
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier: SQFlZ2EPG6UO/qcaUewXI1jtvUnec95Zjlb4Dd2MyOQ=
Subject key identifier: 88:F4:CE:8A:5B:F0:25:28:A6:1D:30:80:70:13:15:3A:25:42:1E:ED
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 019F190C6EEB4A3B0FD0E91C0D9D9B33DAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number: 19BE
Signing time: Tue 30 Jun 2026 15:01:12 +0000
Manifest this update: Tue 30 Jun 2026 15:01:12 +0000
Manifest next update: Wed 01 Jul 2026 15:01:12 +0000
Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=)
2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=)
3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=)
4: 8Mt_P4C_cwjhBXd4VtfvlyyYwkU.roa (hash: kser1+xCc0Of/nQJXFZxIJdiPaMPNeYDf7pPp/yA12g=)
5: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=)
6: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=)
7: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=)
8: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=)
9: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=)
10: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=)
11: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=)
12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=)
13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=)
14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=)
15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: +JbSNOSFLubak6UGxe6skxd5HGuFH0VF+p5fqNs43A8=)
16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:6e:eb:4a:3b:0f:d0:e9:1c:0d:9d:9b:33:da:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jun 30 15:01:12 2026 GMT
Not After : Jul 1 15:01:12 2026 GMT
Subject: CN=88f4ce8a5bf02528a61d30807013153a25421eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:dd:6b:54:d3:bb:f6:56:55:b3:b2:d9:b5:
6a:a9:9a:46:8e:54:89:9f:ae:7a:34:79:f2:9a:60:
e0:0e:0e:ba:31:0b:d1:6b:16:42:78:69:2b:fe:14:
65:10:8e:b3:56:f7:92:73:70:3a:6e:c5:2b:71:de:
af:cb:ea:0c:9f:60:a9:33:48:ea:5d:4c:d9:34:0d:
c9:15:7a:cf:59:03:ca:81:f7:20:bf:9c:22:85:42:
fe:47:d8:50:5f:f1:86:e6:00:fe:a9:1c:64:7d:73:
8e:ed:82:84:b6:18:f4:11:d1:db:8e:da:c4:22:f3:
83:b4:fa:d3:91:5b:b1:58:aa:ee:de:06:e0:07:52:
b6:74:4f:06:ba:6d:a6:3d:6e:0f:a0:71:ae:7f:ac:
49:a8:0b:9f:46:ee:0c:a0:33:66:c0:e2:ec:17:72:
ab:e3:53:ec:31:4d:e5:f2:0c:ed:77:ba:30:24:23:
7c:54:bb:d4:77:d1:cc:66:71:e4:9a:bb:27:9d:71:
8d:67:c3:fd:0d:59:4b:df:a5:04:ec:32:4d:c3:13:
1b:9b:3a:42:38:f6:b4:f8:df:8f:19:71:54:ed:0a:
03:90:82:15:fb:f2:8d:30:74:e2:0e:a3:b3:3f:2e:
e8:2d:34:b7:5f:1c:2a:57:4f:16:b7:b6:cc:a7:87:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:CE:8A:5B:F0:25:28:A6:1D:30:80:70:13:15:3A:25:42:1E:ED
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:63:82:f7:be:83:78:47:a1:5c:d9:7a:8d:57:98:4e:8e:cb:
e9:f1:3e:b8:57:7f:08:d7:09:1c:0a:a1:59:6f:fe:8a:00:3b:
5d:c0:8f:fa:91:3a:3a:12:d3:94:99:58:54:b0:f3:f5:81:c5:
d2:5c:80:e4:04:58:62:b3:a3:bb:d6:c0:b6:db:7e:96:36:66:
49:50:56:86:6d:42:2a:17:65:44:a0:37:0d:48:3b:ea:58:c6:
d8:55:ae:16:df:d8:79:35:12:c6:bf:0b:9b:ca:55:1f:05:0c:
0d:5b:a5:ff:32:d7:b3:61:95:51:42:8a:60:e1:cb:17:a7:1c:
c3:1c:4d:9e:b7:3e:ed:59:a7:26:98:fb:87:67:dd:32:68:aa:
4e:fb:2d:3e:30:68:bb:b9:b1:70:52:99:58:64:33:e7:dc:dd:
e4:ac:67:3b:b4:5b:85:6c:af:62:7a:f7:09:8f:4e:9c:15:c2:
ea:3b:e8:32:34:fc:f4:36:c0:ba:de:de:ff:ff:b4:1c:a9:65:
36:6e:9c:4b:43:68:14:7f:26:33:bc:5b:a4:9c:93:59:04:55:
2c:71:6c:1a:81:2f:cd:6e:e0:0c:87:84:8d:41:d8:98:d4:6c:
fe:48:da:5e:cb:f8:f6:ab:61:b0:9e:7f:af:4a:4a:69:5f:bf:
49:bc:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:32 2026 by rpki-client