
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File: wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier: MEX4eff/NbXpZY1vggGLC6g3mFnh8X7D8QcKd0u9BcU=
Subject key identifier: D3:00:E4:74:0B:C5:A1:F3:FE:11:FD:FB:AE:EE:DC:C2:9D:21:45:C1
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01A136A38E74C2F44837D089625BDAD487A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number: 1AB6
Signing time: Tue 13 Oct 2026 19:00:50 +0000
Manifest this update: Tue 13 Oct 2026 19:00:50 +0000
Manifest next update: Wed 14 Oct 2026 19:00:50 +0000
Files and hashes: 1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
2: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (hash: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=)
3: TUjQx-SCeFceGAtPQxFXJNzqxpo.roa (hash: gK+ZRgHX462dQbtKVmO0TKz0Zq0HpGa0egijOyBQn+c=)
4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
6: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
8: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (hash: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=)
9: g2E1f-BxBAur9lYreK_DDpQmlrA.roa (hash: B5+1L111o4GgfrlNcBbCeeD8BCchToJhANvD28KbrqA=)
10: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
11: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: pqMpcKr8TYAGwgSa1/dTEuNXND+/3TdZTpneENYaRlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:8e:74:c2:f4:48:37:d0:89:62:5b:da:d4:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Oct 13 19:00:50 2026 GMT
Not After : Oct 14 19:00:50 2026 GMT
Subject: CN=d300e4740bc5a1f3fe11fdfbaeeedcc29d2145c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:bc:f3:09:ab:1a:28:99:e9:e8:29:bf:52:
a4:46:c0:33:73:c2:a8:3d:fd:1a:05:c0:0a:71:bd:
5e:17:5d:db:3c:32:eb:28:43:d0:d8:f6:77:09:ee:
13:d7:e9:1f:6c:d3:3b:22:2e:d7:c6:46:bd:72:ca:
51:31:6b:5c:1e:2c:e1:fe:8d:39:d9:7c:da:4a:18:
af:3d:72:3e:43:c2:3f:ce:9a:4d:6f:3f:d7:fe:c0:
25:18:79:6b:59:63:fb:47:73:81:26:48:83:5a:a1:
de:ec:d8:38:cf:65:22:a5:dc:e8:ef:62:60:d8:18:
9b:1e:19:cd:b5:dd:8a:4c:d1:0c:4e:42:1c:5d:3f:
6f:36:1d:ab:a7:6f:35:30:37:8b:34:a2:73:c8:10:
a9:9d:ec:ea:58:5e:4d:c5:92:54:17:f5:c8:be:ab:
e8:25:77:b5:55:9c:da:2b:5e:84:aa:e0:5a:95:79:
5c:b7:82:00:d7:fa:da:94:91:8e:39:a7:27:1b:8d:
56:ba:b7:29:b8:06:84:76:e6:8f:15:1b:91:91:ab:
6b:94:5d:46:5e:be:f8:98:d0:90:21:42:d0:d6:57:
44:a7:ea:54:7a:51:94:3d:23:4e:c0:a7:ac:30:65:
fe:88:96:a7:10:92:7e:15:68:a7:cf:73:08:96:11:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:E4:74:0B:C5:A1:F3:FE:11:FD:FB:AE:EE:DC:C2:9D:21:45:C1
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:dc:ce:fc:56:d7:da:5b:27:6e:c9:b4:76:0a:8f:ee:b7:
07:33:b8:13:6d:52:d8:8d:aa:e1:2d:6f:7c:fb:85:c9:cf:16:
84:4d:b8:06:15:0a:c8:50:f6:20:52:f5:2a:98:22:d7:d3:2f:
ab:6d:10:9f:90:be:76:29:17:c6:fe:ef:ac:53:49:4b:5d:a4:
c1:62:16:2d:8c:02:14:b4:a4:ed:a3:33:a9:9f:fa:08:34:2c:
4c:c8:46:ce:e7:fd:1d:bc:a3:20:3e:b8:02:7d:88:cd:81:57:
d1:07:62:ab:9e:ec:8c:c9:a4:01:67:7e:c9:74:b4:df:8b:58:
28:5d:fc:bb:3c:a2:d0:03:db:e7:21:f0:06:eb:92:b6:0c:09:
5c:e9:62:d3:2f:ce:71:0d:6f:4c:b0:7f:08:c7:7f:c5:bd:a2:
94:ac:77:26:7c:78:70:94:62:ec:23:20:62:c3:c1:1a:e9:83:
c0:94:d0:a2:23:ea:e5:5f:f5:14:97:d5:0a:25:a4:b4:57:38:
46:56:10:cc:70:4c:f4:23:77:c6:de:d8:f7:24:c0:06:66:3f:
3c:59:15:2b:dc:36:2e:fe:06:7c:85:89:36:60:5b:c6:37:d6:
c1:04:44:ac:f6:23:a9:4b:9a:2d:a8:dc:8f:5b:49:6b:c0:4f:
cd:8b:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:48:34 2026 by rpki-client