Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier: wsdFd3ua6u10/Nv6AOBe3qpQKlN+MHPVMNbRQSQSsdA=
Subject key identifier: B2:38:EC:11:9F:90:44:89:9E:67:53:19:54:98:DF:2B:5F:8F:4A:B1
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 019D37C03C18D8ED9DAF88ED3D49CB3B1543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number: 0890
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: ONMgyTzVR5emyEDDSBCua08dR-A.roa (hash: DRu6baPNaCMzMD4Wrd0HJWjVzs23fBWU2Hq2dCxlvQQ=)
2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: aqZQ4cQzcmiHE6N/2QA6miibz4kncFdFIiXFqisGRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3c:18:d8:ed:9d:af:88:ed:3d:49:cb:3b:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=b238ec119f9044899e6753195498df2b5f8f4ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:91:4e:ef:e3:74:74:fe:89:dd:70:e9:b4:
9c:e0:c8:bd:48:73:0a:c7:4e:b8:94:3b:7e:df:f1:
2a:e5:08:6e:f3:67:59:67:44:6b:dc:e1:e5:5d:75:
ab:15:d2:07:d5:8d:77:76:56:1d:5c:61:d0:37:be:
8f:51:78:49:0a:3d:a1:0e:97:64:d0:0b:92:75:c5:
f0:07:fc:26:18:6a:9b:28:4a:26:8b:2f:de:93:a7:
56:f2:56:0c:51:8c:82:6f:a6:b6:6c:28:4e:19:17:
a5:83:6a:d8:c1:fa:eb:da:f4:a7:6d:a0:29:83:ac:
0f:4a:62:16:15:17:d7:fe:f7:0d:d2:c9:54:9e:4e:
92:48:02:b5:31:8d:6e:1c:e0:63:35:10:b5:7a:fd:
d9:f6:42:dc:df:69:78:09:2e:3f:b0:8a:17:60:65:
70:fd:0f:22:1d:02:31:b4:17:63:26:b7:46:37:11:
54:1a:59:7f:24:e1:f8:f8:3d:3a:59:a9:e4:f0:43:
32:a5:52:9b:e5:2c:c8:14:19:5c:d6:d2:9a:a6:af:
c9:2b:2d:1f:4e:fe:91:6d:25:30:af:08:12:7f:be:
9b:03:ab:d4:4c:e7:1e:3e:b2:f4:80:53:26:2b:1d:
7e:99:6e:c4:57:9e:d7:2a:cb:e0:33:9f:61:d5:03:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:EC:11:9F:90:44:89:9E:67:53:19:54:98:DF:2B:5F:8F:4A:B1
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:c5:5b:04:9a:0e:49:cc:94:61:26:ea:bd:d5:93:a6:67:
e7:c4:20:c9:cb:ad:12:7b:66:ec:d7:9f:f8:cc:10:8a:81:fe:
14:63:41:f0:b5:8f:eb:42:5c:1a:b5:c8:ce:e9:db:8b:af:1a:
46:ac:a6:c5:73:5b:26:a9:07:77:b9:6b:e8:6e:ab:cf:82:9f:
c1:c4:82:7c:5d:87:e8:2a:00:ff:29:36:35:11:b3:ff:ee:7f:
f0:2a:2d:9b:91:18:95:ad:48:8d:6b:cc:c6:a7:63:39:fb:08:
26:df:d7:ec:30:50:9f:16:36:8e:ee:bd:6a:af:46:8a:3c:ce:
ad:be:19:e0:14:2e:23:e8:0c:c3:7b:41:e1:22:fd:4f:9a:ab:
32:ba:87:ee:28:22:ba:0d:6d:7e:02:b7:37:32:6c:6e:ac:3c:
82:a5:b0:1d:0e:34:65:07:f1:cf:a0:8a:02:67:dd:cc:53:78:
84:08:be:fe:3e:7e:37:99:67:73:6e:c6:31:a1:0e:54:60:6d:
3f:ee:1b:88:9e:49:a8:fd:96:f4:e7:be:b1:93:bc:44:d2:da:
93:ca:19:3f:60:c8:f1:fa:58:61:28:b9:14:6c:86:c6:6f:e1:
91:10:e5:61:f0:81:08:5b:c1:ee:ba:79:01:1b:8a:7e:59:8a:
0e:86:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:57 2026 by rpki-client