
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier: tSwBlnpfl1XiZnPDMbWOOtKCNwZ53pUvIvzZdStvtm4=
Subject key identifier: 94:58:A6:3D:F1:5C:44:12:12:B2:81:11:F1:EF:F4:0B:48:69:2F:2A
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019EC17F88E159EF8D100CD4C94CEBC7306A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number: 18C6
Signing time: Sat 13 Jun 2026 15:00:21 +0000
Manifest this update: Sat 13 Jun 2026 15:00:21 +0000
Manifest next update: Sun 14 Jun 2026 15:00:21 +0000
Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=)
2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=)
3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=)
4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=)
5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: uoQhNwiPFLvpI+u5JbdRMHcXcrf0XWvzbO4hTm0iVv4=)
6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=)
7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=)
8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=)
9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=)
10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=)
11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:88:e1:59:ef:8d:10:0c:d4:c9:4c:eb:c7:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jun 13 15:00:21 2026 GMT
Not After : Jun 14 15:00:21 2026 GMT
Subject: CN=9458a63df15c441212b28111f1eff40b48692f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:13:73:32:7e:f8:b4:0f:48:50:cf:9b:8a:
97:97:b2:08:23:da:4e:88:83:5c:b3:fa:88:67:79:
29:e3:1c:4a:25:b1:40:07:84:33:38:71:7b:06:ab:
61:ae:a1:cd:67:6e:a3:bb:b5:42:f7:69:0f:df:a9:
ae:b9:47:91:37:80:f4:af:b8:84:94:2b:69:36:3f:
87:49:c4:57:07:13:41:10:be:ed:26:34:b6:56:9b:
4c:94:16:07:7f:dc:ee:55:e2:ee:69:e6:07:82:a4:
11:c0:fe:a4:17:1d:77:3d:89:30:f1:37:19:ae:6e:
6d:f3:37:34:48:95:69:95:6a:21:8a:e3:33:2b:01:
48:21:47:09:ac:57:89:8e:c4:05:0b:a2:ce:4c:c8:
ba:e8:56:1c:a8:7f:04:9b:9c:0b:23:15:5a:52:81:
a8:a1:84:4b:16:23:45:35:21:71:40:07:80:2a:a6:
22:97:dc:6d:44:36:77:77:88:3b:70:d8:a1:2f:1d:
32:c8:4f:4d:24:d1:d1:5b:a5:e9:04:63:b5:e8:0f:
1f:ce:85:48:6f:79:ee:e6:2e:2a:44:6f:f3:c0:41:
ad:01:a8:39:5b:f5:97:2a:bd:4c:0c:c7:ef:50:31:
82:f2:f6:5c:57:66:75:ae:67:e1:8a:e7:0d:00:f3:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:A6:3D:F1:5C:44:12:12:B2:81:11:F1:EF:F4:0B:48:69:2F:2A
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:6f:cb:f1:40:51:99:56:07:e9:69:ce:7c:2d:67:b9:47:
4c:d6:61:de:5a:25:95:3e:f8:a3:ff:8c:93:26:37:64:c4:e0:
45:b0:25:2c:46:39:e6:f5:aa:f3:36:dd:46:c1:c3:7f:3c:1c:
ea:8c:d2:cb:b4:9f:6b:0e:f5:03:83:be:3f:fb:7c:39:d0:e3:
d8:ce:7a:44:b6:f1:e1:79:f6:e9:da:c8:2b:97:8b:7b:ac:14:
f8:a7:2d:71:f7:c5:a3:73:cd:68:23:2a:42:ff:f8:7a:1e:bf:
a6:5b:3a:a7:bb:8d:b3:84:c5:17:fd:0e:87:2a:ab:f7:98:3e:
5c:b5:7c:c5:ba:64:39:18:05:1c:84:61:99:7e:b6:4a:5a:6e:
8a:cd:a4:01:db:ec:25:bb:0d:22:c3:ba:17:db:d3:f6:99:30:
9b:be:0a:fd:ce:ca:f6:36:35:6b:01:5c:70:bc:e6:88:02:c8:
01:ea:28:6d:b7:18:35:b5:77:a2:af:15:8b:8a:d4:43:9e:29:
35:82:5b:bf:7a:c0:7e:76:fc:3d:80:61:05:e1:24:d5:8f:45:
27:d0:6f:4c:c3:53:f2:52:cd:cc:ba:e1:ef:99:22:26:e3:c4:
18:87:47:a7:6e:50:33:4e:f1:87:31:b8:d1:92:b4:3a:7a:d9:
5b:3c:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:36:31 2026 by rpki-client