
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier: 8Mq/afy5PmXD5JcZiTT+ePyzMT+j/pRyj/Nv0iFbkyA=
Subject key identifier: E3:C7:96:4D:40:6C:92:E8:34:00:06:42:03:1E:78:50:7F:88:A4:88
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 019CAA8F5617FB83E7D5ECC1C9F72BABA678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number: 1882
Signing time: Sun 01 Mar 2026 18:00:46 +0000
Manifest this update: Sun 01 Mar 2026 18:00:46 +0000
Manifest next update: Mon 02 Mar 2026 18:00:46 +0000
Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
5: J7rQibY3a8-MeIzjHxJ_un-Q56k.roa (hash: KfYp7j0f60mC69NVOXIfMLH4hMu/T36lhK6azRv6oDs=)
6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: cXkj9vMQYVwTduGVi4J9B65xysGuFRqak2cEnf765UA=)
11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:56:17:fb:83:e7:d5:ec:c1:c9:f7:2b:ab:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Mar 1 18:00:46 2026 GMT
Not After : Mar 2 18:00:46 2026 GMT
Subject: CN=e3c7964d406c92e834000642031e78507f88a488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:25:f0:b4:54:ff:fd:7a:3f:c6:4d:9e:c2:
30:86:37:b6:06:d1:d1:a2:27:54:3e:d7:f1:63:b7:
02:98:75:c6:65:dc:c6:a5:c9:9b:37:1f:96:f9:18:
2d:6d:7f:16:90:2b:fb:3f:e3:f2:89:e7:e4:9e:3c:
35:24:75:28:29:b6:81:97:b6:ae:4f:25:2a:1b:51:
de:2e:d6:fd:0c:64:23:8a:79:5f:83:b0:d2:6e:8b:
9b:c8:05:95:b9:c3:d1:a5:03:e4:25:35:07:0e:5b:
af:6a:75:36:43:d4:cf:9e:8e:32:48:fd:47:3b:66:
07:41:0e:d3:56:51:8a:fb:3e:f3:84:33:f1:d1:32:
42:cd:f6:e1:bd:d0:61:81:b1:a1:e6:08:5f:96:e1:
cf:b2:b6:05:de:c4:59:b0:01:a6:8e:41:a9:c1:51:
12:2c:15:05:21:59:e7:de:d9:a2:ba:79:9c:02:e4:
18:1c:bf:e3:3a:82:75:08:ec:af:4d:4f:87:9b:ca:
6f:89:c3:8e:44:d2:d0:8f:28:4c:a6:4b:26:12:a6:
60:91:f9:42:86:6f:90:92:22:c4:56:ed:39:1f:05:
4d:f6:57:39:bc:e6:f8:be:39:68:f2:de:f5:f8:f0:
17:01:74:e5:25:d7:f6:bd:e8:1d:3a:b8:ed:d0:0d:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:96:4D:40:6C:92:E8:34:00:06:42:03:1E:78:50:7F:88:A4:88
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:41:52:ce:50:59:4d:fd:1d:41:80:ad:e5:00:7c:23:e6:f3:
aa:a9:80:c1:25:7d:0b:da:c4:19:6a:75:32:40:f4:8e:e5:7d:
6f:f3:3b:af:52:57:be:80:9a:da:74:e4:0d:0f:12:67:6d:e4:
81:24:c0:86:17:c4:52:28:38:ac:ed:11:e2:eb:a0:01:23:73:
88:88:13:4a:c4:00:11:bb:e6:1b:b4:51:ea:02:89:d8:70:6e:
db:4e:11:2c:04:b8:92:5c:37:0c:f3:0d:ea:44:58:ad:8d:f2:
9b:fb:80:4d:37:8c:73:6e:27:2d:d2:4c:88:b7:13:57:6c:cb:
af:f7:1b:2e:ac:6e:35:18:ad:80:53:97:b9:52:57:68:45:19:
a5:6c:7b:96:4d:67:a8:0f:f8:a3:6c:6d:26:0f:a1:e3:78:d8:
e3:ba:ca:b5:af:f2:7f:11:a1:a4:a6:24:b2:23:e0:c8:11:74:
90:81:17:ac:ce:4f:85:08:a2:9e:43:4f:e3:d6:35:64:d6:e3:
20:ca:a4:7f:03:2b:42:4c:13:ad:a2:aa:e5:da:17:eb:db:37:
25:fa:31:dd:4a:db:b7:8c:53:94:d1:f9:ef:90:5b:60:27:06:
4f:dc:c2:9b:26:e7:7a:57:a1:ee:5d:48:94:c7:7c:fd:46:b0:
f2:4c:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:09 2026 by rpki-client