
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: KleMGpNUbohlXW/CCyR6KtWrmQyr3fBVg2BsfXJUZZM=
Subject key identifier: B5:5A:84:8B:29:E0:29:1A:18:57:98:83:02:1A:E7:CF:E2:4D:A7:38
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019DA453D43C066ECA8B1154187D5D650B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 190E
Signing time: Sun 19 Apr 2026 06:00:50 +0000
Manifest this update: Sun 19 Apr 2026 06:00:50 +0000
Manifest next update: Mon 20 Apr 2026 06:00:50 +0000
Files and hashes: 1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=)
2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=)
3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=)
5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: 2n226yzL5IyPa2tIotdFctztGSibgN3E9osPlrP5bq0=)
8: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
9: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=)
10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:d4:3c:06:6e:ca:8b:11:54:18:7d:5d:65:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Apr 19 06:00:50 2026 GMT
Not After : Apr 20 06:00:50 2026 GMT
Subject: CN=b55a848b29e0291a18579883021ae7cfe24da738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:bd:68:8b:e1:5b:12:45:5e:98:41:b0:bf:61:
a5:7c:09:52:9d:8e:0c:66:b8:c9:c7:15:2b:f2:e8:
e4:27:50:34:e3:97:8d:a2:56:45:37:96:f6:6b:33:
f7:83:f6:c3:eb:4b:34:b7:e9:3b:69:93:ab:2d:6e:
76:de:fc:a8:a4:11:c9:e0:dd:1d:37:c9:45:4c:89:
e3:ca:48:c6:76:f6:c4:71:4c:e6:b6:2d:e5:60:78:
0c:3c:2d:54:78:a2:27:d9:2c:ee:f1:01:d1:55:c2:
d1:75:e3:72:db:4d:c3:90:62:0f:51:95:10:56:f8:
07:50:74:22:08:3a:81:2b:e7:77:4d:62:1b:0d:3c:
4c:b5:07:de:2a:ee:fd:56:55:3b:3b:35:c1:06:5f:
1b:13:a1:93:01:63:50:eb:a1:87:8f:c3:eb:a8:1c:
09:78:01:15:d8:42:3e:de:13:aa:a0:5d:68:36:36:
8a:5a:b2:6a:6f:d1:d0:b0:4a:4d:95:c2:8a:db:3f:
9c:18:1e:4f:b8:f8:c0:eb:3c:18:f2:e8:20:8a:29:
65:ae:34:15:6a:65:b4:c7:81:99:cd:40:1b:68:06:
81:18:58:10:fc:ea:80:5e:70:e8:a4:7f:e7:21:95:
a1:08:da:5c:7d:52:50:1d:ee:e8:c2:d3:7a:59:1e:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:84:8B:29:E0:29:1A:18:57:98:83:02:1A:E7:CF:E2:4D:A7:38
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:94:95:98:8f:e1:7b:c3:41:6e:b6:72:ad:24:d2:f9:36:7a:
5b:2a:ae:91:e0:5c:4a:12:1f:2a:09:df:91:80:ce:51:f1:af:
36:30:a3:2f:e6:24:be:a5:a7:bb:85:9c:9e:23:bc:69:fc:df:
23:d4:94:63:6d:75:4d:ea:e7:0a:42:4b:e3:47:c6:b9:4a:d9:
28:f6:ba:dc:7b:23:81:03:18:15:b7:2c:44:95:e9:93:43:46:
f6:18:3e:8b:5a:ea:a5:a0:67:19:59:de:ac:63:18:72:d6:00:
a9:f6:1b:61:d9:ff:d1:d7:b9:ea:fa:5f:15:30:b3:28:51:99:
d3:3f:c0:b4:ca:e0:30:59:08:d1:c5:a4:52:89:e2:9d:83:19:
2e:e9:0b:c3:e3:c7:97:51:ea:f4:16:1b:a0:ac:56:ac:5b:7f:
98:19:2e:19:8d:e9:77:78:94:c1:b1:ed:ed:33:6f:58:3f:98:
d5:4d:c2:5e:cb:eb:bf:0f:38:3a:3e:d6:2f:d7:c6:3f:f2:39:
ac:34:10:d1:64:2e:91:ba:fd:f8:0c:3d:70:e3:de:4b:b2:14:
25:61:51:ee:2c:2c:f4:73:af:ff:e0:84:2d:d5:20:6a:f2:80:
9d:00:c9:97:33:d6:81:a2:49:01:cf:47:51:9e:54:6c:17:71:
4b:3f:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:08 2026 by rpki-client