
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier: 6vXdxntUFBoMNAYXyms1FVDG6P+9rar32i1VzpA8TSs=
Subject key identifier: D5:8E:7D:31:2F:BD:65:34:F8:91:65:F7:C0:39:B8:65:41:DB:CA:10
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019EB9C5EAF4B32812EFE0643757E07611B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number: 18C2
Signing time: Fri 12 Jun 2026 03:00:16 +0000
Manifest this update: Fri 12 Jun 2026 03:00:16 +0000
Manifest next update: Sat 13 Jun 2026 03:00:16 +0000
Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=)
2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=)
3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=)
4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=)
5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: XocWIEoU00gGMOt6XMKOVZ+CgIdVG4Rhmi0vxU6jow4=)
6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=)
7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=)
8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=)
9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=)
10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=)
11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:ea:f4:b3:28:12:ef:e0:64:37:57:e0:76:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jun 12 03:00:16 2026 GMT
Not After : Jun 13 03:00:16 2026 GMT
Subject: CN=d58e7d312fbd6534f89165f7c039b86541dbca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:b4:05:e7:0e:4b:0a:2a:3e:3c:62:cc:14:
bb:39:22:c8:19:e6:c3:16:84:77:59:19:09:3f:ff:
f5:0b:8a:a3:af:b4:6d:f0:cc:8b:3a:e0:d7:6a:b8:
15:c8:34:94:7b:36:4f:b9:db:fb:bb:f3:dd:76:87:
f0:a5:d4:3e:87:b4:b5:1f:75:3b:26:a3:24:31:8d:
b3:27:d4:e4:d7:c5:a0:5e:41:80:c2:a4:b1:22:a4:
8f:1d:7f:1a:7e:aa:91:ee:c1:61:55:c7:87:93:0e:
13:65:44:78:42:a5:cc:c6:ae:9d:fb:29:dc:ac:b8:
8e:0e:57:57:74:2a:38:01:b2:97:d0:e4:87:ce:03:
5d:09:e0:1e:ee:04:90:5c:8c:59:06:24:f2:16:ae:
71:07:1a:b2:67:22:46:80:f4:f6:84:7e:76:fa:18:
33:39:3c:56:44:81:c0:dd:b2:2a:53:cb:25:a0:16:
05:27:b6:ce:61:a3:8e:ec:59:07:67:d3:0c:fc:12:
fc:c9:83:fe:e9:56:e6:f9:f4:c2:94:3f:2c:57:80:
21:fd:b7:ee:fe:85:97:3b:da:91:96:e8:b0:41:bc:
e2:01:2e:5d:e0:6a:11:d4:4c:d0:cb:47:78:25:ec:
8b:b7:a4:9a:3e:e5:d7:2a:f0:33:61:77:95:17:27:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:7D:31:2F:BD:65:34:F8:91:65:F7:C0:39:B8:65:41:DB:CA:10
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a9:98:bd:bb:d0:f5:ed:d8:d2:9f:cc:8d:e3:c1:38:0e:48:
e8:e3:37:75:78:d3:42:03:07:f6:e3:af:0c:97:23:14:f8:86:
45:0c:ca:f8:37:14:5f:41:b2:29:ed:a0:57:32:4f:5e:29:1a:
37:d7:17:9b:c6:77:64:f6:7b:4e:d0:88:ae:e4:19:8d:74:ad:
fb:08:c3:03:f7:a2:eb:33:73:b7:cc:b6:c8:34:62:b3:4e:f6:
e4:41:60:80:9b:71:18:76:7d:18:86:0b:cc:03:07:91:aa:89:
31:4b:b3:36:51:10:b4:b0:85:82:d4:09:af:b7:de:05:cd:8b:
8e:68:5e:15:fe:7d:35:7b:78:45:38:aa:53:82:7a:48:a4:84:
31:73:c3:9e:34:13:4b:2b:23:bc:4d:4c:b3:af:9e:9e:26:8a:
09:55:07:65:f8:20:a8:ee:94:f9:12:76:3e:b5:1a:97:2d:a0:
51:9c:e5:d6:5d:0b:62:3c:f2:04:c6:1f:bb:91:90:8c:e6:e9:
a5:94:d2:6c:ff:ed:3c:62:48:99:23:5d:be:16:e9:fb:b7:9a:
18:72:76:c0:34:97:90:e5:69:0d:83:a4:fd:9a:cd:3a:32:63:
78:43:6a:53:44:5f:ce:56:9f:74:ad:60:75:cd:85:b1:d9:e6:
4b:6c:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:46:23 2026 by rpki-client