Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File: WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier: xQZnswzIplPoG6aFAReFvg5vbBF/LF+o/AXoyMC6n04=
Subject key identifier: A8:DC:20:DA:EC:24:F9:70:81:B9:27:3B:77:86:93:AF:37:95:89:7C
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 019D25BA8B6468D0D5EA6F8FFA18F455E46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number: 132F
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa (hash: acAc33rPF2ddnrrVmw/BW6ayY7XOhe80s7zul9nM5JA=)
2: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: wC0efzDhI1wV5nguG8khUF6DaIwonSvggmec2uob2Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8b:64:68:d0:d5:ea:6f:8f:fa:18:f4:55:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=a8dc20daec24f97081b9273b778693af3795897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:44:4f:7e:8c:d2:4a:9e:89:bd:fd:2a:05:
34:db:5c:c1:1d:c9:c3:1a:f6:55:9d:10:73:bc:22:
19:65:8b:bf:01:64:dc:81:e1:9c:e0:82:31:81:80:
73:58:4c:9a:0a:d2:d3:4b:5c:48:ac:66:16:20:88:
47:81:11:4f:1b:bc:29:84:10:ec:bc:db:e4:a1:f1:
e3:3f:50:70:0b:50:56:b8:20:5b:67:c3:96:3e:d0:
97:19:a5:7f:2a:ff:25:a7:30:d3:7b:26:f2:6e:59:
1a:9d:b8:00:32:5f:1a:a3:d6:37:f8:6b:f8:b0:da:
0d:79:01:69:19:f2:c8:e7:12:0a:76:0f:92:9b:5e:
be:fc:78:31:c4:43:01:53:cd:03:2c:d5:a9:f5:62:
88:35:dc:8c:4e:1c:64:2c:36:a5:c2:89:9c:1c:85:
ee:c3:aa:15:78:41:d9:44:46:ac:85:28:18:47:d3:
8a:8b:c1:2f:7c:3a:b0:8c:06:ce:e2:3e:c5:17:9f:
eb:1a:dc:34:c1:6e:17:91:17:c2:a9:9b:b3:a9:bf:
1c:23:74:06:57:94:af:fd:bf:4c:4c:4b:ad:df:4b:
8b:bb:25:7c:fe:40:22:db:60:82:5e:98:75:3e:db:
6d:fa:5e:ef:e3:e8:c8:23:9e:88:08:5c:f2:0e:1b:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:20:DA:EC:24:F9:70:81:B9:27:3B:77:86:93:AF:37:95:89:7C
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8c:75:84:0f:3d:29:14:5a:e6:6b:c9:3a:b5:0b:c8:1f:e8:
24:5b:80:c5:32:f1:a2:65:ef:16:7a:83:94:33:c0:24:bb:9e:
eb:0b:30:b8:24:a6:10:72:99:5c:bf:01:24:a1:c0:89:98:15:
78:48:5d:38:de:ca:b1:17:86:42:0e:c3:be:e9:b4:71:1d:16:
3d:e0:8d:26:7d:bb:85:c6:48:02:1c:b2:ee:95:a3:a0:5d:af:
49:db:86:0e:2a:1a:81:e0:f9:fc:cf:ba:ac:8c:0a:a1:79:71:
94:e5:f3:7b:7b:83:f7:38:1e:c8:da:78:82:70:d9:ae:24:af:
bd:1e:14:22:0e:bd:29:57:54:62:18:a2:66:3b:04:ec:c1:3e:
72:7b:5f:1d:6e:72:da:ec:51:2a:44:93:6d:4e:fd:a0:c6:97:
cc:4e:9b:7d:c8:52:17:7d:94:2a:c4:02:73:62:17:61:73:de:
99:d5:50:71:ea:57:48:b9:ec:49:50:37:74:b5:11:17:af:26:
c3:45:56:d1:19:f9:73:0f:38:bb:01:de:21:6b:a8:eb:81:fc:
db:77:93:07:5d:65:99:38:d8:9c:98:4d:d2:35:a3:e9:75:a2:
cb:a3:ee:c7:b6:ad:39:86:ef:fa:44:8b:f6:42:06:9d:86:7b:
12:da:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:53 2026 by rpki-client