
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File: wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier: g/pp2YQQFAH20UbQZ7nfzLL8EAM13BJ86L8XrDW1eAg=
Subject key identifier: 7D:58:DF:DF:F1:3F:40:2A:F5:6D:BF:5D:DE:A3:3B:F1:9C:7E:9F:AF
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019FAABEAA5AD2488CDC5C3171F912842C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number: 19E7
Signing time: Tue 28 Jul 2026 22:00:49 +0000
Manifest this update: Tue 28 Jul 2026 22:00:49 +0000
Manifest next update: Wed 29 Jul 2026 22:00:49 +0000
Files and hashes: 1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
2: Jn0foO2nylOIzwPP_aMaHGiC2GY.roa (hash: ohSovumWWLhKdZhk5RrKtQ4CFLps70d/0Yn1l3fVxq8=)
3: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (hash: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=)
4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
6: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
8: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (hash: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=)
9: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
10: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: vc0zG8qIU1HVe+trr0QD6UTtwtUUIBPGSP+58+kp+6Y=)
11: zmJpm9WmGyRvXSMt6CINxsOgwiE.roa (hash: 5N09f+HIO/Y6TUFGQrbNgoW3eg7a5mLYm6RDVA10HEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:aa:5a:d2:48:8c:dc:5c:31:71:f9:12:84:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jul 28 22:00:49 2026 GMT
Not After : Jul 29 22:00:49 2026 GMT
Subject: CN=7d58dfdff13f402af56dbf5ddea33bf19c7e9faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:4b:5e:98:71:5f:81:ef:23:fa:21:d9:eb:
cb:0e:a3:a4:bf:bc:78:19:e0:5c:97:17:55:02:e7:
20:5c:16:8e:7c:f1:57:26:f3:2d:b0:f3:25:51:2d:
01:24:9b:65:f1:22:b4:37:8e:58:ac:9f:35:e1:c9:
f4:63:2d:ad:f8:c5:12:f9:ec:9a:0e:53:fd:64:f6:
23:c9:65:2c:00:f3:63:bb:6b:38:b9:90:7c:8c:f6:
46:4f:37:54:90:f1:15:4e:e6:67:4a:9b:ad:ad:36:
34:05:52:9f:9e:d7:42:16:af:32:d7:5e:30:cd:f2:
fc:f1:54:55:84:4a:24:f9:0d:2d:58:02:0a:10:44:
67:9c:0e:40:f1:fd:14:ee:b8:37:af:5e:28:62:78:
1b:0a:d9:7d:39:0b:f7:91:9d:7a:0b:ca:d4:fa:b4:
d5:54:a9:42:a6:25:e7:17:29:32:44:aa:70:95:17:
26:60:b5:27:23:f8:60:ac:de:dd:f0:93:65:03:29:
02:c3:6c:8b:7e:bc:c9:5c:20:9b:7f:9b:fd:c9:1e:
27:9c:a0:17:a5:b3:68:e3:b0:6f:bb:d6:20:9c:7c:
8b:d4:d2:59:bf:46:ab:9a:c5:08:f5:82:0d:91:f0:
5b:f9:e9:c7:a3:b0:16:cd:f5:ad:43:20:cc:e5:ec:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:DF:DF:F1:3F:40:2A:F5:6D:BF:5D:DE:A3:3B:F1:9C:7E:9F:AF
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a6:32:da:55:22:c7:ab:6c:35:3e:90:b3:69:a7:ba:59:1e:
46:88:b6:e8:e7:e0:92:62:99:0c:3e:77:15:e8:90:cc:e3:7c:
18:a1:8d:19:57:bf:62:10:b7:db:29:72:4e:e9:75:b5:cd:ae:
06:3e:87:44:8f:03:2d:d3:f7:19:58:90:1b:34:d2:c7:7d:81:
f2:49:16:ab:47:2b:b0:01:06:33:30:ab:b3:7c:95:a9:41:44:
61:fd:a7:4c:50:a0:e0:2d:38:d7:88:2e:96:c8:d4:ca:79:a0:
bf:d3:72:d1:32:a5:18:75:bd:e9:0d:9e:b0:2d:7d:1f:e6:db:
5e:87:1d:8f:e1:44:42:db:76:32:6c:70:b6:dd:0e:a3:c8:de:
e3:4b:d2:d5:86:48:c7:25:68:b3:d9:43:85:2e:f4:f4:c1:c4:
c3:06:d7:f0:88:53:d9:bf:3c:bc:f1:b6:9b:19:ff:c3:1f:d6:
ac:7f:6c:ba:7d:c6:23:72:99:3f:10:8a:04:c1:45:08:94:75:
4b:9d:cf:22:c1:55:e0:f0:9b:7a:4d:54:74:b2:b7:69:9c:bf:
ac:df:47:1f:5a:05:de:52:ed:bd:54:08:90:a3:b6:eb:b4:d5:
ec:8c:0c:88:2e:67:e1:0d:8d:81:a7:f2:c2:d0:c4:bc:94:a8:
ba:2a:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:09 2026 by rpki-client