Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
File: WCKF9OH2Ka2aLM_gMeKBLuTObno.mft (raw, json)
Hash identifier: U52DgEn3bZlaSAyzBFFlVt2RLcdY8ws9oNaHOWEBUtI=
Subject key identifier: 68:E9:40:5F:36:77:5F:81:DE:09:D4:A8:CD:88:11:E3:2C:BD:DE:30
Authority key identifier: 58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
Certificate issuer: /CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Certificate serial: 01A0BD9DDAF821541EF0971B3BD30E3B924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
Manifest number: 30
Signing time: Sun 20 Sep 2026 07:00:34 +0000
Manifest this update: Sun 20 Sep 2026 07:00:34 +0000
Manifest next update: Mon 21 Sep 2026 07:00:34 +0000
Files and hashes: 1: WCKF9OH2Ka2aLM_gMeKBLuTObno.crl (hash: /ut2gOmkRSEBbUjUmYp8GeA4W2/3VwB78jgXT7MfJYQ=)
2: XBe2EpIUEZbkHj1pEXz6-5KLJWE.asa (hash: nvjnGy8/Tj1laUQpwVDJpyzUwL+BizD3dI0B1pidUoc=)
3: ZrmdH1kr224-YSXeiDmPzJXjPVY.roa (hash: 2yOtH6rywtY2yujkNBEikTZTohQoI2VueFklC9+pgaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:da:f8:21:54:1e:f0:97:1b:3b:d3:0e:3b:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Validity
Not Before: Sep 20 07:00:34 2026 GMT
Not After : Sep 21 07:00:34 2026 GMT
Subject: CN=68e9405f36775f81de09d4a8cd8811e32cbdde30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:c4:9d:83:13:76:29:9b:e6:17:7e:2a:9c:
19:3d:84:59:3b:47:7b:18:88:9d:8a:84:c3:0c:61:
82:af:7c:7e:5a:69:c2:3b:99:c7:95:f4:86:ef:3f:
c5:24:cd:bc:82:bc:a0:69:63:bc:67:f2:65:3d:f3:
5a:54:c4:04:be:05:06:8b:bc:fb:a0:1f:6c:6c:6e:
d5:02:a2:56:ea:60:f9:9d:92:71:69:16:a7:75:a4:
49:7e:1f:2d:ab:f0:14:af:bb:df:af:04:ac:59:27:
f6:f3:34:7b:40:3e:2a:e2:0a:a7:34:1c:ee:02:59:
32:95:2a:ec:60:c3:71:03:e6:b4:fe:45:59:3f:9b:
64:11:53:2e:b3:ab:5f:5a:b1:50:1c:d2:5d:b5:e1:
9a:aa:af:23:f6:34:16:69:7d:35:0e:b6:4d:13:fd:
4f:13:20:70:c9:c5:6a:6f:31:8a:64:83:03:9e:08:
e6:1c:7c:a1:e1:d8:a2:e1:d9:f8:45:3f:1b:25:33:
4f:c4:4b:40:80:bc:63:5b:be:76:9d:16:a9:63:21:
66:ff:8e:8e:b7:cc:51:23:de:80:95:1a:e4:35:2f:
60:90:9b:9e:b9:56:fb:e2:c4:e7:27:9d:7e:df:e0:
dc:50:85:e0:8a:0b:05:02:a7:84:4f:c3:3c:dc:1f:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:40:5F:36:77:5F:81:DE:09:D4:A8:CD:88:11:E3:2C:BD:DE:30
X509v3 Authority Key Identifier:
keyid:58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:27:f6:fd:d4:24:9e:1e:20:cb:e4:f7:e8:6d:ad:46:41:85:
56:1e:3e:92:7e:d7:64:f9:cd:77:18:cf:5a:68:d4:56:68:65:
41:c9:97:a6:e3:81:62:40:9e:dd:3b:61:57:47:72:4a:c3:d5:
b5:5f:b1:85:9f:ad:ce:43:4d:8e:df:ac:7d:94:41:4f:42:c6:
5a:88:01:d1:dc:bd:61:7b:54:e9:39:b6:28:8d:b2:d3:2b:8c:
c5:76:05:ad:51:89:c3:33:1e:1b:01:2b:8f:3d:77:7d:c8:c6:
7f:9c:c2:be:ae:9d:a1:42:9a:ab:3e:93:93:99:2f:f6:3f:c7:
06:92:3c:49:38:d8:b4:5d:ee:5b:c2:57:67:b0:3f:6c:9b:2e:
b0:82:05:1f:7d:bc:8c:38:72:7a:f5:57:60:40:8b:7f:1c:77:
49:95:cb:a7:ba:33:83:87:44:19:0d:8b:78:a8:fb:77:12:52:
c7:bd:dd:a8:be:8e:6d:c5:57:d5:80:cc:78:bc:f0:6d:42:54:
2e:39:85:97:d4:2e:da:9c:37:11:ff:17:f5:f0:62:2c:d5:ef:
a4:47:2b:02:1d:a7:11:f2:cf:67:53:04:00:8a:8e:9a:64:ee:
bc:b0:aa:02:95:32:05:5f:72:07:ec:66:ed:0b:3a:80:c3:98:
a3:f1:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:11 2026 by rpki-client