Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
File: WCKF9OH2Ka2aLM_gMeKBLuTObno.mft (raw, json)
Hash identifier: 9oS9IrY96rLxs8rQxkbb7T4nwlmOA02Qp2OcAmMMSIg=
Subject key identifier: B7:52:F4:AB:6C:CE:DC:14:0F:82:2C:66:A6:A4:07:90:EB:89:7F:5F
Authority key identifier: 58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
Certificate issuer: /CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Certificate serial: 01A0EF2FC90C3E17FD5FFFC3D95C9FE5F0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
Manifest number: 4A
Signing time: Tue 29 Sep 2026 22:01:21 +0000
Manifest this update: Tue 29 Sep 2026 22:01:21 +0000
Manifest next update: Wed 30 Sep 2026 22:01:21 +0000
Files and hashes: 1: 9dhC5sfLaDk-NO3PkCGR7sM7I5c.asa (hash: Q2yB7l+qF/lyXVsy0/i6uYCbQ5ZBopO3PmdFGfCiVpk=)
2: WCKF9OH2Ka2aLM_gMeKBLuTObno.crl (hash: Of9Y7+YxsVI9uEPTlOEUzKaKLcL6vNjGZx73yPTXwM8=)
3: ZrmdH1kr224-YSXeiDmPzJXjPVY.roa (hash: 2yOtH6rywtY2yujkNBEikTZTohQoI2VueFklC9+pgaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:c9:0c:3e:17:fd:5f:ff:c3:d9:5c:9f:e5:f0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Validity
Not Before: Sep 29 22:01:21 2026 GMT
Not After : Sep 30 22:01:21 2026 GMT
Subject: CN=b752f4ab6ccedc140f822c66a6a40790eb897f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:b4:48:4b:0a:1e:53:25:dd:67:13:55:1a:
8b:08:d8:3f:f7:b5:9d:7d:cd:f4:72:93:31:e2:c4:
55:26:a3:4c:3f:70:92:d4:32:b2:f5:1c:a3:93:bd:
8d:42:a8:35:31:d7:8c:5c:1b:39:53:cd:b8:b3:5f:
38:ac:0f:03:a1:3b:5c:5e:63:fc:c9:b9:5d:22:0f:
d7:fc:fa:87:b4:f2:90:8e:bc:43:d5:64:e5:9c:66:
cb:74:5e:dc:2a:95:ae:bf:a4:25:a1:7a:a9:91:50:
51:c7:9e:ef:1e:ee:4d:93:5f:ca:33:aa:ba:34:2c:
dc:9d:0a:cc:b2:4e:65:47:42:f9:c4:13:03:06:29:
63:09:9e:d0:40:44:3a:65:29:9f:3c:5a:1c:86:0e:
68:21:0a:91:19:b2:ce:ec:94:1c:89:2f:0f:b8:05:
09:15:cd:d4:e5:ac:8e:93:a7:7a:59:8d:2c:d9:85:
78:86:c9:95:e5:2b:cd:97:29:22:ad:80:bd:74:33:
16:ee:86:bc:e9:af:64:23:b3:b1:f4:91:6c:61:c3:
f6:bc:60:c0:10:7b:d4:2c:7a:47:ac:8b:e2:97:ee:
b6:9c:83:6d:9c:cd:d1:6f:0b:3c:b1:40:ca:a7:5d:
bc:24:c9:77:a5:a4:4b:87:44:77:7c:b2:5e:a9:ac:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:F4:AB:6C:CE:DC:14:0F:82:2C:66:A6:A4:07:90:EB:89:7F:5F
X509v3 Authority Key Identifier:
keyid:58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:df:51:d0:d2:25:de:0c:89:e8:ca:fa:3f:41:a1:de:b0:
ce:bb:74:e0:93:94:5f:f1:61:a1:fd:f1:a3:9b:06:d7:37:99:
5e:c6:0a:33:26:b6:d7:96:a6:62:8b:04:c7:b2:7a:1e:de:f1:
8b:5b:97:c0:5c:f5:1a:53:fe:1d:2e:3c:14:3d:bd:2c:42:36:
b5:00:3a:96:e6:b3:c6:f6:0c:f6:de:d1:d3:cd:c2:21:af:f2:
c7:4f:36:ec:fa:f6:45:8c:21:3c:a1:9e:41:b0:e7:b7:95:a2:
a6:24:e5:7e:d2:d0:d7:5a:f1:fe:5e:ce:ba:df:95:00:d9:58:
c6:ab:03:75:7c:c5:c2:44:ac:e2:18:2d:af:e1:9e:a4:0f:e0:
44:0a:f5:db:75:9c:16:1b:a7:45:8f:0c:fc:8c:7c:22:56:d4:
ee:ee:38:5d:61:9d:ef:7d:75:2e:fb:14:0e:93:9b:5a:c7:84:
c5:69:c4:be:12:21:8a:0e:b1:64:53:78:16:31:0b:8d:63:38:
72:ac:43:00:bc:17:15:dc:2f:b3:ae:79:5b:e5:14:15:54:d1:
52:1d:8f:ee:4c:e0:40:b5:f9:f1:69:f9:be:36:0d:51:ea:58:
a9:ff:e8:94:9c:7b:ff:aa:85:03:e9:3d:8b:5e:04:18:7f:55:
db:dc:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:53:25 2026 by rpki-client