
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier: VNLojoAOUsBjcnP8pna541Rf/4HHc4eLYCNUp5caNcs=
Subject key identifier: 4E:2A:D4:8E:E3:25:DD:46:72:68:C6:F5:F4:E8:9B:18:45:C3:EA:98
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019EE1B018F7AD11E8CAF441EE969834BB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number: 16A2
Signing time: Fri 19 Jun 2026 21:01:14 +0000
Manifest this update: Fri 19 Jun 2026 21:01:14 +0000
Manifest next update: Sat 20 Jun 2026 21:01:14 +0000
Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: tnkb1h+8/2Opq0SVmLLoXGXcguPqAQWPKKrl+sVH7vE=)
9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:b0:18:f7:ad:11:e8:ca:f4:41:ee:96:98:34:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jun 19 21:01:14 2026 GMT
Not After : Jun 20 21:01:14 2026 GMT
Subject: CN=4e2ad48ee325dd467268c6f5f4e89b1845c3ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:62:e1:97:6d:d8:75:f0:d5:c5:6e:30:04:
93:90:30:93:c3:5d:ab:b4:e8:72:49:ae:11:2b:28:
00:3d:20:89:1f:7a:69:0f:40:a8:45:25:65:8e:60:
e3:8c:30:01:b4:c4:94:2b:cc:af:58:bf:76:7c:1e:
84:c4:3c:2c:63:fa:36:39:91:0f:26:03:04:36:bf:
56:a8:c6:17:01:1d:47:73:96:9a:b2:c3:ac:f3:6f:
4e:a6:3e:aa:4d:b4:41:c0:19:70:21:bb:7e:9c:e9:
af:16:ea:ee:7d:4e:28:aa:8c:36:5d:94:cc:f3:54:
db:a4:9f:ea:38:12:a4:29:80:be:b1:0e:7e:3e:fb:
08:17:c7:8c:80:0f:83:76:a6:f9:8e:11:0f:0a:c0:
54:d4:ac:c6:fb:35:d3:f4:ee:71:13:d8:58:d6:f9:
c7:2f:03:56:02:b2:e2:12:a8:c7:99:9d:50:be:37:
88:06:1c:62:cf:46:ed:bd:23:dc:ef:b9:9a:f1:b5:
b2:22:ec:89:d2:ea:e9:e7:b8:ef:c3:70:fb:85:34:
33:03:38:5e:e0:d0:72:c2:77:f3:1f:7c:aa:fe:0f:
63:05:de:30:6b:7e:74:35:b1:80:72:57:36:be:01:
36:c0:d9:d2:b5:ea:4d:41:c9:7b:b2:fe:15:83:9b:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:D4:8E:E3:25:DD:46:72:68:C6:F5:F4:E8:9B:18:45:C3:EA:98
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:76:9c:a9:94:98:a0:00:7f:c9:de:55:5b:dd:ea:86:47:
09:dc:79:8e:56:6e:19:9b:16:1e:6e:c5:99:fa:e8:27:cb:d3:
1b:df:f6:5c:f2:1e:8f:6d:ae:f4:a4:6e:6a:e0:bf:f5:07:64:
bb:77:d1:fa:f4:a0:15:fc:74:df:99:4e:10:32:3b:72:72:18:
79:fe:82:85:0f:58:d6:58:39:0a:8f:9b:9f:e3:08:c5:d1:ab:
da:53:77:13:11:62:6c:ef:85:6c:9a:9b:31:2e:a1:63:7c:54:
f4:12:a8:c5:76:89:a8:2e:34:ed:8c:7a:d5:4b:c7:c4:9f:01:
1f:a2:64:c2:08:6e:5a:81:6b:5c:f9:40:77:ac:f5:42:60:e9:
06:9e:c9:e5:3a:69:71:47:80:2c:ed:c3:f9:f2:71:47:aa:5c:
31:fd:7d:b3:2b:17:cf:23:4d:86:38:5d:53:e2:25:82:58:59:
ee:4c:76:1e:93:f5:b9:31:43:96:ef:9b:e8:27:1e:80:bb:21:
05:6b:78:f0:86:f7:ef:89:bb:28:2c:e1:d0:12:90:9e:c9:4c:
31:16:92:92:de:83:f9:c2:2b:ba:ec:94:17:92:26:8f:f3:c2:
09:e8:18:b2:d7:51:73:b1:5c:4d:85:38:9b:4d:c1:f4:73:a1:
4f:13:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:45:50 2026 by rpki-client