
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: DMpDz8xACucSsOH474L/KyuHkbrE5hYsy2s+OnFQzow=
Subject key identifier: 99:9B:5D:A7:47:47:0F:5A:07:C6:53:8F:4E:97:F5:D1:5F:50:9A:AD
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019FA89986B5D0E3D52E77B94DF1205FC28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 1709
Signing time: Tue 28 Jul 2026 12:01:01 +0000
Manifest this update: Tue 28 Jul 2026 12:01:01 +0000
Manifest next update: Wed 29 Jul 2026 12:01:01 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: GNSieyMc0wM0SwzxkeUCd6JGggCCLEBAoLVpC7OA5Gc=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:86:b5:d0:e3:d5:2e:77:b9:4d:f1:20:5f:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jul 28 12:01:01 2026 GMT
Not After : Jul 29 12:01:01 2026 GMT
Subject: CN=999b5da747470f5a07c6538f4e97f5d15f509aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:c5:81:63:7b:16:d6:87:8a:ce:78:31:74:
7f:92:ab:65:64:20:8c:4d:f3:62:14:f2:72:9e:bf:
b8:d5:ff:32:18:7d:3a:a9:fc:1f:59:9b:ee:f9:fc:
b5:b4:8e:2a:36:a6:ac:f5:83:86:39:eb:16:d9:50:
b2:ba:db:9d:89:d6:68:8d:99:54:5e:30:23:c2:3b:
e8:55:e4:14:65:2d:93:df:b8:ef:df:fc:53:5a:08:
fd:c9:86:89:7d:59:db:eb:ea:91:35:21:de:ea:c8:
92:26:fd:ee:b6:43:ed:e1:f9:7b:af:b2:1d:e4:92:
2f:bc:55:22:ef:36:0d:ee:d8:87:f4:b0:1f:3b:07:
f4:dd:58:52:5d:c6:7e:d7:6f:2c:1f:c1:ee:f3:20:
e8:87:d4:70:74:a1:de:11:7b:c6:39:8d:85:19:83:
86:ec:db:a4:4d:25:56:db:87:17:00:76:9a:96:36:
30:3d:d2:86:92:6f:f1:8d:e0:83:1f:08:73:d3:d3:
99:0b:21:05:97:9c:0d:23:fc:3b:d3:b4:80:04:9f:
79:05:e7:85:f1:7b:a9:fb:f7:85:eb:d3:84:19:ae:
6c:43:78:a2:56:0e:17:33:3f:a5:ea:a8:ba:5d:df:
b3:48:ab:1a:ab:c8:66:e2:db:bb:39:82:6a:83:25:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:5D:A7:47:47:0F:5A:07:C6:53:8F:4E:97:F5:D1:5F:50:9A:AD
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:bc:3d:39:5e:11:f3:e4:71:fc:39:aa:a1:51:88:e3:a9:
28:96:85:60:16:78:97:ca:e9:3a:1b:64:1d:c8:27:83:e1:b0:
06:85:64:27:2f:de:08:e6:50:6e:7d:9c:96:49:a3:d2:67:82:
5c:a0:4a:3d:3d:6a:90:cd:ba:88:57:66:2e:00:bb:a9:cf:b0:
bd:5f:69:d8:60:ed:32:fe:cb:96:17:89:f0:87:08:2c:d9:bc:
6d:1e:59:03:fe:03:24:7a:e1:09:51:5a:c7:5d:1d:54:91:24:
30:78:56:c8:b6:28:28:b5:c3:54:a4:bd:28:c3:f3:2d:e1:3f:
26:dd:42:49:aa:03:44:60:2d:44:56:dd:c1:07:01:99:d4:db:
3e:ad:5d:78:d1:7e:2d:1f:be:4e:3e:d4:cc:ed:ee:5b:a4:5c:
00:18:81:32:6a:3c:b0:4f:0d:99:7b:b3:3c:b2:9a:45:69:9b:
61:6f:79:a6:d1:41:3d:b1:29:2e:d5:85:55:79:fd:9a:4a:5e:
df:55:06:b3:78:f4:4e:ae:1e:97:21:2f:5a:75:b0:8c:13:b6:
a0:3c:0d:96:08:78:d5:e9:28:37:52:4e:21:59:65:b5:f7:71:
39:04:9d:29:c7:86:f6:fb:90:3c:0c:a6:45:52:b5:cc:5c:8f:
c8:84:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:38 2026 by rpki-client