Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
File: wBntHgH8BRbh56sRjcGEebLbEwo.mft (raw, json)
Hash identifier: bM/IgLze0UtkzcwG8BCgUa5Vnil1FWGiys6bMttA5yA=
Subject key identifier: B4:11:0F:D9:53:EB:E6:CF:57:15:D5:86:BC:79:0B:19:3D:F9:A6:D5
Authority key identifier: C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A
Certificate issuer: /CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
Certificate serial: 01A13BC9C77A3888F1570D7AE3A8EED508E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
Manifest number: 0D
Signing time: Wed 14 Oct 2026 19:00:41 +0000
Manifest this update: Wed 14 Oct 2026 19:00:41 +0000
Manifest next update: Thu 15 Oct 2026 19:00:41 +0000
Files and hashes: 1: 3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa (hash: FAtZ3OFvDnkB+SIrUS7nfShabEffRtV9pq700sDO71A=)
2: wBntHgH8BRbh56sRjcGEebLbEwo.crl (hash: ++ZymMUFHc/JAbWTGCOcGN54FsaMXttZdHI5+xcqdpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:c7:7a:38:88:f1:57:0d:7a:e3:a8:ee:d5:08:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
Validity
Not Before: Oct 14 19:00:41 2026 GMT
Not After : Oct 15 19:00:41 2026 GMT
Subject: CN=b4110fd953ebe6cf5715d586bc790b193df9a6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:0d:4d:d5:5d:61:fc:30:e5:7b:6a:10:89:
49:fb:f9:fc:83:8e:11:61:f0:60:07:a5:7c:f1:ca:
c7:ae:da:af:bc:a9:08:da:a1:86:70:4e:92:7f:4b:
75:a5:80:3f:2f:67:70:9b:d0:82:6d:ef:3b:9c:c1:
7f:0d:28:53:c9:43:45:92:7b:73:94:e5:76:93:03:
3a:d3:8f:4e:32:0d:b4:e2:87:4a:48:b4:2d:c0:09:
ba:18:81:ed:23:ef:97:ba:03:7d:27:7d:b8:bd:2c:
90:cf:c5:d7:28:f3:8e:71:91:72:92:1f:8c:1a:50:
b1:57:ae:a6:1a:a9:37:38:98:57:34:48:50:a6:ee:
55:a5:c0:cf:ba:9f:a2:c5:b2:04:b1:24:ba:85:0e:
1e:a5:53:1b:6b:c8:f9:ab:2f:28:41:e8:53:42:65:
8b:6e:90:fe:fe:82:ac:a8:8a:47:67:b7:07:54:84:
31:5f:f3:c8:cb:b8:46:aa:dd:40:e0:8a:c5:f1:8b:
f5:8e:dc:25:e9:ed:f5:b1:27:2f:5a:98:4b:99:d5:
c6:92:c8:7b:a0:8d:3c:8d:73:ce:eb:9b:6b:b2:d3:
c2:72:a3:cf:97:93:65:86:24:42:52:17:62:62:7f:
19:b7:55:40:26:c8:35:34:b1:19:48:ed:f6:1d:55:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:0F:D9:53:EB:E6:CF:57:15:D5:86:BC:79:0B:19:3D:F9:A6:D5
X509v3 Authority Key Identifier:
keyid:C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8a:95:6b:5f:8b:9d:fa:e7:a3:a8:39:d8:cd:10:4f:90:68:
8f:3f:0f:3e:78:14:c6:58:ed:db:d2:37:6d:11:ca:74:e9:51:
17:6b:de:7b:1d:f7:df:c3:cf:c3:c9:a8:48:96:89:35:f4:86:
30:c7:64:f1:98:f3:93:58:5e:84:b7:d3:7d:15:72:f9:a8:39:
c4:09:2e:27:61:e0:5d:7f:f2:d4:21:ec:3b:f8:e2:43:62:42:
bf:b1:52:ae:1f:cd:c8:52:ab:5d:8c:87:f9:0b:8e:a9:de:ad:
af:5d:d2:7c:1e:ea:00:91:aa:d1:95:fa:07:07:34:ea:69:01:
b1:74:0f:d6:a0:6e:df:6e:34:c3:98:aa:4d:39:c7:d0:bc:1e:
2c:d4:5b:c6:f6:72:8d:1c:bb:31:04:a4:1f:b0:f9:9a:b3:da:
ea:11:7d:ed:08:53:8e:2a:b7:0e:0e:2b:cc:21:ab:73:d2:bd:
51:1e:06:f2:52:57:2d:ce:00:9d:b9:0a:57:a0:43:8e:b1:d5:
fe:b0:f4:5d:2d:25:41:4f:cf:b5:53:4d:83:eb:bb:be:f2:4c:
34:91:75:26:48:6e:73:d5:49:92:af:42:97:af:c2:a9:49:1a:
6b:e9:d7:26:b0:65:8d:83:19:b8:e0:cc:9e:b8:a7:44:14:df:
54:3a:d4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7ycd6OIjxVw1646ju1QjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTllZDFlMDFmYzA1MTZlMWU3YWIxMThkYzE4NDc5YjJk
YjEzMGEwHhcNMjYxMDE0MTkwMDQxWhcNMjYxMDE1MTkwMDQxWjAzMTEwLwYDVQQD
EyhiNDExMGZkOTUzZWJlNmNmNTcxNWQ1ODZiYzc5MGIxOTNkZjlhNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBMNTdVdYfww5XtqEIlJ+/n8g44R
YfBgB6V88crHrtqvvKkI2qGGcE6Sf0t1pYA/L2dwm9CCbe87nMF/DShTyUNFkntz
lOV2kwM6049OMg204odKSLQtwAm6GIHtI++XugN9J324vSyQz8XXKPOOcZFykh+M
GlCxV66mGqk3OJhXNEhQpu5VpcDPup+ixbIEsSS6hQ4epVMba8j5qy8oQehTQmWL
bpD+/oKsqIpHZ7cHVIQxX/PIy7hGqt1A4IrF8Yv1jtwl6e31sScvWphLmdXGksh7
oI08jXPO65trstPCcqPPl5NlhiRCUhdiYn8Zt1VAJsg1NLEZSO32HVUGrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQRD9lT6+bPVxXVhrx5Cxk9+abVMB8GA1UdIwQY
MBaAFMAZ7R4B/AUW4eerEY3BhHmy2xMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JudEhnSDhCUmJoNTZzUmpjR0VlYkxiRXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNjVkNGYtODZmNS00NzEzLThlNGIt
MTFlOTA4NjYxMmQ0LzEvd0JudEhnSDhCUmJoNTZzUmpjR0VlYkxiRXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNjVkNGYtODZmNS00NzEzLThlNGItMTFlOTA4NjYxMmQ0
LzEvd0JudEhnSDhCUmJoNTZzUmpjR0VlYkxiRXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoqVa1+L
nfrno6g52M0QT5Bojz8PPngUxljt29I3bRHKdOlRF2veex3338PPw8moSJaJNfSG
MMdk8Zjzk1hehLfTfRVy+ag5xAkuJ2HgXX/y1CHsO/jiQ2JCv7FSrh/NyFKrXYyH
+QuOqd6tr13SfB7qAJGq0ZX6Bwc06mkBsXQP1qBu3240w5iqTTnH0LweLNRbxvZy
jRy7MQSkH7D5mrPa6hF97QhTjiq3Dg4rzCGrc9K9UR4G8lJXLc4AnbkKV6BDjrHV
/rD0XS0lQU/PtVNNg+u7vvJMNJF1Jkhuc9VJkq9Cl6/CqUkaa+nXJrBljYMZuODM
nrinRBTfVDrUOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:09:08 2026 by rpki-client