:E8:B7:37:1B:FA:93:8B:EF:35:5E:61:61:82:98:30:54:B5:8E:85
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F8FA52C71B0A1960B8EF65D47D6F048F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0BD4
Signing time: Thu 23 Jul 2026 15:43:14 +0000
Manifest this update: Thu 23 Jul 2026 15:43:14 +0000
Manifest next update: Fri 24 Jul 2026 15:43:14 +0000
Files and hashes: 1: 1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa (hash: SQN5hmAjWwammFizA41s1F2xWOAm+YxghfyjGPYdQT8=)
2: 1-iWOVrefjs9HBIASRdjsq7CSI7Q.roa (hash: m7ouBQ2qviW5hyE9F7O8F0y6LhZUjUrkwEJiugNgPHU=)
3: 8GcZVYe92v13intCg5ID91bOLno.roa (hash: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=)
4: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
5: A6OT-fb--rqUtmZHSlBfqHGwoR4.roa (hash: Hjob8qIhm/ZZvMCqBuLDpJpFpTEXuiZwGkh8XZDVltg=)
6: GOY9-g4eYZKr3CUc2VmgYHD648g.roa (hash: rHoaqUeCplV2dnhZowplHvJXPbD1HPyMQLvKsO9NHOU=)
7: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
8: TXq41OJpiiStce3AQr_RGstn8ZU.roa (hash: 3P6YdvPURjNL2ftvcv6OGf8HEYCpwGLQS8LFvTEPzI4=)
9: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (hash: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=)
10: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: oa82vhfb1Rtq16eYfGJ1M8f184Oopry8dJ+haBbZQtM=)
12: XCdVMh8AKADdJDPu6KFSe_oQz38.roa (hash: nLSSyY1/QncLqqHV2lGPsT2caZ8SwcYowKfgfgbtkOk=)
13: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
14: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
15: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
16: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
17: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
18: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (hash: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=)
19: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (hash: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=)
20: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (hash: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=)
21: tgSRqnQnZUD0Fu4ANbQFDigMoEo.roa (hash: NZR02viri4xDg6oLTnJWANSbonEFpMqlapgOxg1s9+0=)
22: tpruxi4WfnJbBB5IjFb5ybMY3jg.roa (hash: Q0taTJKgI/MX/UvsvMDePMKEwoMw7JMzAzcey8JjxXw=)
23: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a5:2c:71:b0:a1:96:0b:8e:f6:5d:47:d6:f0:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 23 15:43:14 2026 GMT
Not After : Jul 24 15:43:14 2026 GMT
Subject: CN=f8e8b7371bfa938bef355e616182983054b58e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:4d:3d:b7:4c:66:ec:99:45:23:f6:46:67:
51:be:26:f9:a1:61:82:f4:f3:84:cc:36:32:93:74:
ac:ef:fb:72:a2:2d:08:f6:a1:ea:63:66:51:79:eb:
84:6b:f5:4d:c7:12:6e:6c:1a:7f:77:f9:f3:48:8e:
46:fc:1e:34:e4:97:5c:88:07:aa:13:c5:1b:93:1b:
08:ce:0a:cb:11:4b:e7:8a:41:c2:4c:9e:88:f3:0c:
fe:0a:f5:0f:a0:7a:92:49:c7:64:31:e7:b9:47:7b:
23:23:99:0f:50:36:f8:ef:53:17:a7:64:da:bc:bb:
7c:9c:72:59:e4:16:d5:7b:d8:9e:1b:41:4b:cc:b9:
7b:c2:01:6a:21:5a:58:32:ac:a3:31:c0:e6:87:22:
e7:de:ce:47:47:91:b5:74:bf:ff:87:69:fc:d6:83:
d4:78:1e:1c:97:1c:15:dc:2d:f7:31:4b:af:d3:66:
04:18:11:f4:d6:bf:17:02:8c:7c:4c:c6:97:96:06:
20:34:8b:4d:c2:fb:69:40:71:11:ef:5c:31:bd:31:
b9:37:e6:89:92:ba:74:3a:3c:94:95:c5:2d:54:35:
75:37:96:a7:97:20:6e:98:d6:1c:c5:52:9c:8b:27:
6b:b8:09:e3:f6:1b:3a:74:f8:9b:19:8f:11:73:21:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:B7:37:1B:FA:93:8B:EF:35:5E:61:61:82:98:30:54:B5:8E:85
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d2:75:4b:39:90:8f:b7:e3:80:74:57:74:2e:5c:70:66:b6:
f8:cb:45:21:16:5a:55:b2:4c:97:68:71:26:91:3b:7c:ff:bc:
d5:77:b8:fa:ef:7a:42:6e:3c:76:81:ab:87:f7:ca:ba:f4:44:
d1:29:ac:dc:43:5a:34:56:5d:4f:06:a5:1b:3a:a1:8b:b9:62:
f1:75:b2:d5:79:b1:98:d2:a0:b7:ce:5d:ad:44:db:1b:e6:ff:
97:41:c4:f0:e2:15:30:dc:e1:18:9c:8d:71:17:9d:09:aa:73:
98:c7:3e:93:74:c2:de:75:83:69:4b:1e:0a:43:32:e4:13:ca:
9a:f5:33:a4:b3:d1:2c:c1:c3:af:a7:02:2e:44:59:9a:98:7e:
48:45:ca:22:2a:ad:ba:99:ef:fd:1f:e2:eb:e7:e8:54:b6:97:
d1:40:b3:4a:21:75:ef:35:eb:8c:f2:ac:3e:5a:53:6d:06:ef:
6d:24:4f:82:72:c8:b0:89:8b:02:e2:70:75:03:fd:b4:f7:77:
9c:7e:04:cd:a6:d9:bc:35:e3:67:f1:15:d3:cf:06:bd:16:0e:
ab:5d:83:17:7e:92:61:c9:49:08:13:cf:76:09:d0:35:c2:15:
66:32:5c:fb:2e:75:c6:1a:ff:3f:7e:95:24:59:9d:4f:c7:c3:
05:35:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:30 2026 by rpki-client