
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: KRX404e87/F1kTuFSz6zqx1PvWNb9hgjo2TlmpWr868=
Subject key identifier: 6B:BF:3B:7E:8E:45:DF:B8:F0:0D:0B:D2:9B:4D:BE:86:EA:9E:5C:8F
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0C331FFAEEBE9643E0E6DCCCE37FB5AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0C7B
Signing time: Mon 21 Sep 2026 09:00:28 +0000
Manifest this update: Mon 21 Sep 2026 09:00:28 +0000
Manifest next update: Tue 22 Sep 2026 09:00:28 +0000
Files and hashes: 1: 1-iWOVrefjs9HBIASRdjsq7CSI7Q.roa (hash: m7ouBQ2qviW5hyE9F7O8F0y6LhZUjUrkwEJiugNgPHU=)
2: 8GcZVYe92v13intCg5ID91bOLno.roa (hash: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=)
3: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
4: 90fbs6INI7k6L2dcFgAyFPdas3Q.roa (hash: aMrXwblbKo0nbHJFMktLKEieI5pQLYv3eyj9v/R4Das=)
5: J3R2IeAW_m0d02uAQasK7sttZCQ.roa (hash: 20fGt425z6WH78gh3mBbdekTdMzKNuIzu/Znp+h8cBU=)
6: RjlJyxrYJIpppY-il0IsnWaY1Yk.roa (hash: +L3StqZUGVJBR17tezGmEcfXdni/G3W+qWpSte6mPqk=)
7: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
8: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (hash: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=)
9: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: umbkHkFT1CIkuz1TOQzFcwE7UsZR53oB0IljZHmhGPs=)
11: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
12: iCvG4p2QaTydD8b84J_nnzVlKvI.roa (hash: xqa+whns2NrmkgIeSClWzUrNsZIzDnw7vlvDjgURIVc=)
13: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
14: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
15: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
16: o9LeVuyG4zwZfl9X19i5EI5YY1w.roa (hash: IhxdWhfxb6x1vtP/bQGfsWt6Bv7vG9Bd56mOjcaVmC0=)
17: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
18: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (hash: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=)
19: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (hash: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=)
20: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (hash: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=)
21: tgSRqnQnZUD0Fu4ANbQFDigMoEo.roa (hash: NZR02viri4xDg6oLTnJWANSbonEFpMqlapgOxg1s9+0=)
22: vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa (hash: JULRiIFQZ+iF95rVirRL+zxVbr6tTkj3Gel2uhllVeU=)
23: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:ff:ae:eb:e9:64:3e:0e:6d:cc:ce:37:fb:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 21 09:00:28 2026 GMT
Not After : Sep 22 09:00:28 2026 GMT
Subject: CN=6bbf3b7e8e45dfb8f00d0bd29b4dbe86ea9e5c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:09:dc:3d:7f:2b:57:be:15:f7:c4:1f:f3:
eb:ab:f5:81:02:52:92:03:20:d6:e6:ee:d1:09:28:
b4:b1:1b:2b:85:87:7d:1e:98:11:ae:66:19:ee:35:
ad:27:35:c2:73:fb:f4:58:32:83:9e:e4:88:c6:cd:
cb:10:41:eb:7e:a1:11:6c:62:39:e6:a4:7d:f5:3c:
90:6f:42:40:89:70:88:61:d0:e7:f9:80:31:f9:72:
28:67:a5:49:dd:1c:9f:3f:24:38:1d:5a:c6:21:56:
87:35:87:c5:97:ba:48:ce:d4:76:52:0f:6b:a8:b6:
97:41:61:06:51:7e:bc:ba:c7:9f:de:21:1c:20:32:
ea:ce:4c:1c:f2:1d:57:71:93:8e:71:e6:22:5a:93:
06:db:86:d0:2f:f7:15:1b:3f:cb:06:e7:08:27:67:
39:b2:34:4d:ba:38:63:b1:33:e5:ec:0e:ac:03:e1:
27:ec:07:04:1f:54:d9:00:c4:16:0e:13:27:40:41:
9c:da:33:53:2f:65:aa:03:d5:02:f8:7a:f1:38:42:
8e:40:b4:79:e2:b0:0f:d3:c7:7b:d4:fd:2e:f9:20:
86:52:62:46:67:da:f0:fd:ca:a2:fc:47:af:27:83:
87:72:16:54:7b:98:0d:40:ed:c5:f7:aa:ee:29:3d:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:3B:7E:8E:45:DF:B8:F0:0D:0B:D2:9B:4D:BE:86:EA:9E:5C:8F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:26:84:7d:f2:18:a0:e0:ee:ce:35:77:37:b9:5c:5f:d2:
ca:f7:c0:91:a8:65:2b:8c:e7:de:33:60:83:0b:f7:5b:90:a9:
79:c8:12:3b:bd:62:e1:24:5d:6c:76:02:08:b7:88:50:e6:35:
9c:85:ca:8d:12:20:9c:e3:f5:1d:70:95:e9:91:db:b9:93:44:
c7:da:66:ca:b8:38:6a:5d:2d:83:5a:63:2e:70:c1:00:22:6a:
4e:22:b2:cb:35:4c:ef:f3:00:70:3a:0d:f7:9b:8b:66:f1:ff:
ef:20:56:99:7d:53:69:b2:33:48:ef:ef:aa:ef:69:12:cc:6a:
fd:bb:fc:cc:b2:07:ee:f8:56:fa:db:bf:0e:21:6b:11:f6:c2:
74:83:0e:9d:cc:1a:17:69:05:45:8f:d0:95:99:0b:88:17:5a:
80:ca:4f:8e:e1:f9:3f:b2:41:75:15:7a:c4:08:31:21:7c:53:
71:f9:65:11:93:de:ba:e9:d0:98:fe:8e:32:b0:9b:aa:7a:c3:
19:65:16:a6:fb:05:7d:6c:89:a3:41:d2:67:b6:0f:62:7f:fb:
7a:d0:06:2f:23:8d:e0:25:95:80:77:1b:5f:7f:17:d9:78:39:
e0:20:ed:53:6e:95:80:7d:2b:d0:3e:ce:a3:6b:87:12:ba:c3:
4f:c7:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:12 2026 by rpki-client