
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier: wuFZOjMKDsDIU7GHSt8d0Rgp86e+eqqL9IiYVoFP1C8=
Subject key identifier: 1B:5B:0F:13:C4:1B:5E:65:9B:C0:1F:B8:CB:4F:8C:00:C5:57:A9:F7
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019CAAFD6EFC2B4F5AEE1537193C44470ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number: 0CF8
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=)
2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=)
3: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=)
4: DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa (hash: swf8YmD6Ki4+UjZ5FglBvmHT7MtzNkXVGqo+SXTTnU4=)
5: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=)
6: QzMyegFOkVY4VnXHpYFz61drfjg.roa (hash: mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=)
7: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=)
8: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=)
9: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=)
10: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=)
11: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=)
12: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=)
13: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: j4YZ6qPZ1r1dNrmPd0u6OIzLk4X6nufFPKx5XqQB0FE=)
14: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6e:fc:2b:4f:5a:ee:15:37:19:3c:44:47:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=1b5b0f13c41b5e659bc01fb8cb4f8c00c557a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fa:86:2a:ad:e0:e6:68:04:9a:c3:08:5b:61:
69:ca:5c:ef:a5:a5:b2:fe:e1:38:0b:72:e1:15:06:
73:fd:d9:5c:6e:0d:45:88:89:93:d6:2b:6d:6d:7f:
d1:2e:31:66:e6:cb:2a:3c:df:9e:8e:3d:ef:dc:94:
e8:d6:f4:79:1f:45:e9:8a:6e:74:5b:4d:a5:af:5a:
0f:71:4a:6a:f1:26:2e:ec:13:b4:73:4c:ac:48:fd:
fd:3e:4b:56:12:2d:c0:82:ac:fd:4a:b4:00:58:b6:
06:57:64:39:c6:39:14:94:e4:23:74:ad:00:49:1a:
4b:57:96:3b:5e:59:fb:8b:60:ca:8f:f9:b2:dd:18:
46:66:09:66:a1:ab:d6:92:a9:22:84:52:58:9c:0e:
60:96:76:f4:19:b1:c1:fb:77:38:be:7c:2e:0c:58:
5f:f8:1b:7e:83:7c:e1:96:ae:04:1f:c8:f0:01:6a:
e8:a9:ca:aa:5a:7c:18:9f:91:b8:53:75:89:43:a6:
09:a0:0d:0f:f3:35:70:27:c7:33:2a:60:8e:63:ef:
1c:66:1f:d6:6d:eb:02:27:bb:8b:ee:fd:7b:cd:68:
98:fb:78:9c:a7:df:5a:6a:be:1a:80:2f:0e:5d:97:
4c:d1:53:7e:bd:fc:6b:04:ef:75:90:f2:34:39:92:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:0F:13:C4:1B:5E:65:9B:C0:1F:B8:CB:4F:8C:00:C5:57:A9:F7
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:72:ae:15:3e:41:9f:43:36:77:5e:fc:d3:4a:84:24:ba:
5e:03:cb:7c:d2:99:12:bd:bc:fa:16:54:fd:b1:c6:50:0d:c4:
e1:1e:8f:50:09:a1:76:a3:08:87:50:46:f4:6a:ed:0d:5b:ac:
e5:3c:61:cd:50:cb:95:e0:e0:1e:ed:12:67:8d:42:a0:2e:4f:
d1:0c:20:78:98:4d:80:53:f1:00:67:34:50:6e:83:5d:14:25:
37:bb:9d:30:88:f5:00:7d:4f:16:c2:6a:05:19:78:95:a0:35:
ae:86:1d:f0:4d:81:27:fd:88:fe:a7:58:fb:85:0f:df:87:68:
4b:71:84:70:a9:dd:ef:f6:01:96:e9:b5:20:ae:39:91:84:69:
c5:f9:58:e0:51:97:71:b7:7f:e7:69:6a:ee:4a:f9:6d:a0:90:
80:61:3f:37:e5:6e:d3:07:78:e5:6c:cb:bc:f1:94:5b:af:08:
eb:d7:ce:51:7a:f5:fa:e8:c7:06:de:80:ab:a5:f3:51:65:23:
2e:6e:60:2f:4c:18:89:e5:e5:7d:9d:ba:28:c6:a0:b0:ec:a2:
42:2d:cb:bd:b9:29:8e:bf:07:27:62:3a:69:23:6a:34:50:80:
69:08:2f:e9:9a:8b:3f:3f:04:37:ef:b3:fb:ea:d9:45:59:65:
1b:ff:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:04 2026 by rpki-client