Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier: LhnabBxYlGVZDy1hKlDZCj5tnTgfc3Tqjdbp0f/k/4k=
Subject key identifier: 37:07:C1:94:27:BD:A9:20:A7:DA:F7:85:10:41:20:2A:72:9D:04:75
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 019D284E0CA915959C748DADEECECB3E2276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number: 0888
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: ONMgyTzVR5emyEDDSBCua08dR-A.roa (hash: DRu6baPNaCMzMD4Wrd0HJWjVzs23fBWU2Hq2dCxlvQQ=)
2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: U8IG/oSPv7cE+NBbsV1U7ellmbFLHVP2PZtAUCVziMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0c:a9:15:95:9c:74:8d:ad:ee:ce:cb:3e:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=3707c19427bda920a7daf7851041202a729d0475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:8c:97:26:a5:7b:e8:83:ee:c0:b3:ac:d4:
19:5c:b8:e1:18:4e:18:8d:77:15:a7:d7:29:1b:40:
04:13:b3:d1:2e:1c:e6:e0:3b:96:d6:66:55:7b:83:
56:91:e8:0e:df:2f:be:23:b5:0e:77:6d:05:8d:c4:
b9:c3:13:6c:d5:09:bc:38:bf:7a:20:18:72:7f:c2:
f2:ba:df:c4:39:21:77:43:1c:e1:95:14:37:4b:56:
1e:c6:4e:c3:8d:99:66:76:95:19:d9:61:97:2d:d2:
d8:81:eb:86:e2:27:f9:cd:d6:ec:79:17:9b:80:04:
59:96:3f:cc:ed:9d:6b:6b:71:73:45:55:e3:13:3d:
59:ad:20:a3:ec:9f:5c:72:3e:d3:c7:b1:07:17:c4:
df:a0:c6:d0:0d:43:65:8c:2c:15:03:44:17:23:71:
03:af:c6:3e:16:10:4d:83:b7:5f:00:3f:ff:e9:48:
44:7b:ed:35:96:d9:2c:8e:74:db:70:36:41:32:95:
eb:19:f3:55:23:f8:c2:d0:fe:ac:97:1c:9d:a4:62:
e7:37:da:ea:4c:08:ce:88:1c:f0:f1:a8:b3:60:cd:
a6:d4:cf:60:04:f9:02:2a:02:40:95:f6:61:16:29:
9c:70:42:19:f8:e4:c7:25:e3:7f:9d:f5:6f:43:d5:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:C1:94:27:BD:A9:20:A7:DA:F7:85:10:41:20:2A:72:9D:04:75
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:0f:c0:9e:80:9d:ea:fc:b2:9a:84:6a:b4:0e:9b:39:34:
49:5e:d7:69:15:c4:a3:62:46:5d:8d:01:96:40:36:d9:84:af:
b4:2f:0a:08:39:81:3f:82:5b:4d:cb:b3:a5:88:05:ed:4b:69:
5f:c8:21:b8:58:a7:75:1f:e3:07:e5:b0:6c:03:96:cc:5d:57:
c8:b1:02:ae:48:80:62:83:76:0c:9d:d7:4b:a8:84:00:2c:94:
3b:7f:95:8f:d7:9e:fc:e5:55:21:ac:25:52:6d:a3:46:cb:07:
a6:29:cc:9e:b6:df:3d:33:5e:96:ba:a8:0e:4e:fc:53:92:75:
96:f3:e4:f1:86:c7:f4:bb:2e:60:97:d9:3c:2f:a8:6c:83:7f:
5b:8b:a8:82:c2:88:db:81:37:18:c8:ce:c0:e9:55:e7:1e:5a:
3e:d9:7d:f7:e3:20:a3:3e:49:20:5f:b7:2e:aa:d5:95:27:af:
59:31:2e:d2:3d:92:8b:22:91:fd:d1:82:8f:3c:02:54:2a:0c:
51:e2:3a:dd:94:a8:0b:0f:03:00:33:0f:7b:eb:e2:f1:7d:0b:
7e:11:5b:b2:6c:5b:3a:06:29:43:63:48:14:45:f1:4f:27:15:
cb:90:a1:1f:2c:4b:12:70:f5:62:34:e3:a6:39:bc:99:a2:e3:
a6:53:38:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgypFZWcdI2t7s7LPiJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzM2ZhZGQxMjdlNjVjZDkwZGUzZTk1NjhlNWNiY2ZiNDhj
OWIyNGEwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD
EygzNzA3YzE5NDI3YmRhOTIwYTdkYWY3ODUxMDQxMjAyYTcyOWQwNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf+Mlyale+iD7sCzrNQZXLjhGE4Y
jXcVp9cpG0AEE7PRLhzm4DuW1mZVe4NWkegO3y++I7UOd20FjcS5wxNs1Qm8OL96
IBhyf8Lyut/EOSF3QxzhlRQ3S1Yexk7DjZlmdpUZ2WGXLdLYgeuG4if5zdbseReb
gARZlj/M7Z1ra3FzRVXjEz1ZrSCj7J9ccj7Tx7EHF8TfoMbQDUNljCwVA0QXI3ED
r8Y+FhBNg7dfAD//6UhEe+01ltksjnTbcDZBMpXrGfNVI/jC0P6slxydpGLnN9rq
TAjOiBzw8aizYM2m1M9gBPkCKgJAlfZhFimccEIZ+OTHJeN/nfVvQ9XrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcHwZQnvakgp9r3hRBBICpynQR1MB8GA1UdIwQY
MBaAFMM/rdEn5lzZDePpVo5cvPtIybJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTct
YTNmNjFlMzBiNTE0LzEvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTctYTNmNjFlMzBiNTE0
LzEvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKgPwJ6A
ner8spqEarQOmzk0SV7XaRXEo2JGXY0BlkA22YSvtC8KCDmBP4JbTcuzpYgF7Utp
X8ghuFindR/jB+WwbAOWzF1XyLECrkiAYoN2DJ3XS6iEACyUO3+Vj9ee/OVVIawl
Um2jRssHpinMnrbfPTNelrqoDk78U5J1lvPk8YbH9LsuYJfZPC+obIN/W4uogsKI
24E3GMjOwOlV5x5aPtl99+Mgoz5JIF+3LqrVlSevWTEu0j2SiyKR/dGCjzwCVCoM
UeI63ZSoCw8DADMPe+vi8X0LfhFbsmxbOgYpQ2NIFEXxTycVy5ChHyxLEnD1YjTj
pjm8maLjplM4JQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:36 2026 by rpki-client