
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File: Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier: KxcBrEQtaZ2x8emEz+BBja0sJNCnyctf3h6E/Kg8XLc=
Subject key identifier: 43:8F:DB:13:96:DF:4B:D2:D2:A6:0C:9F:6A:3A:25:6D:AA:E0:8A:F3
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 01A1DF834BD7937EDF59E547AD4660DFD2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number: 1B01
Signing time: Sun 15 Nov 2026 14:01:26 +0000
Manifest this update: Sun 15 Nov 2026 14:01:26 +0000
Manifest next update: Mon 16 Nov 2026 14:01:26 +0000
Files and hashes: 1: 1fCKtzPJ1_45f-LiWD3bxmByJVY.roa (hash: S5MFM5vElDoehjQ4z/xQ1lwyRX3CEWSME3qF1TOOSoM=)
2: 1lNJKR9iUF03AqUwYvGN1H-zICg.roa (hash: julCQgodaXBo2t/gasolmPBMIBIGzLIIQb6BvnJlHag=)
3: 1qW--QY8J1san0DCq3XFGd9u7ik.roa (hash: bJslM3RYasT/v3+ePs6DdTJE6TErE+KsU8otE8iOBSk=)
4: 8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa (hash: IPPB248lwbrp4GTrEGt/3IeWtg0h4LuOalLrUQZfNfw=)
5: 9fygxgPENVIvZQfoRPu5xWm5fP0.roa (hash: NERurGMvuWpT735e9RelslwR2hGh8/G3a9Go5nrjDxc=)
6: D0vBlaEi7A0rX8awdZxOMYCwSCs.roa (hash: qntk8plrSMnKOv10bs2fGlY/KSg3rGJtKokmVQuz1LQ=)
7: F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa (hash: QiyTfxENgQqPVV66UHt5INHcvss6VEj4aW8BtRGcZLY=)
8: F2IsQbg11ZmJTAfceLyJa_u04dg.roa (hash: yrXOIgV2Evo1BQL02zZOaj4XM50H8UtRL74oK0VXAus=)
9: GM-hF-feyLJqoIO_MV3n-jaEaWI.roa (hash: Sg9PfccYLEq5GpJah8X3K8/QZ1cbByPjRTf3MZDTFfQ=)
10: HH19122CelF2CYu9NGeiskT2zfQ.roa (hash: d36L3R0df2y04YpprZZx3+ZOSVeyL0BD9l+o3g16VZ8=)
11: IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa (hash: y3RTYueSvr/rBXupUy3jCI814s8gR2UAnVrdBOUjP48=)
12: J3f-oBarbdMFBw_Rea3on7AIvfk.roa (hash: lUbUL/5rB8/1hqYE2Zia9KQqNaYUxE2i7pUQtbuy0yA=)
13: JghQOiEDzpJycuTslNM8Zv_p_jY.roa (hash: LAxiB3cO1subHRNY8UjJnx3IdDCMN2IQ7MrqfJcC4T0=)
14: LsQpr4jR6UNzulN8mVl3gCD3vNw.roa (hash: n0eNLqhK8AP34V/cEhfJjvQ6T1kJKY04UuXwXq2zIAM=)
15: O8IeWVoWdsPGIKoKpygT-0Hdiis.roa (hash: rLYN8mRFFy4t/xSsv5WQega2gQ4e0wWE3nxgW/gKR7E=)
16: OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa (hash: FLFCrwPPJhuPUaS222PemjeBNo7gcU+ThIJnhpcn6UQ=)
17: PwBTang0Vc6dN8qNs-9O8VEBvo0.asa (hash: /Swb/ZVBIdPhTfwvFRJ5FEJJwAFcFsEFTN2ZDc1e37U=)
18: UBFnHJZftNQO1qu-E-ov5vmyXLU.roa (hash: YH8/i2G9ICy6W3gDNpFmS7iYXtvYsBQ0DJI48fY9bwA=)
19: WUXb-p2bwi8my27KJmefSQDxFng.roa (hash: +UWsoZIc3QFjDTn9cLGvdthjCv+sSjp1Ho47a8q1MC0=)
20: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: EziZeDXVgcbHM+OzSBWRjtK+seiVZ4odvbchOumqwHY=)
21: Yn7OpcD3YYXa2I2EfibH3mft1DE.asa (hash: d0Xil0JrX9lwB53ldfI5odzHhxqqm7pmCFmms1aHMas=)
22: _LXzoXP-0gRXE5Ciz-obdGZQXi8.roa (hash: Mr1ddYoxUqYSVNVomoM7yzaPVgUlQG4Fak/pkIn+dmA=)
23: aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa (hash: 0YZIWdy8DpDNfejP3xMH84ZapJPrw+ElY6c4boXnYjM=)
24: aLiuNkELPVWARkkxMSEamxhaRc0.roa (hash: 9F0uso8gwgNQ/yBBmLF3VUVgpVnvmoqrTbV8HOJEknk=)
25: dcwzVtxFMl-uycadjDp2YPHFIfY.roa (hash: ci5fz0WaMOXPmIodLOVUNbGP6z8z3MQcOEOaQoctOyY=)
26: g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa (hash: uqeYCAovLAjiwKwZva7wOJzBJ3ICRJEBjm9gy8NhZYc=)
27: jArwDQhgf-OQEPRcAKlO11cnSfU.roa (hash: V4+R7avAqMkdvxIuR210FAGJtjpBNoAuWb9jTKzrVeo=)
28: l9MFgJue1EzXCuODxtcBx9qlmeE.roa (hash: fuHWs+WUDTAY3xy40ymHyTUSZ7zMZKYvLtqA+opm1q8=)
29: mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa (hash: yOZN/l16jnDDJZqC6JGLhuV6WIELWRxBgaUyq9ISi7Q=)
30: n9HVc9jXy-5kSTXXda8Xr34gSvU.roa (hash: MqEDA2fkjY/ksPoKTLXf6vTXjBjZBwdFpg8kiND3eJ8=)
31: nscvIQ-HKyKd2314qNqqfxtlTZs.roa (hash: iY/bTniafSCv7m3teDVSPjjrFhE1uRc44nLZI9DFYqk=)
32: ue_Gh1l0t3knLCASFwUNeJAIkx0.roa (hash: 1pjYSr/W+zP5viSFVkMhp73vUcBE03OWMQPqP7OyN2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:4b:d7:93:7e:df:59:e5:47:ad:46:60:df:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Nov 15 14:01:26 2026 GMT
Not After : Nov 16 14:01:26 2026 GMT
Subject: CN=438fdb1396df4bd2d2a60c9f6a3a256daae08af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:69:27:78:d1:e5:ba:cf:e5:46:f6:e8:7c:
5c:8f:5b:78:6d:3a:cb:af:cc:46:41:71:03:92:97:
51:e6:dd:5c:9e:18:b7:31:ac:6b:5a:cd:d9:6f:9b:
94:bc:da:8d:1d:a2:0a:11:77:09:25:55:1c:9c:70:
fd:1a:9e:bf:0e:ac:72:0e:df:09:01:e3:9a:f1:b8:
04:03:96:84:77:d1:e3:bd:dd:3c:4a:9e:a2:8c:4e:
05:c6:00:24:70:a8:8b:36:27:cf:e4:e8:58:49:bb:
70:4f:83:b1:fc:a6:7e:f9:b3:8e:04:a8:9e:fe:34:
10:27:f7:fc:62:17:a4:de:43:be:ca:28:9b:d1:0e:
31:19:a0:b4:dc:41:7b:85:aa:36:04:d0:f4:76:9c:
cf:c9:ef:e8:53:81:86:ad:22:46:4d:c0:b8:ab:c4:
61:3a:04:99:bb:22:b5:a3:4c:b8:fe:a2:72:a8:5a:
ad:93:d2:87:a7:7a:a0:b7:9c:3d:9c:e6:86:54:94:
6e:cf:04:cd:aa:18:e0:bc:3b:ef:ac:40:91:ea:aa:
a2:b4:79:52:83:df:90:e9:fd:22:2f:eb:00:2d:7b:
32:aa:9c:9c:85:9b:00:44:45:bd:3d:7c:31:c1:0b:
03:3b:21:ea:64:a6:fc:6a:64:f7:33:06:ff:da:9b:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:DB:13:96:DF:4B:D2:D2:A6:0C:9F:6A:3A:25:6D:AA:E0:8A:F3
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:38:b0:58:84:00:7c:0e:88:aa:03:6f:5a:99:39:a8:2e:
3a:1c:45:9b:81:2b:2e:cd:1a:c7:d7:b7:06:bd:78:6a:87:0c:
90:e6:c6:ad:1a:fe:03:db:35:ad:13:55:38:73:2a:a2:be:29:
5e:88:a9:ce:6b:4c:8e:0b:e5:c2:f3:1d:2c:c0:69:e4:41:84:
55:48:1a:61:21:72:0c:8b:28:0e:4d:3e:cb:37:98:75:54:de:
ed:a0:6a:1c:bb:ee:81:ad:0a:5b:49:4f:e6:7f:dc:8d:64:d4:
4c:79:66:06:1b:a6:f2:c5:fa:37:63:52:0c:07:c3:dc:d9:27:
0b:a3:36:a6:78:b3:9c:b2:74:07:ae:50:71:29:52:30:34:81:
57:1d:b1:20:ef:be:c8:f9:ef:da:03:ff:6f:f6:4a:4d:91:c8:
20:75:80:cd:53:64:4e:0a:0f:75:f8:d9:b1:fd:b1:fa:59:46:
ae:0b:37:11:1e:90:2a:06:36:a9:20:55:e5:1b:d5:1c:e6:90:
95:84:64:2d:74:31:70:2f:7b:9a:3c:40:b5:83:4b:10:1c:79:
07:7f:a8:37:44:a1:92:1c:a3:ed:bc:40:15:41:90:15:14:18:
81:09:87:0e:2b:4d:c0:9f:2a:67:eb:f7:9a:77:54:36:13:b4:
a1:42:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:57 2026 by rpki-client