Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: t07QgacNbTOqNej24amEvZA8Uan++NYRPZKKxzULUqI=
Subject key identifier: 8C:F9:E4:5C:ED:48:20:AE:7C:C1:43:28:2C:38:74:18:98:AF:1C:FD
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019D2A3C802455C22E88A5F89E572D42F3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 06A6
Signing time: Thu 26 Mar 2026 13:01:41 +0000
Manifest this update: Thu 26 Mar 2026 13:01:41 +0000
Manifest next update: Fri 27 Mar 2026 13:01:41 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 3oPqbmct0piF05vv1dgTe7qYbepGj/2m+u5S+bDz0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:80:24:55:c2:2e:88:a5:f8:9e:57:2d:42:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Mar 26 13:01:41 2026 GMT
Not After : Mar 27 13:01:41 2026 GMT
Subject: CN=8cf9e45ced4820ae7cc143282c38741898af1cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:cc:1f:23:d1:c8:f7:f6:bc:b0:0f:ab:b1:
46:dc:dc:4d:bb:f1:34:22:85:a7:6a:aa:3b:88:88:
1a:08:c5:d5:09:c5:71:2c:d0:5f:c8:23:a2:32:28:
06:39:63:1c:27:6e:2a:51:c4:1d:3d:5d:52:b6:07:
42:82:0f:ad:f6:17:67:03:0f:01:ad:cc:ee:97:06:
8b:1c:ab:0e:c8:99:1d:b9:13:e9:35:f3:7c:8a:11:
84:5a:0d:fe:b0:cb:57:eb:20:6e:ba:7f:a9:24:2b:
45:33:13:58:3a:c9:6a:ee:fb:f3:a3:28:5e:a3:95:
92:7d:dc:d2:82:40:34:c2:b5:a5:4f:23:36:40:80:
03:67:27:cd:b2:a3:c0:c2:d9:42:d4:1e:fb:69:7d:
70:85:96:c2:68:46:a0:b6:de:15:dc:d8:21:c0:4d:
59:93:f9:0f:a1:c8:fc:7c:30:ab:00:80:80:f6:e5:
0c:06:39:9a:f5:0b:78:69:5a:5f:ea:d5:92:83:a1:
3b:1f:ee:f7:af:32:44:ef:15:c5:93:53:d5:b9:06:
c7:fc:c1:0a:7f:94:dd:47:5c:eb:4d:1f:bb:cf:c1:
23:77:bd:2a:c0:e0:d1:40:ca:7e:7d:da:b7:63:5c:
50:25:ce:ea:c9:5d:27:c7:f6:03:4d:38:94:72:b9:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:E4:5C:ED:48:20:AE:7C:C1:43:28:2C:38:74:18:98:AF:1C:FD
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:f6:22:34:2d:6c:0c:6d:30:31:b9:86:6f:79:fc:c8:29:
f0:75:91:d4:2f:5b:c2:75:2c:0f:84:1b:86:51:b5:2d:b4:5f:
e6:37:f7:5e:7b:0f:74:01:34:40:9e:d9:3c:49:e1:67:f1:70:
d5:d3:71:70:88:05:06:68:2f:59:12:6f:ff:27:42:7e:d7:fd:
09:07:99:78:e3:3a:a1:42:bf:b0:2b:ee:df:45:ab:77:a8:99:
76:dc:cd:9d:87:f6:7b:93:4c:84:38:9e:96:5c:33:1b:0e:9b:
fd:7d:b9:29:85:81:67:82:e2:0a:15:05:75:ec:a3:e4:93:a8:
b2:41:fa:62:03:18:59:ce:97:a6:c7:8e:b8:35:08:84:fe:3c:
9c:d4:78:9a:68:2e:57:00:28:07:3b:e0:98:64:c1:40:aa:d0:
0b:50:e8:91:cf:15:33:c0:87:68:5b:ac:2c:cd:39:d1:04:01:
04:8f:25:a4:58:4f:30:1b:66:42:ff:0d:27:30:c6:75:9b:6c:
b7:ea:9b:40:e5:5c:db:71:25:cc:03:8a:d3:53:e1:92:61:bf:
21:74:3e:cf:dd:89:f3:a6:2c:79:59:f7:5d:a5:ad:34:a5:32:
e5:04:22:ce:0a:98:29:e2:2d:cb:86:d7:7e:13:f1:30:cf:3a:
49:6d:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:11 2026 by rpki-client