
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier: kWDCgTsXpo1v/2eyMY9PCdefwI8n9GZQJdFYMtaU488=
Subject key identifier: 0F:33:1D:DD:97:48:E6:93:F6:1A:D0:49:96:45:DD:65:31:15:38:27
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019CBEBAFBFB4D74069F658DFF0AFC71BCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number: 0A3B
Signing time: Thu 05 Mar 2026 16:00:51 +0000
Manifest this update: Thu 05 Mar 2026 16:00:51 +0000
Manifest next update: Fri 06 Mar 2026 16:00:51 +0000
Files and hashes: 1: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
2: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
3: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
4: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
5: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
6: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
7: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
8: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
9: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
10: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: qjmOMYTPF3nt/qfn8/l+ia+HoiFTuGOgGaBTq7tWsUY=)
12: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
13: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
14: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
15: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
16: kNJxXBNWZCsGGr2n--zdldpXgt8.roa (hash: UO0nCqFCkSGk2+PoNEi2oakJxAwljiwxkwlJ6FkJGMk=)
17: kQBFKAIgUSzRKJDd32cJzgu-nxU.roa (hash: C36nf7xzwTqGF/KQKrthkI0kKa/Zo4n4MiOq3MlwZYM=)
18: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
19: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
20: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
21: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:ba:fb:fb:4d:74:06:9f:65:8d:ff:0a:fc:71:bc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 5 16:00:51 2026 GMT
Not After : Mar 6 16:00:51 2026 GMT
Subject: CN=0f331ddd9748e693f61ad0499645dd6531153827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:c1:93:71:81:f1:43:77:19:6a:f5:cc:b8:
4a:32:ae:27:1e:f8:fa:8b:af:ab:7e:9f:68:5f:e4:
5d:49:66:69:61:87:a8:d4:0e:a5:80:a8:22:42:24:
37:b3:78:6c:9a:20:31:71:99:f3:29:89:33:12:d8:
3b:e6:0e:15:84:4e:41:6d:92:cc:61:30:da:81:81:
5b:bb:b9:d4:e4:82:c3:53:bf:c0:d1:2c:94:d7:90:
07:ce:52:a5:d0:5c:59:0d:ad:c9:07:72:8b:a7:c9:
59:3d:55:21:71:5a:41:8a:de:f1:7a:b2:e5:b8:48:
8d:4f:95:01:8d:4f:7c:0e:ad:e6:04:65:3a:1d:af:
d2:df:12:7d:bb:bc:33:5b:46:e8:1a:bb:53:bb:67:
6d:52:d0:06:68:b7:2a:75:4d:d7:60:73:bd:28:91:
aa:92:29:ab:64:b2:bb:67:43:46:8d:54:d3:ba:cc:
00:57:b2:1e:8d:58:3f:79:8b:09:a7:84:54:d8:2f:
15:25:2e:f4:3b:44:18:cb:79:9a:02:23:87:3a:05:
27:a6:03:05:bc:7d:93:86:0b:b8:44:fd:18:97:26:
26:50:9e:7f:c1:72:94:44:8a:1e:7a:f1:ea:4a:98:
c3:68:ab:8a:40:d2:40:f0:a5:25:87:a3:e0:27:7a:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:1D:DD:97:48:E6:93:F6:1A:D0:49:96:45:DD:65:31:15:38:27
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:b0:82:39:2e:af:a6:49:86:ee:85:b8:e2:84:7f:7f:95:
d0:10:09:29:be:3a:6d:85:eb:1c:60:95:3f:b4:89:a5:64:10:
91:a6:57:fc:cc:32:73:8a:49:13:30:ee:db:9a:18:fb:80:d8:
29:65:34:94:cf:f1:b9:78:e6:09:3c:5b:aa:bf:66:7f:c3:73:
e8:53:74:2c:7f:ef:9d:dc:c8:d5:6d:f4:3a:ef:58:5e:9f:e5:
4d:86:a4:db:69:bd:15:2b:bf:db:f8:34:7e:9e:5c:a7:72:54:
3a:b8:32:49:e9:57:73:c4:ed:51:60:85:2c:a3:28:38:7f:28:
91:31:79:2b:e2:0c:11:bf:e4:1f:18:93:a2:1b:2d:76:f0:87:
81:d6:bd:21:d6:e6:7b:66:50:46:ae:56:c9:e7:6f:03:1e:21:
ba:4c:2a:59:58:39:35:9c:30:60:93:a8:99:7c:fa:55:59:67:
c4:6c:ae:68:27:c1:7a:2a:bf:b6:da:81:75:4f:0c:20:da:d0:
f8:d6:67:7d:c4:f5:ee:79:af:45:e8:86:ff:f7:58:e9:ba:10:
b4:dc:fe:97:d9:8e:fb:7e:38:f1:e2:f7:ca:bc:80:e8:df:e9:
ed:ac:52:89:c9:b1:a8:64:3f:dd:c1:04:9c:d1:72:73:63:8c:
57:7e:c0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy+uvv7TXQGn2WN/wr8cbz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwMzA1MTYwMDUxWhcNMjYwMzA2MTYwMDUxWjAzMTEwLwYDVQQD
EygwZjMzMWRkZDk3NDhlNjkzZjYxYWQwNDk5NjQ1ZGQ2NTMxMTUzODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSDBk3GB8UN3GWr1zLhKMq4nHvj6
i6+rfp9oX+RdSWZpYYeo1A6lgKgiQiQ3s3hsmiAxcZnzKYkzEtg75g4VhE5BbZLM
YTDagYFbu7nU5ILDU7/A0SyU15AHzlKl0FxZDa3JB3KLp8lZPVUhcVpBit7xerLl
uEiNT5UBjU98Dq3mBGU6Ha/S3xJ9u7wzW0boGrtTu2dtUtAGaLcqdU3XYHO9KJGq
kimrZLK7Z0NGjVTTuswAV7IejVg/eYsJp4RU2C8VJS70O0QYy3maAiOHOgUnpgMF
vH2Thgu4RP0YlyYmUJ5/wXKURIoeevHqSpjDaKuKQNJA8KUlh6PgJ3prcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8zHd2XSOaT9hrQSZZF3WUxFTgnMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvSwgjku
r6ZJhu6FuOKEf3+V0BAJKb46bYXrHGCVP7SJpWQQkaZX/Mwyc4pJEzDu25oY+4DY
KWU0lM/xuXjmCTxbqr9mf8Nz6FN0LH/vndzI1W30Ou9YXp/lTYak22m9FSu/2/g0
fp5cp3JUOrgySelXc8TtUWCFLKMoOH8okTF5K+IMEb/kHxiTohstdvCHgda9Idbm
e2ZQRq5WyedvAx4hukwqWVg5NZwwYJOomXz6VVlnxGyuaCfBeiq/ttqBdU8MINrQ
+NZnfcT17nmvReiG//dY6boQtNz+l9mO+3448eL3yryA6N/p7axSicmxqGQ/3cEE
nNFyc2OMV37AyA==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:03:28 2026 by rpki-client