
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier: U8AT35DuEitoo9L0Nln5uJL7P4U1P4iqubyU3+cQMgk=
Subject key identifier: AC:4A:CD:6A:12:C6:EA:8B:3C:51:C6:AA:AB:00:AB:A6:CE:65:BD:A0
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019FA1849233C5421042912231908E5E250F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number: 193A
Signing time: Mon 27 Jul 2026 03:00:47 +0000
Manifest this update: Mon 27 Jul 2026 03:00:47 +0000
Manifest next update: Tue 28 Jul 2026 03:00:47 +0000
Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=)
2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=)
3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=)
4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=)
5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: jrFIpoyMwX5hBbsJcBrXZPiG3T95TqRXqzjFhNe5hNk=)
6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=)
7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=)
8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=)
9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=)
10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=)
11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:92:33:c5:42:10:42:91:22:31:90:8e:5e:25:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jul 27 03:00:47 2026 GMT
Not After : Jul 28 03:00:47 2026 GMT
Subject: CN=ac4acd6a12c6ea8b3c51c6aaab00aba6ce65bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:ca:5f:a7:15:bd:db:d9:df:06:50:7b:f3:
aa:24:fa:f6:08:ab:29:5c:a5:9c:bd:3a:9d:6c:be:
83:65:fc:37:f5:74:6f:d9:f4:a3:53:3b:78:39:7c:
5c:5f:59:3b:d9:58:0a:77:81:6b:84:5a:f0:66:4a:
ea:d7:c3:18:4e:4d:20:da:70:aa:d5:a9:a6:57:01:
12:aa:f2:f5:c2:63:a1:00:a9:3e:37:1a:cd:10:57:
db:cb:22:c3:a0:bb:eb:c7:00:f3:03:59:fb:d6:52:
55:27:fe:d5:20:d6:7d:a1:e4:48:54:e1:c3:9f:13:
be:b8:cb:f2:0a:fc:9f:00:af:03:30:ed:bb:d2:cb:
40:fe:bc:16:0b:5e:24:29:64:b1:ff:a7:f1:7d:30:
bc:72:72:9b:b6:9f:d6:09:98:8a:f1:fc:b9:e8:65:
56:4f:78:e7:bf:12:3e:5d:21:be:f7:c2:78:49:77:
03:68:79:f4:f8:9a:7b:67:5e:42:6f:d2:ee:27:2a:
1d:b1:10:15:84:e7:e3:53:c0:79:16:e2:a1:dd:63:
8f:ef:97:4e:dd:b0:9b:c1:b6:c0:61:75:ab:48:2d:
09:47:77:af:af:8f:64:87:75:7c:75:e2:32:26:94:
25:a6:c1:f2:3f:ab:b5:46:4e:98:ba:3b:50:eb:d9:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:CD:6A:12:C6:EA:8B:3C:51:C6:AA:AB:00:AB:A6:CE:65:BD:A0
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e4:ca:4f:2a:dd:79:5c:3a:6f:3a:2c:82:c0:53:cc:c0:3f:
8b:0d:2c:93:b4:70:d8:5e:2f:24:7a:05:7b:ce:40:bb:d3:70:
69:b1:d1:ef:b1:93:96:45:32:b3:00:30:2d:a7:bb:17:f8:f8:
60:7b:2a:63:98:76:80:23:51:5e:2a:9f:26:55:23:90:ff:53:
cd:27:ae:b2:ee:a6:5f:b7:97:13:e6:eb:2d:35:89:5a:f4:82:
1e:6f:0c:81:f8:68:74:e8:4c:d5:f0:62:49:8b:13:79:3f:01:
fc:29:69:46:5a:12:b4:95:40:8e:65:4c:dd:45:13:70:3b:96:
0c:eb:ba:a8:b9:b1:8f:87:e1:f8:98:3d:81:43:06:8d:34:bf:
e0:ea:a5:bd:5a:71:7e:8d:16:a0:11:56:8e:0c:bb:21:b9:ae:
15:e0:11:63:b4:0d:7a:d0:a6:44:51:90:64:ff:c5:c1:ed:c8:
15:00:6e:31:e7:48:2a:c0:66:3f:78:c0:f9:32:38:f7:a5:69:
42:ce:62:a9:57:71:4b:d5:d0:74:80:90:f5:aa:2c:90:2f:8e:
67:30:79:e8:19:89:a6:a2:1b:32:a5:a8:75:2d:a9:68:00:77:
84:62:58:85:93:75:28:e1:84:8c:8a:76:9a:7f:35:0c:e2:56:
13:33:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:28 2026 by rpki-client