
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier: 4NGVKwp2gmz9KvCk234mF13P6vc8J5iEsopeEw9g6+E=
Subject key identifier: B8:D5:50:2D:EB:0E:EC:10:1A:A9:47:89:A4:80:F6:7F:E6:FA:70:AD
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A0DCF2638084E230B172A9ECDCB0DF1349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number: 0CA0
Signing time: Sat 26 Sep 2026 09:01:07 +0000
Manifest this update: Sat 26 Sep 2026 09:01:07 +0000
Manifest next update: Sun 27 Sep 2026 09:01:07 +0000
Files and hashes: 1: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (hash: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI=)
2: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (hash: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA=)
3: 4RzlaE4IATIyocr-VUzpEUSO7Mo.roa (hash: zDqUG2mBRxI6CuLzFrAEFvPmBc+dGZskWKeVJphaxsI=)
4: FH_80jMPKL9spaQFMKL0FymFhtc.roa (hash: oUYz8P6/ozfIRV+WS+r8nJ+ZAnznPQME4aSk8skvvTg=)
5: T1QvCUExSo8qr1TiSPtj6C8JDfo.roa (hash: ddOyimVHprxiShYhUJs1GLZ9yZYCZEn6Fr22m9Sbc8U=)
6: UwVIBu2jxBDiFJTytgK8RUzy-Cs.roa (hash: ltWrsmWOaH+qQhwZyDVBUFqGoWpky9At3HwYToazYgw=)
7: VUVzIsl2dUtcnSNfIHkTqfutfSQ.roa (hash: d5fE6EilmN9qcmtzXxi0Cpe76f+gYdzlmYovAB5cKL8=)
8: YIsKwwvCfYeQ3ro-L8t-CuRS2Qo.roa (hash: Az8B8niIcPnTkpmEOwRs6eOUmDJEyD6QYlEEdIYgVnw=)
9: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (hash: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10=)
10: ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa (hash: 6J65b1+OVj9EmypCFNsDOLXw55bioisW0DUjoT1yQ8c=)
11: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (hash: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo=)
12: bPh4Giu5Nq3sZFM8_B9KWlRAEqs.roa (hash: 12lV/CjP2LLIfjb5WGBw4B60ICGZb4X5UeRE2osFO3o=)
13: ek0kAxmgD_bIdypuN8g651x-9uc.roa (hash: 19NypaHsjpb2/HsDFohPxp20XTcbs4VySqlMRe+Mr8o=)
14: h0g9PeUD9s--N_smk4wIyZAF_Is.roa (hash: pG1YjkSx4xKJ/YjQ8XDXdcfS/ArwAj34jKIvlk0bQys=)
15: hXIhzjuVT_g30emOPVzmOSj0J6s.roa (hash: /O2nlNQeiXFO1D/Sq1DpRHoBrs4D7nPghvRKKcsCk6g=)
16: hvdGPqGZACKBGf93rntej67lv54.roa (hash: Zz0VuDlVsJON1ndmUKaTXSvLDIjjSSZLp4ke0HjSjws=)
17: o12-ltrKgI_4fGaq0qoW_8OmM5k.roa (hash: W1W76nq2njebPKh6pNWncQQPVtrVvoWY91Y2JLAdp7k=)
18: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (hash: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE=)
19: rkni80Or2w2QygXy0RTlNsvlL8E.roa (hash: gMQ3ViXeTKyCOOddnGlJIocGpXYE80FbVoVgkMfQtjU=)
20: tOwGj-jK7dqoFOwROeFuUHz166g.roa (hash: oMEIFR709hXHcSbTuYsS+Wj5TcS71jBplXsIIz6Pzl4=)
21: vt0ElRQTTQDbtawurQTq5naKklI.roa (hash: sTZaSlh1WeFZN4xDhr5tgce7SkNVNhyZN7/S1+Uq2OY=)
22: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: 1molhBB+YqB9IG/ivWWCa+MzhS08i+761hJenFYUMsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:63:80:84:e2:30:b1:72:a9:ec:dc:b0:df:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 26 09:01:07 2026 GMT
Not After : Sep 27 09:01:07 2026 GMT
Subject: CN=b8d5502deb0eec101aa94789a480f67fe6fa70ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:fe:ab:e9:f9:05:4e:f3:71:f5:37:4e:86:
7b:68:5f:66:30:7a:40:1b:86:d0:1b:3c:7b:8c:7c:
e5:db:79:41:14:7f:9d:ff:29:ed:7e:6a:0e:4b:57:
b0:e5:5f:97:3e:07:bd:01:c9:8b:5f:41:ec:a5:12:
09:27:20:55:23:cd:a1:6c:65:77:b8:46:85:b2:99:
29:29:05:4f:bb:48:25:b5:27:0c:fa:53:71:91:1e:
4e:98:51:21:63:aa:9b:35:24:06:b5:06:c0:72:ed:
23:dd:c1:3b:5d:e5:e7:26:a4:29:e6:ac:80:a2:e3:
15:7d:c0:77:75:e7:bb:c2:82:31:13:84:2f:4f:42:
90:8e:54:f6:b2:0c:15:57:a2:5a:9b:45:50:82:d6:
14:a7:34:be:d5:03:7d:25:6c:b9:85:ec:d7:f3:ba:
ec:28:80:74:01:1f:2f:cd:ad:88:ef:a7:82:db:fb:
6d:ff:27:e1:26:d4:87:45:35:37:65:21:11:bc:f2:
6d:46:a0:b6:9f:94:83:4c:83:81:5b:bf:76:d2:96:
9e:24:f1:07:34:40:54:71:54:40:e3:a1:7b:3b:b7:
77:e9:cf:18:a9:2b:c0:31:ac:91:8b:4e:28:9f:a3:
be:8d:72:ff:41:4a:72:9f:1c:1d:18:f0:bd:d4:be:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:50:2D:EB:0E:EC:10:1A:A9:47:89:A4:80:F6:7F:E6:FA:70:AD
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:ef:06:17:2e:83:e2:d1:49:80:d8:8e:9a:cf:6b:09:26:
e1:a9:14:32:c2:ec:66:2f:eb:e8:b6:84:9a:4b:48:99:b6:51:
38:b4:d3:9e:a4:04:a6:f5:d8:ae:19:41:11:aa:49:3f:14:2d:
6e:36:44:be:14:18:65:ba:1c:cb:0b:a8:51:a8:1e:54:7f:c1:
f3:82:65:a8:29:34:16:32:40:19:3e:3d:f8:c2:35:09:f4:1f:
9c:30:2f:9c:4a:5c:88:f6:54:15:85:28:a6:f7:6d:5c:47:57:
9c:69:a5:d5:71:f5:fd:4f:77:74:eb:6e:c1:0c:46:1d:0a:12:
06:ff:4c:3d:6d:09:df:da:3f:e3:9c:38:17:ba:89:90:ba:9e:
6e:b2:8c:a6:2a:5e:eb:17:43:50:8d:ec:42:77:75:9c:6e:58:
1b:ba:cf:7e:2d:cc:68:95:72:84:b2:b3:fa:b9:d1:6d:3d:e6:
68:a6:41:2c:36:b3:26:e5:2a:4c:c1:3f:c8:4b:d8:35:ff:51:
98:2d:67:00:f7:9b:6d:23:67:f6:a5:0a:f7:13:08:6a:6b:3f:
5d:69:66:4c:3e:60:db:a2:51:89:97:90:97:7f:bb:40:c7:ce:
c7:93:d2:36:a2:4a:91:b1:ed:33:b8:49:bd:11:9e:cc:83:74:
58:9e:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:37 2026 by rpki-client