
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier: dbNVkI8gt7A/dI/x54L2A/I8bUZppwid5e1kMKrQ9A4=
Subject key identifier: 1B:66:A9:12:96:2A:A3:C1:DF:2A:3D:2F:FC:D3:8B:02:50:06:16:2E
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019EBE2CDD591FF1809235BAD0A22789609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number: 198D
Signing time: Fri 12 Jun 2026 23:31:11 +0000
Manifest this update: Fri 12 Jun 2026 23:31:11 +0000
Manifest next update: Sat 13 Jun 2026 23:31:11 +0000
Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=)
2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=)
3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=)
4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=)
5: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=)
6: Q2lWhlnKZ6G7eyDXOunv3m467VA.roa (hash: ixUhZUmTO8/j2Eee8CMz97Hq3qnYKzXvs7vLViv2jf0=)
7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=)
8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=)
9: awMrblVcKEMHhOxSuC24vtYngkk.roa (hash: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4=)
10: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=)
11: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=)
12: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=)
13: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=)
14: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: Vwjxk1DmmdEvGsNjzzoTadG7yWJKWRFWv0nYDcdbzOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:2c:dd:59:1f:f1:80:92:35:ba:d0:a2:27:89:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jun 12 23:31:11 2026 GMT
Not After : Jun 13 23:31:11 2026 GMT
Subject: CN=1b66a912962aa3c1df2a3d2ffcd38b025006162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:85:bc:8d:61:21:98:98:b3:03:01:62:d6:
d6:52:14:ad:c0:43:ca:14:72:1b:c7:cc:01:6e:ae:
a0:f7:74:3d:86:13:e6:d0:e4:50:95:c3:93:1e:25:
af:41:49:d8:5a:64:22:bf:d6:1c:72:af:1b:0e:84:
07:81:bf:35:f4:cb:1b:1a:28:fa:d9:47:7a:4e:25:
e1:a2:ad:6d:7e:3d:a0:38:82:fc:3c:61:f6:5c:4b:
b8:83:b2:04:ba:b8:21:dc:f9:26:f5:8f:e9:7d:15:
e0:99:83:f0:a5:da:59:11:6c:c5:a3:79:14:63:e4:
f7:c5:c1:8a:d7:ad:90:ad:8d:d9:54:48:28:12:a4:
24:a0:93:87:9a:57:78:3a:f9:8c:57:08:c2:8f:7b:
f0:e5:ed:34:2b:57:ce:62:22:9c:10:48:ee:0d:4e:
f3:b8:f4:20:cb:c6:7b:49:80:8d:9d:ee:01:73:b3:
e4:de:14:e9:3c:e1:d0:7a:88:e3:39:06:ed:ee:25:
8d:25:3f:d6:16:f2:c3:ee:34:ad:3c:88:14:ee:34:
42:81:75:ac:82:d8:fb:9f:77:aa:5d:37:85:e0:fa:
be:25:2c:f8:d5:bb:6f:a5:5b:7e:6d:53:72:73:5a:
cf:0d:88:4a:d6:f9:35:5f:96:51:e7:c1:e1:20:5c:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:A9:12:96:2A:A3:C1:DF:2A:3D:2F:FC:D3:8B:02:50:06:16:2E
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:24:f2:9f:4e:cb:01:77:18:6e:e5:08:0d:46:cb:f6:c6:38:
7b:e3:17:71:1b:5b:89:09:27:42:25:6c:13:39:29:5b:35:1d:
00:95:66:8f:8c:c4:72:ec:b9:62:f6:3f:61:a2:a5:cc:95:b4:
22:4f:10:05:16:b3:2b:12:17:f7:84:3c:e0:90:bf:8b:31:7f:
c4:b4:c3:aa:15:d3:2b:ea:68:fb:96:81:ef:5d:17:ec:9d:32:
d6:73:4f:ed:a1:fb:cd:6e:9a:40:4d:61:a9:32:e5:4c:d2:c2:
74:6c:d6:16:c6:04:e9:a0:22:aa:da:b5:c1:c3:e4:3f:6a:d2:
6e:a6:4b:b9:6d:9b:07:cf:74:be:65:a2:a3:74:44:86:95:a2:
2c:66:f0:24:ae:15:99:73:f7:a3:5f:5e:cd:2f:32:07:1d:86:
25:1c:a8:87:a7:ac:95:c5:c9:ad:e9:27:27:48:91:3a:ee:46:
ce:56:cb:02:b6:29:79:76:da:9e:b0:59:14:cb:bb:d1:ee:29:
5c:b5:0e:21:e0:73:b2:74:a0:34:4a:46:cd:dc:03:5a:6e:b5:
83:dc:19:11:77:8a:16:82:53:d3:c8:01:0a:28:ef:49:f1:d8:
f6:ca:6c:1a:36:44:b1:e8:12:8e:3e:69:8d:6b:ea:df:6b:b2:
8b:3c:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:21 2026 by rpki-client