
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: 3wUp7HAdwPI71huS3YO+yFFThihKTnbxnXE2SFtAZt0=
Subject key identifier: 0C:2F:8F:25:7F:45:1C:98:D0:00:07:85:73:63:60:4B:15:19:D3:E3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019CA94609E1036DD8D75D5248C13965BA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0A2E
Signing time: Sun 01 Mar 2026 12:01:05 +0000
Manifest this update: Sun 01 Mar 2026 12:01:05 +0000
Manifest next update: Mon 02 Mar 2026 12:01:05 +0000
Files and hashes: 1: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
2: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
3: Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa (hash: RlGj782fpYNYniyqNH2FaqPK+IsY/g2PSUKbR69pmh4=)
4: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
5: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
6: FysDKPC-wZQOa869m-5wi9IwYao.roa (hash: y1tXX9hX55Ne44LmOYPZ6N2LhWpKhLJJJ0cf+Tumuf8=)
7: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
8: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
9: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
10: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
11: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
12: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: A6T4jr87vWSpBH7eXpa5WaWtfbcncAtnIGJ8QmreMzE=)
13: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
14: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
15: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
16: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
17: kNJxXBNWZCsGGr2n--zdldpXgt8.roa (hash: UO0nCqFCkSGk2+PoNEi2oakJxAwljiwxkwlJ6FkJGMk=)
18: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
19: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
20: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
21: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:09:e1:03:6d:d8:d7:5d:52:48:c1:39:65:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 1 12:01:05 2026 GMT
Not After : Mar 2 12:01:05 2026 GMT
Subject: CN=0c2f8f257f451c98d00007857363604b1519d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:46:70:10:2e:fb:3b:a7:86:29:9a:b6:f7:
38:79:e8:6d:69:5f:04:8f:f5:1e:72:d9:fc:ab:11:
8e:3a:96:f4:ef:24:4f:1d:b6:ff:cf:7b:c9:ad:3f:
ff:ff:3e:a3:51:28:e0:ab:d5:73:85:78:b1:5b:c1:
4f:52:de:29:42:56:fd:5c:75:57:5a:7a:04:02:02:
32:d9:29:b3:68:7f:4f:ab:05:c1:53:66:dd:f1:12:
8d:66:79:99:7e:06:2c:d9:0d:0e:45:a7:a5:20:00:
90:22:88:6e:a3:41:c8:04:df:d0:64:f5:47:dd:38:
03:7d:65:c4:ae:b6:5b:51:d4:19:33:c4:de:6c:64:
bc:b6:dc:b7:53:3e:e7:8e:25:46:1b:1f:fc:07:1d:
10:60:3a:68:69:2e:64:d7:33:c2:7c:6a:6e:5e:ec:
82:d6:81:ff:84:c3:49:54:2d:d3:c6:12:6d:90:67:
e3:8a:06:67:71:08:8d:cc:49:3b:db:06:8f:41:4c:
38:3b:64:da:e5:7e:26:b8:5e:66:d5:f4:a4:71:f1:
c1:b9:ab:d3:4e:be:37:42:54:2f:29:5a:09:58:24:
0c:e7:63:e7:d5:29:06:f4:00:d7:0c:ae:ed:c4:51:
dd:8c:61:e0:23:8f:5e:ce:b1:9b:22:cb:7e:c5:fa:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:8F:25:7F:45:1C:98:D0:00:07:85:73:63:60:4B:15:19:D3:E3
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:ce:65:83:cb:90:b5:8c:67:f0:26:26:41:30:7c:c6:bb:
f6:9a:a8:06:c1:48:71:57:c0:98:56:f3:3c:cc:d5:ec:09:78:
4e:ca:0d:65:18:50:6f:1a:1d:27:86:f0:8f:49:cf:4e:63:c0:
cf:50:a9:21:ea:d4:17:6c:b1:57:b5:f3:5b:81:d7:ff:4c:46:
17:6a:5c:1d:09:ec:43:dc:c5:16:59:56:a9:6d:81:9e:07:09:
41:aa:9c:59:9e:99:52:ed:71:5b:e4:7c:be:e4:68:21:03:0e:
17:f0:69:db:ca:fb:f0:35:5e:5d:b1:51:bb:9b:71:4c:a2:04:
c7:5c:8f:80:4c:5e:1f:97:45:0a:c7:5e:fa:5f:d9:a2:62:fe:
e6:65:be:a1:69:61:f2:ff:68:00:d8:66:fe:04:3f:7e:4f:97:
85:dd:fb:98:51:bb:10:00:08:8b:4c:00:47:29:c3:89:72:5c:
f6:22:d9:38:8c:ae:13:75:d1:0a:b4:f4:c5:2f:ce:8f:7a:0a:
fc:54:8d:f9:8f:1d:3c:5e:96:cc:55:a1:79:88:24:97:87:87:
2a:94:15:b8:11:cd:0c:7c:b3:27:61:7c:23:b7:34:f5:17:c8:
db:b4:00:51:41:b1:68:c9:4e:f4:66:6b:79:fe:e5:f9:58:2c:
c9:3d:51:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRgnhA23Y111SSME5ZboUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwMzAxMTIwMTA1WhcNMjYwMzAyMTIwMTA1WjAzMTEwLwYDVQQD
EygwYzJmOGYyNTdmNDUxYzk4ZDAwMDA3ODU3MzYzNjA0YjE1MTlkM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hVGcBAu+zunhimatvc4eehtaV8E
j/Uectn8qxGOOpb07yRPHbb/z3vJrT///z6jUSjgq9VzhXixW8FPUt4pQlb9XHVX
WnoEAgIy2SmzaH9PqwXBU2bd8RKNZnmZfgYs2Q0ORaelIACQIohuo0HIBN/QZPVH
3TgDfWXErrZbUdQZM8TebGS8tty3Uz7njiVGGx/8Bx0QYDpoaS5k1zPCfGpuXuyC
1oH/hMNJVC3TxhJtkGfjigZncQiNzEk72waPQUw4O2Ta5X4muF5m1fSkcfHBuavT
Tr43QlQvKVoJWCQM52Pn1SkG9ADXDK7txFHdjGHgI49ezrGbIst+xfqRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwvjyV/RRyY0AAHhXNjYEsVGdPjMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJrOZYPL
kLWMZ/AmJkEwfMa79pqoBsFIcVfAmFbzPMzV7Al4TsoNZRhQbxodJ4bwj0nPTmPA
z1CpIerUF2yxV7XzW4HX/0xGF2pcHQnsQ9zFFllWqW2BngcJQaqcWZ6ZUu1xW+R8
vuRoIQMOF/Bp28r78DVeXbFRu5txTKIEx1yPgExeH5dFCsde+l/ZomL+5mW+oWlh
8v9oANhm/gQ/fk+Xhd37mFG7EAAIi0wARynDiXJc9iLZOIyuE3XRCrT0xS/Oj3oK
/FSN+Y8dPF6WzFWheYgkl4eHKpQVuBHNDHyzJ2F8I7c09RfI27QAUUGxaMlO9GZr
ef7l+VgsyT1RSg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:30 2026 by rpki-client