
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier: QPxb5TwQdsVOKpfo2MG3veSZVM2cwwrSZLqVbCxdd3Y=
Subject key identifier: B7:96:E6:14:0E:EF:23:94:71:DD:B1:2E:F5:E8:3E:F1:96:27:2A:91
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01A119AB67CC5B6BFC88EBA110DCF799A786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number: 1AC9
Signing time: Thu 08 Oct 2026 04:00:25 +0000
Manifest this update: Thu 08 Oct 2026 04:00:25 +0000
Manifest next update: Fri 09 Oct 2026 04:00:25 +0000
Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=)
2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=)
3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=)
4: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=)
5: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=)
6: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=)
7: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=)
8: h5SeKNU4v1zqrz2SEUMsDeykB1k.roa (hash: /SW4vZCDxBQFJ0MN64qdImwemRl7ZDJMHfByaohPzpI=)
9: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=)
10: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=)
11: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=)
12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=)
13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=)
14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=)
15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: eN01FsnL4mW2SuXy8CK77syBEylEV8f1sI8Mv3rdFcA=)
16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:67:cc:5b:6b:fc:88:eb:a1:10:dc:f7:99:a7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Oct 8 04:00:25 2026 GMT
Not After : Oct 9 04:00:25 2026 GMT
Subject: CN=b796e6140eef239471ddb12ef5e83ef196272a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:5b:04:ca:38:5c:d5:f4:9b:6a:f8:03:00:
7f:bf:f6:85:54:06:27:f4:8f:df:ea:7b:8e:69:f5:
2d:00:34:97:bd:de:d6:cf:0b:da:b0:08:1d:a2:8a:
17:7b:7d:48:fa:28:bd:70:97:0e:32:2d:e4:62:fb:
d4:15:7e:e6:de:4f:dc:90:f9:09:01:1b:d3:5c:08:
94:4f:89:96:9f:ca:a2:88:b9:3d:c9:ed:20:07:73:
c9:45:56:f2:eb:db:b3:71:a0:37:96:d5:80:7f:22:
f7:6c:8e:d2:5e:25:1b:e5:c0:ed:66:2c:b5:a4:23:
e6:42:ba:98:af:9e:91:db:a3:75:48:87:59:a3:dc:
e5:6e:cf:03:f1:01:99:fd:63:2f:8d:50:82:ad:b7:
34:fe:a1:d6:1a:ed:55:82:fc:13:dd:af:22:83:ef:
2d:a9:ca:a8:11:07:d2:60:1c:21:2e:73:99:75:64:
00:ed:33:76:f8:14:f1:4c:8d:b0:b9:c2:f1:4d:d7:
e2:21:f2:ec:9b:d8:9c:d2:b8:72:f3:b0:95:f5:c0:
85:12:9b:ea:ca:05:13:3a:37:86:3a:f5:f7:37:0b:
df:74:95:86:a5:6a:79:28:bd:10:40:8f:57:e4:65:
5d:98:69:60:f6:6c:0d:87:7d:85:9a:df:45:19:c1:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:E6:14:0E:EF:23:94:71:DD:B1:2E:F5:E8:3E:F1:96:27:2A:91
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:f2:49:e4:6a:e2:a1:66:cb:d9:64:a1:f3:3d:55:a2:e3:
c9:11:f5:9b:4d:b9:7e:1e:0d:0c:22:6c:8d:7c:50:89:03:cb:
29:f6:95:ad:ba:78:73:81:15:b8:6c:ea:aa:59:8e:88:86:ee:
19:45:2b:86:68:50:31:23:57:26:94:5d:3e:4c:8b:cd:e5:37:
c1:70:ca:1d:16:c6:8d:19:55:d6:5e:a4:3c:6b:e3:d4:b8:c7:
0e:5c:8c:98:25:22:dd:76:1b:07:69:d2:9a:e8:4b:bc:27:e3:
9b:8a:4e:92:45:0f:d4:b3:c7:6e:99:46:ef:6f:b8:5d:46:fc:
57:cf:a9:f6:1c:20:ff:1d:77:73:a3:55:d1:0c:47:6f:e3:ba:
a0:cb:d4:9e:6a:a6:73:d0:22:9b:9c:52:01:66:e7:f5:a1:63:
31:88:c3:a5:bd:59:43:af:50:48:85:b0:bb:86:c2:36:fc:1b:
50:a3:97:fd:94:15:96:e3:25:70:72:70:b8:be:25:84:aa:b9:
1e:e7:81:2a:30:60:89:ee:7b:86:21:a2:5a:8c:c1:cf:7a:b2:
78:c7:e0:a5:8d:89:00:ed:fa:8b:d7:ef:fc:08:6a:95:58:c5:
61:0b:ca:ac:5e:8c:6c:24:25:8c:a3:bd:f4:0b:0c:17:88:6e:
12:51:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:10:41 2026 by rpki-client