
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json)
Hash identifier: xsMP8ZpEqYJgAWIS/I4604ug8QltCLZP5gc3YVn/8MY=
Subject key identifier: E3:88:A6:F5:99:12:47:D1:9E:83:C6:4F:E7:83:78:4E:EA:9D:92:34
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019F1943A7F52E56CE1AB705F4993BA402B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
Manifest number: 16B3
Signing time: Tue 30 Jun 2026 16:01:32 +0000
Manifest this update: Tue 30 Jun 2026 16:01:32 +0000
Manifest next update: Wed 01 Jul 2026 16:01:32 +0000
Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=)
2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=)
3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=)
4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=)
5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=)
6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=)
7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=)
8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=)
9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=)
10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=)
11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: q3NDsXryjDNMEVXqkhP6AP3UZ6iBEXRTS+SD6O4c8QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:a7:f5:2e:56:ce:1a:b7:05:f4:99:3b:a4:02:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jun 30 16:01:32 2026 GMT
Not After : Jul 1 16:01:32 2026 GMT
Subject: CN=e388a6f5991247d19e83c64fe783784eea9d9234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:75:0d:af:9d:94:a9:4b:e0:ec:4b:0b:41:
6a:04:1d:06:3f:f4:3b:8c:38:09:81:c5:03:12:9a:
64:ed:a4:2f:67:7a:ba:85:c7:a5:6f:b1:62:b5:98:
39:9b:88:aa:8a:69:69:41:4c:ef:11:a1:07:e4:a9:
b8:db:ef:8d:1d:69:74:e4:dd:13:dc:37:15:10:86:
ee:c7:46:dd:66:d7:41:ed:10:42:82:c8:82:0e:fd:
47:5c:ea:33:0e:de:da:58:5c:0f:c4:c9:43:b8:77:
1c:3e:99:fd:42:b4:3c:4f:85:32:b7:89:3d:08:6c:
5f:32:5d:9b:a2:2b:c2:97:e9:38:99:bb:49:f8:d0:
58:ec:91:20:18:12:8d:35:85:3c:63:2e:b5:bc:f0:
1c:f2:ed:31:62:85:6c:67:16:88:46:3a:6b:41:24:
b1:05:be:8b:45:8c:65:1d:97:81:d1:a5:62:ac:24:
c5:2b:26:16:da:de:20:b3:4a:b1:2a:f5:81:49:70:
d0:82:a1:97:ee:6e:95:95:c5:68:bd:e4:77:65:be:
df:65:bb:a0:2a:98:c0:42:40:fa:c8:27:f7:40:0a:
74:86:01:51:a5:c2:88:aa:f5:92:45:30:76:05:66:
33:9a:58:eb:e8:ba:93:85:54:4f:e0:51:36:8d:0e:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:A6:F5:99:12:47:D1:9E:83:C6:4F:E7:83:78:4E:EA:9D:92:34
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:e1:f3:f7:c7:de:95:e0:40:79:36:69:db:08:dd:ec:4e:
a1:49:f8:b5:40:17:f2:e5:69:cb:44:a1:d8:f3:4d:0d:8d:2e:
0f:00:ab:f7:f2:10:2f:a1:72:eb:69:88:40:8e:01:59:98:a4:
d5:2c:35:84:94:8f:3e:a9:a6:c7:f6:a8:61:01:76:e6:e2:fd:
92:6b:e1:5f:06:cb:fa:02:00:c0:78:93:4a:4f:5c:13:c6:9c:
e0:be:9f:76:a3:ca:4d:6a:d5:b5:c0:78:88:78:4d:54:37:2b:
b5:07:81:b7:f7:d6:dd:6a:ce:49:4c:69:6e:92:41:94:94:6a:
87:6a:ce:08:ef:da:45:ab:56:41:82:8c:f3:97:08:71:26:b0:
62:6c:73:e1:4f:83:cb:59:ce:34:7c:8c:84:89:c4:0d:e9:31:
de:49:97:27:f6:71:8c:e2:ac:2f:4c:a1:cb:2e:f1:58:e8:6a:
9a:41:3a:c7:e2:db:41:3e:7d:ab:41:6d:67:6f:ab:0f:c8:99:
b1:b2:cb:eb:ea:9f:be:a8:d7:e5:2b:79:72:52:e7:55:e6:8e:
97:b3:be:56:00:f7:dc:cd:fc:e1:06:ac:d5:b9:28:95:52:3f:
09:bb:3f:a9:c3:88:2c:75:89:00:fd:e2:9f:98:49:14:3c:b7:
13:65:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:53 2026 by rpki-client