
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
File: WnZf6z4obI26qbHWJoLkT76AByI.mft (raw, json)
Hash identifier: l3TeVTLvNQ7WSxHmIjzOK7oE8cjoksOc+RqK0Zi7kiU=
Subject key identifier: 2D:E8:72:8C:E1:04:F4:AC:23:67:24:D4:BF:28:74:33:AF:87:A1:56
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Certificate issuer: /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial: 01A0C0D6131FDF14DBB1DF4F36BDDE38806C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
Manifest number: 0139
Signing time: Sun 20 Sep 2026 22:00:49 +0000
Manifest this update: Sun 20 Sep 2026 22:00:49 +0000
Manifest next update: Mon 21 Sep 2026 22:00:49 +0000
Files and hashes: 1: KFB95yaF5_FIPvwwGwGsxqSxMs8.roa (hash: 3ZADI8L29it0agLfCEEeq7mz9EEsHFHU3bBFXh0L8uI=)
2: WnZf6z4obI26qbHWJoLkT76AByI.crl (hash: MjKX0oYGRWflnj0SAke98BNzj5MjVUwQboyLq24u85o=)
3: i7pkQ_qCDYcLrdDN91rJhafVESI.asa (hash: AiqBocMFUWHp3rzWKv/UFjipRopIcsJnP0v/MVSOmZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d6:13:1f:df:14:db:b1:df:4f:36:bd:de:38:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Validity
Not Before: Sep 20 22:00:49 2026 GMT
Not After : Sep 21 22:00:49 2026 GMT
Subject: CN=2de8728ce104f4ac236724d4bf287433af87a156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:8f:b6:f3:1d:a1:fa:e3:96:dc:ad:ed:f4:
c4:79:53:28:fb:e5:73:c7:ea:56:60:4b:c8:3a:c7:
a7:25:75:10:c2:13:3c:41:06:96:72:84:97:d1:42:
2a:fb:1b:0a:25:a4:eb:d5:94:7c:32:5e:01:c8:c4:
86:70:79:b7:27:a7:39:e5:50:7b:94:54:d5:4b:84:
1c:af:b9:fc:c9:9c:f7:cd:87:b9:33:6a:2f:6f:02:
1c:4d:07:22:fe:02:a8:07:67:49:38:15:ed:5f:44:
d0:6e:ce:7c:cd:7b:ef:c4:bb:0c:0a:b5:b8:8d:5e:
b7:6b:d6:59:f8:d3:63:ca:7b:8c:e8:46:36:57:85:
78:76:f3:4f:54:4f:9c:15:4d:e4:45:f2:d4:17:e0:
66:f5:79:39:fc:5f:61:a6:81:72:d4:5f:39:73:b0:
1b:3c:2b:81:e3:89:91:df:cb:47:3e:c4:00:b5:0b:
01:d2:bf:9f:f4:5b:06:c3:5a:ef:54:b4:91:1e:5f:
61:6a:ed:1c:f5:a9:cf:39:1d:fb:0e:4a:69:77:b1:
52:17:81:44:8f:f7:41:52:e9:1b:ee:7d:d9:76:d3:
b8:b7:60:43:a4:29:03:85:09:61:08:39:83:9f:0f:
5a:ba:5d:58:98:52:44:0a:00:4f:69:a2:b5:25:2e:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:72:8C:E1:04:F4:AC:23:67:24:D4:BF:28:74:33:AF:87:A1:56
X509v3 Authority Key Identifier:
keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9e:9d:91:b0:74:94:0d:82:31:d6:db:44:42:8a:d6:ab:fd:
b3:5f:a6:de:8c:a6:30:29:af:3a:9c:f2:cf:b2:45:a2:f3:61:
82:a0:f0:0f:ce:9f:8e:46:e7:3f:fb:4c:0c:09:69:ed:6a:ea:
f9:e8:df:2d:77:eb:d8:e6:9f:0c:b7:7e:49:f4:69:09:55:52:
0b:55:fa:76:dd:e0:02:02:b8:9d:1d:f4:06:6a:3c:bc:19:b0:
8a:1e:67:55:88:c7:c9:9a:e0:4d:d5:0f:4e:fc:5b:bd:81:66:
a0:85:f6:d8:a4:25:17:aa:a2:88:18:5b:f3:ec:0f:93:90:31:
ae:62:85:cb:77:d3:62:b4:73:6a:55:16:00:a3:76:3c:90:5e:
d8:4a:b4:f5:e3:70:39:84:e7:45:d7:be:e2:58:b3:6b:da:9c:
93:64:b7:b8:6c:e6:8e:bf:37:88:56:bf:34:d1:d4:57:e1:7b:
bd:ad:db:0c:88:37:c3:63:d9:2f:31:84:56:8f:97:2a:c1:a2:
63:fd:bb:48:f0:59:0b:e8:96:f7:93:35:7a:6c:57:5b:48:20:
07:40:5e:ab:4b:a6:3f:c5:f8:f0:00:81:bb:83:de:dd:a9:af:
d3:88:d5:e3:e3:b7:bf:42:ee:4d:d8:f9:af:81:ea:85:12:54:
bc:84:b5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1hMf3xTbsd9PNr3eOIBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzY1ZmViM2UyODZjOGRiYWE5YjFkNjI2ODJlNDRmYmU4
MDA3MjIwHhcNMjYwOTIwMjIwMDQ5WhcNMjYwOTIxMjIwMDQ5WjAzMTEwLwYDVQQD
EygyZGU4NzI4Y2UxMDRmNGFjMjM2NzI0ZDRiZjI4NzQzM2FmODdhMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFmPtvMdofrjltyt7fTEeVMo++Vz
x+pWYEvIOsenJXUQwhM8QQaWcoSX0UIq+xsKJaTr1ZR8Ml4ByMSGcHm3J6c55VB7
lFTVS4Qcr7n8yZz3zYe5M2ovbwIcTQci/gKoB2dJOBXtX0TQbs58zXvvxLsMCrW4
jV63a9ZZ+NNjynuM6EY2V4V4dvNPVE+cFU3kRfLUF+Bm9Xk5/F9hpoFy1F85c7Ab
PCuB44mR38tHPsQAtQsB0r+f9FsGw1rvVLSRHl9hau0c9anPOR37Dkppd7FSF4FE
j/dBUukb7n3ZdtO4t2BDpCkDhQlhCDmDnw9aul1YmFJECgBPaaK1JS4p7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3ocozhBPSsI2ck1L8odDOvh6FWMB8GA1UdIwQY
MBaAFFp2X+s+KGyNuqmx1iaC5E++gAciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTIt
NGU3Y2UxMDI4ZDE0LzEvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTItNGU3Y2UxMDI4ZDE0
LzEvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ6dkbB0
lA2CMdbbREKK1qv9s1+m3oymMCmvOpzyz7JFovNhgqDwD86fjkbnP/tMDAlp7Wrq
+ejfLXfr2OafDLd+SfRpCVVSC1X6dt3gAgK4nR30Bmo8vBmwih5nVYjHyZrgTdUP
TvxbvYFmoIX22KQlF6qiiBhb8+wPk5AxrmKFy3fTYrRzalUWAKN2PJBe2Eq09eNw
OYTnRde+4liza9qck2S3uGzmjr83iFa/NNHUV+F7va3bDIg3w2PZLzGEVo+XKsGi
Y/27SPBZC+iW95M1emxXW0ggB0Beq0umP8X48ACBu4Pe3amv04jV4+O3v0LuTdj5
r4HqhRJUvIS1DQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:37:27 2026 by rpki-client