
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier: rFuX3069q0sI4HQRfVuqQ7jqwlVa2GOew7TTj17OcFc=
Subject key identifier: 1A:F1:AC:39:2C:9E:2F:C5:E5:E1:7A:16:B2:D6:60:51:33:21:A1:F4
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 019E3297BF97069F4CF469FD8716335C7F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number: 191C
Signing time: Sat 16 May 2026 21:01:06 +0000
Manifest this update: Sat 16 May 2026 21:01:06 +0000
Manifest next update: Sun 17 May 2026 21:01:06 +0000
Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: G3xi/KKNg2wfZ832qg0/KRopROCyr8ZP2P9QNTm6bvc=)
2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=)
3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=)
4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=)
5: cYgMOmj6u6TwRZVxPY0GRuR_57c.roa (hash: PFEwcIm0GvfowU+QS3ePDAQm79limgzxJJZAQhsXoQM=)
6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=)
7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=)
8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=)
9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=)
10: zt_YvrwgG8U0qs9ZxDXsKeZ9EVw.roa (hash: t0BRGsA3yMu+tS9ODb23oVtqY4JggUZywQTE6WaROKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:bf:97:06:9f:4c:f4:69:fd:87:16:33:5c:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: May 16 21:01:06 2026 GMT
Not After : May 17 21:01:06 2026 GMT
Subject: CN=1af1ac392c9e2fc5e5e17a16b2d660513321a1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:93:ff:ef:99:66:ee:44:12:22:ed:eb:a6:
6d:c7:64:28:1c:ff:b3:fc:76:ff:63:4e:f3:fa:5d:
7a:ed:86:42:ae:3e:0b:5d:69:1a:1d:fb:f6:5c:91:
d6:a4:10:5f:73:5f:af:e9:0b:8c:ca:0b:7b:58:ad:
8f:8a:e7:c4:c4:7c:e7:c0:8e:17:ef:24:22:da:71:
1a:f6:36:a9:92:9f:cb:fe:ce:c3:c2:f7:6b:6b:a2:
60:fe:85:76:21:27:79:8d:ee:4e:d4:0c:b9:66:c3:
af:ff:52:1d:41:77:79:52:a7:e0:79:de:14:b9:11:
d7:8b:6c:bb:54:de:f2:73:9c:c1:ec:55:00:50:0a:
f6:33:37:6a:fe:f6:ba:68:c5:d4:d2:f2:1b:48:1b:
2b:33:2d:67:e2:97:fa:22:fb:c9:68:3f:de:67:01:
dd:a4:c0:4f:b7:94:e3:34:ac:60:79:08:31:88:60:
c4:ad:3b:9e:22:9a:01:4b:a9:e7:ad:9f:7b:0c:42:
d0:47:48:31:da:de:66:42:f6:12:b3:4b:d0:b5:35:
48:5e:e9:6c:5a:3f:6a:53:ce:9c:fd:67:36:01:83:
fd:85:2c:0e:00:31:68:bc:49:f7:a8:47:80:ae:7a:
d5:c0:1f:33:78:58:cc:ff:53:2b:59:06:17:ea:c7:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:AC:39:2C:9E:2F:C5:E5:E1:7A:16:B2:D6:60:51:33:21:A1:F4
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:83:45:f3:29:3d:e4:aa:39:58:e2:d9:2d:58:5f:9c:cb:
d8:28:ca:7c:49:62:d8:5b:37:76:f9:24:bc:f1:4b:ee:64:a8:
75:9a:c2:5b:fd:63:2f:9e:82:0b:2f:7f:69:71:06:07:26:73:
35:95:09:1e:ec:2f:5b:71:20:fb:ba:e2:13:38:55:bc:01:d1:
01:d9:10:15:76:e4:fe:15:45:78:18:eb:8c:b4:37:40:33:28:
b6:ff:ed:a9:19:5d:6a:23:0c:c5:51:30:15:37:52:6b:91:3e:
7d:ba:87:c2:47:34:59:60:d9:4d:b8:5e:ae:96:1d:5a:ba:9c:
fc:7f:a3:5d:f9:78:f0:97:86:55:af:37:49:79:af:bf:f6:c1:
d4:c1:dd:38:8e:0a:5d:0d:be:cc:5c:d2:15:a1:a8:98:b3:f5:
ab:ec:5c:68:ee:5e:db:cf:91:d5:b8:dc:64:60:2b:8f:e8:dd:
26:2d:12:b2:d5:31:f8:50:7d:7a:d3:49:21:47:4f:d9:39:fb:
70:96:6a:af:b9:55:12:e8:0e:70:c8:1c:13:84:23:27:dc:ae:
5b:8a:4e:d7:2d:62:08:b7:8b:17:da:0e:28:00:ae:76:82:58:
d7:9c:bc:65:45:e8:92:ca:a5:2d:c5:14:1c:a3:8d:64:a1:4e:
6a:99:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:34 2026 by rpki-client