
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: SqJCjTZXceiOgZcSMANnnyr7fZe1GrJqzUQ/ykmH0ao=
Subject key identifier: 73:DE:2A:FA:C7:B7:CF:04:96:86:9D:ED:2C:BE:2A:EF:A4:12:BE:5C
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01A0C47B7F4C04BE15B96684664F5016BE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 179C
Signing time: Mon 21 Sep 2026 15:00:22 +0000
Manifest this update: Mon 21 Sep 2026 15:00:22 +0000
Manifest next update: Tue 22 Sep 2026 15:00:22 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: KCuqaJc0EVXv8gsSlKmf2+ascAEMtUUZD9A5ljl2djg=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:7f:4c:04:be:15:b9:66:84:66:4f:50:16:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Sep 21 15:00:22 2026 GMT
Not After : Sep 22 15:00:22 2026 GMT
Subject: CN=73de2afac7b7cf0496869ded2cbe2aefa412be5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:5c:2c:be:27:88:ee:dc:c8:7c:9f:8c:b4:
73:80:32:06:d3:01:5f:87:76:84:09:95:89:87:65:
ba:30:1c:5c:91:c9:ad:14:99:f8:da:06:29:16:ed:
d1:c9:e7:16:8e:07:a5:7a:a5:19:d2:ba:9e:4d:0b:
e4:ea:6b:4b:66:64:12:8d:6b:84:c2:f3:b5:4c:7b:
59:98:46:f2:f7:6a:8f:a5:9a:92:e5:20:01:67:09:
37:08:54:5a:ca:aa:98:71:35:d3:42:f9:0f:6f:a7:
b1:c4:55:75:e4:67:64:9f:a7:b2:99:e5:f8:5f:f2:
75:c5:13:5f:6c:9e:c2:e8:15:74:72:5e:e2:c9:6a:
9d:a9:8b:ed:5b:8b:41:81:99:c1:06:91:9f:81:e6:
51:8e:fd:58:41:47:4b:89:31:41:53:ad:91:10:f9:
f6:39:c8:9d:7c:06:ce:2c:1f:ea:68:4e:3f:4f:21:
37:7c:60:2c:6d:51:8f:21:61:74:43:01:8b:f8:d9:
8c:45:a1:b6:35:81:b5:52:3e:79:a3:40:7e:be:13:
54:6b:a8:07:c5:56:51:d4:da:61:b2:7d:d2:28:a8:
7c:39:6a:af:03:70:fa:e1:81:5f:09:30:b9:71:00:
31:80:21:90:06:f4:b1:a9:5f:b2:81:5f:6c:29:2d:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:2A:FA:C7:B7:CF:04:96:86:9D:ED:2C:BE:2A:EF:A4:12:BE:5C
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:35:03:73:84:90:18:38:ce:b5:02:56:73:f9:e8:ec:e3:
99:21:8e:74:d7:f1:92:10:c4:79:1b:1c:a0:23:17:9b:bb:f5:
e9:c9:8e:16:02:7d:60:07:d1:38:fd:60:f6:ee:1c:21:15:01:
fd:ce:a6:54:a0:8a:8a:36:71:71:57:4b:4a:3c:9f:73:6d:d3:
ac:d3:66:73:70:b1:14:44:a4:0b:b6:5e:25:25:94:02:bb:93:
b1:55:a1:c4:ff:5e:6f:65:ba:a2:48:80:95:9c:cf:b8:96:76:
96:de:2f:62:59:f6:91:3c:bc:6b:95:59:8f:7b:c7:b3:70:24:
f6:7f:37:bb:34:85:5d:8c:c5:61:43:4c:c9:04:ab:ff:0f:e4:
34:52:29:89:73:4a:b4:8a:44:a6:8f:b0:ed:d4:f2:1a:5a:39:
e3:6b:51:09:3d:95:e5:59:7f:52:f8:97:46:cb:a9:ea:40:f9:
76:81:04:bf:ab:02:a1:6c:35:25:6e:9f:8d:01:0a:65:9c:41:
d1:bf:2e:f7:66:0d:a5:c3:56:8f:34:7b:df:e1:15:37:40:fd:
31:b1:c6:a1:4e:bf:2b:c6:cf:e4:51:bf:1f:40:0e:6a:33:62:
84:1d:af:c5:e4:21:0c:c8:b6:d1:e8:e1:c5:af:86:18:d4:69:
74:e2:5e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe39MBL4VuWaEZk9QFr6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjYwOTIxMTUwMDIyWhcNMjYwOTIyMTUwMDIyWjAzMTEwLwYDVQQD
Eyg3M2RlMmFmYWM3YjdjZjA0OTY4NjlkZWQyY2JlMmFlZmE0MTJiZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy5cLL4niO7cyHyfjLRzgDIG0wFf
h3aECZWJh2W6MBxckcmtFJn42gYpFu3RyecWjgeleqUZ0rqeTQvk6mtLZmQSjWuE
wvO1THtZmEby92qPpZqS5SABZwk3CFRayqqYcTXTQvkPb6exxFV15Gdkn6eymeX4
X/J1xRNfbJ7C6BV0cl7iyWqdqYvtW4tBgZnBBpGfgeZRjv1YQUdLiTFBU62REPn2
OcidfAbOLB/qaE4/TyE3fGAsbVGPIWF0QwGL+NmMRaG2NYG1Uj55o0B+vhNUa6gH
xVZR1Nphsn3SKKh8OWqvA3D64YFfCTC5cQAxgCGQBvSxqV+ygV9sKS1OmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPeKvrHt88Eload7Sy+Ku+kEr5cMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdo1A3OE
kBg4zrUCVnP56OzjmSGOdNfxkhDEeRscoCMXm7v16cmOFgJ9YAfROP1g9u4cIRUB
/c6mVKCKijZxcVdLSjyfc23TrNNmc3CxFESkC7ZeJSWUAruTsVWhxP9eb2W6okiA
lZzPuJZ2lt4vYln2kTy8a5VZj3vHs3Ak9n83uzSFXYzFYUNMyQSr/w/kNFIpiXNK
tIpEpo+w7dTyGlo542tRCT2V5Vl/UviXRsup6kD5doEEv6sCoWw1JW6fjQEKZZxB
0b8u92YNpcNWjzR73+EVN0D9MbHGoU6/K8bP5FG/H0AOajNihB2vxeQhDMi20ejh
xa+GGNRpdOJeaA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:23 2026 by rpki-client