Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
File: WCKF9OH2Ka2aLM_gMeKBLuTObno.mft (raw, json)
Hash identifier: xvLU2kWHpke151qO5pSIB3mSHUqX49JChIhJwoMuy9o=
Subject key identifier: D5:AB:11:B6:01:73:14:CB:E1:A7:A3:B7:62:C8:57:73:4F:44:AE:80
Authority key identifier: 58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
Certificate issuer: /CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Certificate serial: 01A0CE5A7F596E9D299BA41D34F898D70698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
Manifest number: 39
Signing time: Wed 23 Sep 2026 13:00:32 +0000
Manifest this update: Wed 23 Sep 2026 13:00:32 +0000
Manifest next update: Thu 24 Sep 2026 13:00:32 +0000
Files and hashes: 1: 9dhC5sfLaDk-NO3PkCGR7sM7I5c.asa (hash: Q2yB7l+qF/lyXVsy0/i6uYCbQ5ZBopO3PmdFGfCiVpk=)
2: WCKF9OH2Ka2aLM_gMeKBLuTObno.crl (hash: 48idXoWb8dPS0UY0M7SuiQ7v65D59uuGUWmgCNkHCK4=)
3: ZrmdH1kr224-YSXeiDmPzJXjPVY.roa (hash: 2yOtH6rywtY2yujkNBEikTZTohQoI2VueFklC9+pgaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:7f:59:6e:9d:29:9b:a4:1d:34:f8:98:d7:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Validity
Not Before: Sep 23 13:00:32 2026 GMT
Not After : Sep 24 13:00:32 2026 GMT
Subject: CN=d5ab11b6017314cbe1a7a3b762c857734f44ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:cb:6e:da:72:50:26:dd:a5:99:00:4b:56:
bf:fc:bf:6d:1f:20:29:85:60:f5:44:ca:c9:96:4b:
f5:24:5a:d6:46:e9:f0:19:dd:4f:27:e3:25:d3:d7:
ee:6d:38:ff:08:b1:6c:35:47:87:66:b6:ba:d6:13:
54:1b:1d:d0:e9:ee:4f:6b:64:5d:fe:da:0a:17:18:
f6:c3:5d:f0:d2:1b:bf:e7:29:ad:2f:9f:c8:2e:c6:
a0:ab:8a:8e:75:ad:0d:54:f6:9f:e1:4a:86:c9:41:
02:8d:d3:13:65:ab:a9:4c:50:ff:f3:bd:be:d5:7b:
8a:e6:22:cf:5d:65:85:6e:33:91:be:46:01:74:01:
59:86:22:90:6b:82:55:b2:b2:4d:bd:e3:40:b2:8c:
a9:db:9d:c2:e9:bd:4f:f5:8d:82:b8:38:72:2d:d5:
ff:f6:34:8b:c6:83:71:03:2a:5b:c8:a7:8e:00:ce:
d5:b8:7a:26:32:56:bb:39:a4:cc:38:b8:0f:94:47:
3a:d4:cd:ce:e8:93:d8:e6:a5:ec:e8:32:69:56:fd:
70:7c:f7:bb:1c:8a:3d:9c:ce:31:eb:b6:bd:1f:fe:
7c:a2:a1:a5:49:e6:e7:33:3b:e9:ab:b2:3c:d3:c0:
48:15:a9:9d:a2:5d:21:0b:2c:06:fe:88:fe:f4:e5:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:11:B6:01:73:14:CB:E1:A7:A3:B7:62:C8:57:73:4F:44:AE:80
X509v3 Authority Key Identifier:
keyid:58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:1f:57:be:bf:f2:57:df:fc:34:98:b7:45:04:f0:48:84:
7a:ff:50:1b:75:8d:29:05:31:7f:bd:47:78:01:59:02:6e:9a:
cf:7f:13:ce:32:71:e1:aa:c6:e7:40:01:10:fb:45:bc:7d:91:
d5:86:f4:68:f0:d0:81:a9:c6:4e:b8:38:da:8d:54:c2:a5:c1:
41:df:27:e1:cf:1a:6b:ec:74:bc:f7:b8:7d:cc:50:b4:54:13:
2d:be:42:75:ff:70:cf:95:e0:2f:7d:0e:b3:94:e7:6d:5b:0f:
45:eb:31:5b:2e:3e:a2:52:70:0f:84:a2:7d:dc:e7:43:b3:ea:
14:63:6f:e9:d3:3b:a6:9d:a4:0c:d7:de:b0:1f:23:58:94:8e:
d1:9f:e4:7b:50:65:24:c8:9d:81:44:4b:5c:06:81:95:2b:5f:
93:89:8a:6d:dc:e5:c9:da:42:b4:39:a7:a9:c5:63:93:e0:75:
74:ce:3e:05:70:e9:7b:ca:64:e0:11:d1:de:7d:65:db:96:24:
77:f7:10:94:84:c6:5e:9d:28:cf:4c:0f:b3:e8:9c:b6:f2:3b:
7a:6a:f8:e0:c6:cf:4e:ec:c4:83:e8:82:6b:b4:34:b5:99:ea:
66:f2:6b:30:12:65:ef:84:0f:fe:15:cf:c3:d2:3a:89:09:cf:
d5:6b:9e:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWn9Zbp0pm6QdNPiY1waYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjI4NWY0ZTFmNjI5YWQ5YTJjY2ZlMDMxZTI4MTJlZTRj
ZTZlN2EwHhcNMjYwOTIzMTMwMDMyWhcNMjYwOTI0MTMwMDMyWjAzMTEwLwYDVQQD
EyhkNWFiMTFiNjAxNzMxNGNiZTFhN2EzYjc2MmM4NTc3MzRmNDRhZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ7LbtpyUCbdpZkAS1a//L9tHyAp
hWD1RMrJlkv1JFrWRunwGd1PJ+Ml09fubTj/CLFsNUeHZra61hNUGx3Q6e5Pa2Rd
/toKFxj2w13w0hu/5ymtL5/ILsagq4qOda0NVPaf4UqGyUECjdMTZaupTFD/872+
1XuK5iLPXWWFbjORvkYBdAFZhiKQa4JVsrJNveNAsoyp253C6b1P9Y2CuDhyLdX/
9jSLxoNxAypbyKeOAM7VuHomMla7OaTMOLgPlEc61M3O6JPY5qXs6DJpVv1wfPe7
HIo9nM4x67a9H/58oqGlSebnMzvpq7I808BIFamdol0hCywG/oj+9OUkzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWrEbYBcxTL4aejt2LIV3NPRK6AMB8GA1UdIwQY
MBaAFFgihfTh9imtmizP4DHigS7kzm56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NLRjlPSDJLYTJhTE1fZ01lS0JMdVRPYm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NzJiZDEtNzRhYi00MmM2LWExNzgt
N2QwNzg0NDE2NDdiLzEvV0NLRjlPSDJLYTJhTE1fZ01lS0JMdVRPYm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80NzJiZDEtNzRhYi00MmM2LWExNzgtN2QwNzg0NDE2NDdi
LzEvV0NLRjlPSDJLYTJhTE1fZ01lS0JMdVRPYm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppofV76/
8lff/DSYt0UE8EiEev9QG3WNKQUxf71HeAFZAm6az38TzjJx4arG50ABEPtFvH2R
1Yb0aPDQganGTrg42o1UwqXBQd8n4c8aa+x0vPe4fcxQtFQTLb5Cdf9wz5XgL30O
s5TnbVsPResxWy4+olJwD4SifdznQ7PqFGNv6dM7pp2kDNfesB8jWJSO0Z/ke1Bl
JMidgURLXAaBlStfk4mKbdzlydpCtDmnqcVjk+B1dM4+BXDpe8pk4BHR3n1l25Yk
d/cQlITGXp0oz0wPs+ictvI7emr44MbPTuzEg+iCa7Q0tZnqZvJrMBJl74QP/hXP
w9I6iQnP1WuecQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:34:58 2026 by rpki-client