
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier: dxDUct52q50bad/NNVXVl33JxsGyNkOx9nZG+tXkC9k=
Subject key identifier: 16:21:F8:AE:4C:EE:69:17:54:4C:82:2C:13:63:A1:19:98:E1:5E:16
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A1A3DB39FF61A11F7A0038113CA9FE33DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number: 1100
Signing time: Wed 04 Nov 2026 00:00:15 +0000
Manifest this update: Wed 04 Nov 2026 00:00:15 +0000
Manifest next update: Thu 05 Nov 2026 00:00:15 +0000
Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: Qu3enXe9HmYKrTolF3RqF3E9LhK3JXNFzuS+3fkq+qI=)
3: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
4: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (hash: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=)
5: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
6: Sach14bdHlIK2UH0J3lQ2NMxP28.roa (hash: yPoSvJoCSm4E4Xf3Wz/qd7+O7r/XNwAzJU13TUZU3n4=)
7: Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa (hash: Xc83mkIVmwaowqosFrmOu3R3dm/XOXcYYwcGQpwmyao=)
8: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=)
9: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
10: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
11: cDj-WYm3s2vUGQquUFgEnX-uU98.roa (hash: NZWXGTq8PJkDkcOSpr8dMTKdRnbfPlcnYU1DrDx5K5w=)
12: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=)
13: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
14: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
15: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
16: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
17: mYLN78ICJLHl7O9hLXw6VEbnnwk.roa (hash: t8gHECZIoYqrf13gRRy1nXbebHV2mNd1f9yJrfFQKGk=)
18: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
19: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
20: yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa (hash: 7MOA0YYmqmT4L3Npgm7U4y5ee3LRGCAg/F/T+5uuvBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:db:39:ff:61:a1:1f:7a:00:38:11:3c:a9:fe:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Nov 4 00:00:15 2026 GMT
Not After : Nov 5 00:00:15 2026 GMT
Subject: CN=1621f8ae4cee6917544c822c1363a11998e15e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:7c:9e:ff:a3:3e:9e:fb:c9:27:3b:f0:8e:
2a:a9:3e:19:1e:c7:3e:03:ca:08:33:64:03:0a:f7:
e7:5d:2c:fd:b8:e2:67:62:62:be:ab:1c:93:7f:b5:
a3:c5:c3:dd:b5:2b:9f:a7:41:cd:e7:41:f3:ab:5c:
d0:e0:ff:d7:a8:2d:cd:c1:7c:3d:d5:6e:ed:5c:37:
5c:97:b0:98:02:f4:83:35:2a:94:af:23:e7:66:99:
fc:f7:8f:2f:74:37:95:5a:63:d5:f2:d7:53:c9:00:
42:f4:78:5d:1f:48:ed:c1:39:c5:7c:cf:6e:e4:23:
2f:9f:94:96:22:df:04:12:c8:0d:a1:5d:fc:cd:52:
ec:7f:1b:10:76:e6:9c:36:17:fc:c2:cf:ca:c0:7e:
82:8c:5d:50:e9:fd:a6:b2:d9:bb:5a:e9:97:d2:7c:
f3:de:db:aa:11:15:48:9c:65:e7:2f:51:e5:52:d5:
ee:ff:88:c9:56:bc:1c:2d:da:21:5b:86:e6:a7:fa:
b1:83:36:52:f5:9a:c2:4c:b3:9d:c4:fb:15:54:7c:
36:01:5a:bf:3e:44:6c:06:ea:2a:5a:49:9c:0c:fd:
43:f2:7c:98:49:19:45:32:c1:32:aa:37:1c:06:2e:
46:26:31:01:2f:34:07:74:3c:c7:6f:2e:64:9c:14:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:F8:AE:4C:EE:69:17:54:4C:82:2C:13:63:A1:19:98:E1:5E:16
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:68:59:24:e0:21:fd:db:2f:03:f6:82:59:88:af:ce:71:
cf:4b:84:f1:15:cb:98:8d:75:15:f2:4c:a4:53:2b:a7:f0:19:
c8:ae:a1:53:e2:e8:19:77:84:ab:47:57:6c:d4:6a:ee:27:35:
2f:ae:f4:3e:bd:20:70:35:7e:b5:23:46:bb:1a:5e:7e:a1:e2:
ac:d1:06:20:ce:8e:9d:91:de:81:90:0d:35:36:f6:39:9c:10:
13:93:e5:ce:6f:27:32:03:ca:3c:8f:c9:a3:6e:de:63:d1:a0:
20:2d:8e:1c:6c:06:cd:9b:82:01:b5:01:dd:d5:40:07:e3:5e:
e4:97:c1:7b:24:a8:82:a6:05:3a:72:2d:ae:0f:40:22:79:07:
aa:24:5c:69:4d:ec:2e:d1:20:30:de:8e:6a:3f:cc:06:c8:23:
03:70:c0:8a:bf:5f:43:1c:7e:b7:a0:88:01:7c:c7:41:0c:67:
08:df:15:1a:8b:a8:39:cf:09:d9:4e:c2:a7:76:b9:fb:9a:52:
88:ab:38:3e:e3:c2:d5:9e:7a:6c:66:2e:7c:f9:0e:80:69:66:
b4:f3:bd:41:a2:76:a0:09:c6:9f:b6:c3:4c:af:bd:4a:6f:a8:
46:a5:1f:db:a7:2e:4f:95:0c:c7:23:61:90:5a:f3:24:f7:05:
9a:42:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:49:59 2026 by rpki-client