
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: 6ehXlaooUaCICvuQ0wbyWdFoa4Mb+a2ViPKKssJpxLY=
Subject key identifier: 70:40:EE:65:98:E0:06:45:F9:37:EE:0A:DB:68:E2:31:3B:78:BA:05
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019D99626B335D14A7354310DB5B3B247F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 15F8
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: 23z008nTxhEnbOUkRpOsc3PMNQPM5MT5YKNavJiujmg=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6b:33:5d:14:a7:35:43:10:db:5b:3b:24:7f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=7040ee6598e00645f937ee0adb68e2313b78ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:9f:73:ab:76:a1:93:1e:fb:5c:b3:04:ea:
1a:63:f6:4e:39:80:df:06:b5:13:35:43:a0:48:ac:
72:91:ea:96:d8:ac:66:cb:5b:41:95:6a:ea:34:c1:
25:c1:c2:3c:51:a2:81:21:9d:6a:1a:9a:fb:fe:6e:
c0:15:4b:6a:53:b8:1d:52:d8:92:19:ae:f8:2f:15:
9c:19:1c:40:17:aa:ee:ed:ad:b4:53:d7:11:52:11:
34:0e:8a:ca:6f:b4:71:d9:03:a2:ae:ce:99:f9:03:
5e:b6:15:40:c7:fc:a8:33:20:67:82:4d:a3:14:7d:
01:9e:f8:6b:d9:cc:2a:57:e4:cb:72:38:94:2f:9f:
8d:5e:c8:ca:85:e8:06:ca:44:48:bd:05:b2:52:be:
a6:9b:57:84:d3:f5:af:33:32:25:9f:d4:49:76:e1:
83:dd:7e:83:cc:1f:1d:29:2d:f9:72:28:48:14:9c:
fe:e1:e0:62:bd:f4:3f:40:b6:16:dc:e4:63:ad:d5:
c2:2d:c1:f9:c3:f7:3e:5d:8c:54:31:4a:21:01:44:
79:43:d8:18:2b:ef:00:5b:d2:82:90:f6:65:3b:cd:
de:64:a6:5b:13:8b:36:b6:53:44:0a:28:80:6d:22:
9e:bc:97:ff:e6:40:18:58:71:39:bb:92:dd:ba:80:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:EE:65:98:E0:06:45:F9:37:EE:0A:DB:68:E2:31:3B:78:BA:05
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:b5:f5:16:7f:73:08:94:87:ac:b0:07:b8:3c:77:d0:1c:f3:
70:04:75:b8:f5:1c:e5:dd:65:1d:2d:af:02:32:f3:9a:95:5e:
a5:40:e5:dc:06:50:02:e1:db:f6:05:1b:99:82:17:b3:02:66:
f6:24:23:6d:ae:82:cf:63:d1:88:50:fe:2c:f2:3b:5a:f7:69:
e6:a2:82:42:c7:42:eb:7d:c4:2a:c5:78:7d:fc:66:a2:a9:87:
21:59:9e:f4:bb:fc:fc:b3:a9:0a:58:24:60:90:21:68:ef:5d:
e4:07:dd:84:78:eb:a6:4a:bc:0c:8f:dc:cd:74:ff:38:d5:47:
5a:cd:81:87:e3:23:42:72:38:41:27:74:aa:c5:b0:58:b8:10:
1b:c4:13:a7:90:ec:e1:84:75:f9:83:ac:76:98:f1:06:90:35:
8b:32:ef:b1:75:db:79:b7:4b:72:b4:fe:73:a3:29:db:ce:b6:
f0:e7:67:65:37:94:eb:78:c8:00:9e:c2:4a:16:a5:bf:40:38:
24:96:6e:87:4a:a6:88:35:8c:e5:04:6c:0f:bc:23:9b:32:07:
df:53:cd:bf:08:af:52:c0:27:29:0c:37:65:c6:47:41:94:02:
3d:6c:5e:60:7f:b6:01:bb:97:81:a9:ad:8d:cb:ad:d6:09:e5:
14:28:91:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmszXRSnNUMQ21s7JH+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjYwNDE3MDMwMDU3WhcNMjYwNDE4MDMwMDU3WjAzMTEwLwYDVQQD
Eyg3MDQwZWU2NTk4ZTAwNjQ1ZjkzN2VlMGFkYjY4ZTIzMTNiNzhiYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBifc6t2oZMe+1yzBOoaY/ZOOYDf
BrUTNUOgSKxykeqW2Kxmy1tBlWrqNMElwcI8UaKBIZ1qGpr7/m7AFUtqU7gdUtiS
Ga74LxWcGRxAF6ru7a20U9cRUhE0DorKb7Rx2QOirs6Z+QNethVAx/yoMyBngk2j
FH0Bnvhr2cwqV+TLcjiUL5+NXsjKhegGykRIvQWyUr6mm1eE0/WvMzIln9RJduGD
3X6DzB8dKS35cihIFJz+4eBivfQ/QLYW3ORjrdXCLcH5w/c+XYxUMUohAUR5Q9gY
K+8AW9KCkPZlO83eZKZbE4s2tlNECiiAbSKevJf/5kAYWHE5u5LduoDf3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBA7mWY4AZF+TfuCtto4jE7eLoFMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5bX1Fn9z
CJSHrLAHuDx30BzzcAR1uPUc5d1lHS2vAjLzmpVepUDl3AZQAuHb9gUbmYIXswJm
9iQjba6Cz2PRiFD+LPI7Wvdp5qKCQsdC633EKsV4ffxmoqmHIVme9Lv8/LOpClgk
YJAhaO9d5AfdhHjrpkq8DI/czXT/ONVHWs2Bh+MjQnI4QSd0qsWwWLgQG8QTp5Ds
4YR1+YOsdpjxBpA1izLvsXXbebdLcrT+c6Mp28628OdnZTeU63jIAJ7CShalv0A4
JJZuh0qmiDWM5QRsD7wjmzIH31PNvwivUsAnKQw3ZcZHQZQCPWxeYH+2AbuXgamt
jcut1gnlFCiRWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:50 2026 by rpki-client