
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: OlzEibOx9VW8pgYPkF/7BeAZTIwnN/wHHub8c42uYns=
Subject key identifier: 3E:24:16:5F:2E:86:57:CE:6E:34:63:4F:99:72:26:59:A6:C1:55:88
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01A1DF153C46E53DBD3DC6AB3EB08E816FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 1B07
Signing time: Sun 15 Nov 2026 12:01:13 +0000
Manifest this update: Sun 15 Nov 2026 12:01:13 +0000
Manifest next update: Mon 16 Nov 2026 12:01:13 +0000
Files and hashes: 1: 1-LUU4VhlFrR5CgNLExqkgedMVto.roa (hash: pvcrd5yvfwxcXIiMFnqQbB/N6236xrQdUjUSB0U70o4=)
2: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
3: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
4: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
5: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: CFINJZb8abHCPT8K/73Bz7K0rUb0q2mmFs1nmfW5CYw=)
6: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (hash: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=)
7: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
8: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
9: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
10: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
11: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=)
12: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:3c:46:e5:3d:bd:3d:c6:ab:3e:b0:8e:81:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Nov 15 12:01:13 2026 GMT
Not After : Nov 16 12:01:13 2026 GMT
Subject: CN=3e24165f2e8657ce6e34634f99722659a6c15588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:0e:dd:07:0d:39:f8:a2:c9:f2:32:19:c3:
b6:ab:64:dc:ca:a1:fd:cf:91:5c:ae:26:87:c9:1f:
a2:bb:41:b0:58:20:85:5b:03:42:43:51:35:3c:38:
23:54:4d:8c:dd:3d:f0:00:62:d4:d3:e6:09:93:12:
e7:3c:a2:77:48:5f:db:b9:cb:1f:a0:12:2c:37:5d:
bf:b8:6f:52:86:fe:62:f6:1a:4f:bd:5d:49:71:d4:
7f:5c:5f:b2:61:7c:27:b4:11:c4:49:59:58:b4:a6:
8c:92:3f:1e:a4:b1:1a:fc:c4:14:8e:98:40:63:8d:
d3:5f:f5:b6:a7:91:cb:45:8b:12:1a:6e:45:a3:9c:
88:a8:f1:5c:9c:4c:20:cf:73:30:1f:7e:9f:23:26:
0c:e3:49:ed:00:07:17:3f:84:64:9b:7f:8d:c6:5e:
5e:1d:48:45:6c:d0:42:46:b9:59:fa:b3:e0:93:b8:
17:d2:0f:1b:3a:06:84:89:26:2e:58:0f:16:e6:9a:
b7:b7:ce:9b:05:3c:86:3e:24:58:68:f7:d7:9b:e4:
0d:df:71:ac:5b:aa:2f:3b:fd:72:d3:66:3f:65:de:
f3:a3:1a:8c:91:3f:44:79:00:18:d6:f4:d1:0b:09:
3f:6e:2a:8a:4d:8c:90:6c:d9:ba:12:f0:c0:44:11:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:16:5F:2E:86:57:CE:6E:34:63:4F:99:72:26:59:A6:C1:55:88
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:15:f2:b9:b7:f2:2d:8f:07:3d:bd:98:02:6b:b9:ef:1c:
e9:3f:fa:ed:c9:ad:e1:03:fa:a5:00:1c:a1:b5:18:da:74:77:
82:ed:0a:e8:71:51:d0:d3:8a:69:27:31:ed:1a:9a:4f:a1:b4:
92:a1:15:08:41:c9:cf:01:a8:f6:68:ec:2a:0e:55:ac:39:72:
dc:65:41:ee:be:53:54:9b:60:7a:93:e7:18:2c:08:11:44:21:
b5:25:70:06:79:b1:24:57:4b:02:23:17:7d:9d:31:d8:bd:95:
53:52:69:e8:95:60:e4:89:dd:00:22:38:c6:4d:c5:59:0c:0c:
4b:5c:62:be:42:a5:2a:17:7e:cc:80:54:29:17:c0:85:05:40:
c3:5c:3f:f0:c8:1d:57:6d:8b:69:b2:5b:59:c4:e6:dd:01:10:
98:02:22:c2:87:fd:9f:6f:40:e0:2c:24:e1:ad:63:40:b8:00:
08:03:70:86:2d:df:c0:eb:7e:1a:f7:08:b1:47:53:77:37:32:
84:45:41:a9:66:0a:0c:77:05:85:24:4b:65:14:1c:a4:05:4f:
6e:f0:fd:44:82:fe:26:97:13:51:87:74:ae:c2:18:f5:1a:5e:
a6:e5:ee:ff:e4:67:6e:e4:3e:71:d5:ef:16:cd:2e:be:3c:5c:
5e:19:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:29 2026 by rpki-client