
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: dCDF9TJUuzl7HVhXZEcGNROb+ShxL9VTT697nuwzdZs=
Subject key identifier: 15:31:68:D3:8E:71:1E:55:1B:A6:C3:DC:49:26:78:82:48:98:36:0B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019D97E197771C153166FAC0B8E7908A0229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0AB3
Signing time: Thu 16 Apr 2026 20:00:37 +0000
Manifest this update: Thu 16 Apr 2026 20:00:37 +0000
Manifest next update: Fri 17 Apr 2026 20:00:37 +0000
Files and hashes: 1: 3O7puYCGeaoochmZgK1F4Zova0c.roa (hash: 8cczSVzGE4DlrK+JwupGLwa2lh+V3J3LsQk0x1uHZOY=)
2: 5nkDYaL_N3XUm2b3-hRiMXFkDBw.roa (hash: 8ewPaOrQUblN5fck7HDwjkvw7tgSP4FE85e1TfIj58M=)
3: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
4: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
5: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
6: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
7: L-RSq6IUGYToiYDM4n67WQx8VOg.roa (hash: u8ekJ9cjVtYNkxSCsY2smL67ORogBBulUQlW9I6fLOk=)
8: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
9: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
10: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
11: P88LnN5x-3K_L5Fhq6iwwdNQg8E.roa (hash: 61YEGdCjCwNO9W5cpMFdELcW5q/oe/4xbaWjcimhT9U=)
12: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
13: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
14: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
15: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: cm1qf8g2ynu1MXmQLtuR9pyTItCDiTzMaA6xsWIL5qU=)
16: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
17: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
18: huzRRdVqCPg8Fnb-gO89NUhOd8s.roa (hash: kTmMBo7ynuyXV7K1e28S/Iv7hnEZXH2WxQ2xB2XUlxc=)
19: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
20: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
21: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
22: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
23: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
24: wxlYctZvX4QOXi5lbwNY--wlp4I.roa (hash: +oRo5rEHFhlE/qTZ+gRij39heJpaeFdmoaEB4dUhwaU=)
25: x9kqyHnmkJ25CQE1N5384OaUk1I.roa (hash: YL8POHupulVHn075fwE7OWeKnx0mBQBMzJcWNAFq2jE=)
26: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
27: yeaSVOY_2RKwqxHlxekdt46XnfA.roa (hash: IUmDaJ+QQrXKsNeMI6OsxvyPlW0V65tj0hhIVHsFQrs=)
28: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:97:77:1c:15:31:66:fa:c0:b8:e7:90:8a:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 16 20:00:37 2026 GMT
Not After : Apr 17 20:00:37 2026 GMT
Subject: CN=153168d38e711e551ba6c3dc492678824898360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fa:cf:7e:7f:bc:03:dc:df:b9:66:c8:29:83:
1f:ff:90:da:49:87:00:4b:a9:e1:fa:4c:e0:ae:fb:
d7:03:36:b5:1d:de:2c:3c:59:16:0a:06:94:fe:3e:
81:41:f6:71:f3:bc:8c:b8:92:cc:ea:81:a4:22:fa:
9e:94:6a:7e:4d:a2:f4:5e:b5:12:fe:b2:a2:14:5d:
49:f3:f3:75:72:2a:da:b6:79:4e:8e:a0:08:98:5a:
09:78:ed:dc:91:ed:10:21:0e:b5:85:0c:b5:4e:ae:
18:c9:aa:b1:48:20:00:a4:dc:03:c1:19:9e:31:97:
51:3e:3a:64:69:d5:c8:8d:a5:1c:ab:10:f3:22:a3:
0c:e8:5c:d1:7e:d3:83:0d:8e:0b:29:18:d2:39:27:
26:1e:1f:80:8f:c1:dd:a1:85:a1:2d:3e:2e:72:e6:
03:01:07:41:e8:08:86:a9:2c:f6:b3:8a:7d:8a:e7:
44:d7:11:91:23:29:8f:a1:4d:b2:f8:c8:c0:a0:1d:
4a:2e:6a:e7:e9:ba:c0:8f:32:8d:c5:b8:64:e5:b2:
99:f1:93:3c:cd:d6:49:d9:bd:38:d7:83:24:1b:1b:
ab:2a:ff:a4:68:fa:0f:1c:6d:30:35:db:c2:5e:01:
ef:b2:d8:93:dc:3c:59:49:eb:4b:3c:6d:50:2f:02:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:68:D3:8E:71:1E:55:1B:A6:C3:DC:49:26:78:82:48:98:36:0B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:7c:3b:28:e7:a6:44:36:d2:8d:fb:82:99:f4:d7:9a:9d:
5c:d1:fd:68:21:52:2c:ca:7a:58:9a:f8:a2:77:ff:c5:22:7f:
fe:54:71:39:0c:50:07:de:e4:4b:e6:67:b0:1e:0a:8f:30:bf:
f5:df:54:a3:9f:56:d6:ba:3c:2e:3d:a2:ad:3d:53:a6:12:c2:
3e:e3:19:f1:e9:96:75:1c:c0:eb:f1:d8:6c:67:2c:e2:89:15:
e3:de:ae:b8:1f:da:bc:d1:fb:ec:04:44:80:e3:e4:60:de:45:
66:9d:c8:d0:c5:a6:13:cc:d6:3e:b2:bc:b4:93:57:c3:2d:b6:
98:30:3b:35:f7:d4:ec:65:b1:72:80:a4:94:28:ac:c6:fc:41:
cd:18:f5:fd:a9:55:60:0c:63:ae:6d:b8:47:53:e5:d0:f1:e9:
87:1c:1c:60:18:bc:ef:88:ec:9f:e6:29:57:30:be:fb:e1:ca:
df:ff:db:f3:36:db:7f:aa:e0:56:fe:b4:75:35:20:78:32:b2:
1d:77:3d:8d:8a:01:42:29:06:eb:74:38:2d:08:99:a0:32:99:
3b:a8:9e:8b:84:ab:6a:54:f2:5e:70:da:48:b2:a2:e4:6a:29:
4f:5f:fc:60:d3:5b:1c:47:a3:3d:1a:b7:bf:5c:2c:02:c8:02:
76:59:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:41 2026 by rpki-client