Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File: wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier: phwpgsR4n3JL6vAcrvSVP/UQfAn57ozglbGK7DEMvso=
Subject key identifier: D1:CE:BC:D3:B6:7A:8C:1C:6E:DF:BD:99:AC:56:CA:0B:73:75:1B:89
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer: /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial: 01A03ECDED5DDB488D6D0990114733CFF21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number: 0243
Signing time: Wed 26 Aug 2026 16:01:17 +0000
Manifest this update: Wed 26 Aug 2026 16:01:17 +0000
Manifest next update: Thu 27 Aug 2026 16:01:17 +0000
Files and hashes: 1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: d4v+0J/OY1Tw/YbjH6qIFlrb4+CmMaLWqNgPdTBTBf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:cd:ed:5d:db:48:8d:6d:09:90:11:47:33:cf:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Validity
Not Before: Aug 26 16:01:17 2026 GMT
Not After : Aug 27 16:01:17 2026 GMT
Subject: CN=d1cebcd3b67a8c1c6edfbd99ac56ca0b73751b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:d9:21:39:73:e4:59:c5:4b:43:75:21:de:
cb:e9:8a:d7:f5:58:dc:9a:e5:59:a3:c6:f0:f7:f3:
3e:c0:56:08:ce:0a:06:aa:bd:2a:4b:ca:07:a6:0d:
cc:de:8a:d5:63:6a:0f:ac:01:af:9e:24:04:60:7d:
9c:74:87:2c:52:e4:0e:bd:ca:b7:0c:28:3f:52:2b:
56:9b:f5:99:be:9d:ed:7b:49:6f:60:23:3e:36:b3:
13:d2:3f:6c:e2:f6:34:45:74:0d:85:a9:81:54:2a:
83:1a:5c:76:d3:01:29:c9:91:69:6e:24:b3:4a:7b:
55:78:4d:e3:b5:37:38:10:33:ad:1b:d4:8a:d8:18:
b8:35:ca:a0:65:5b:f6:c2:7e:eb:72:64:88:fe:ea:
11:a7:ac:8e:a2:fd:5d:d1:c4:32:88:f0:11:1a:71:
c0:8c:61:24:8b:e7:30:4e:8a:f6:74:0c:b0:11:42:
d0:62:30:56:a5:0e:1d:30:de:a0:79:83:f0:9a:65:
7f:f0:ac:b2:37:c2:de:ab:7b:26:60:d1:ab:6b:31:
15:20:e2:59:48:26:56:ce:f0:65:b2:d9:20:b0:e3:
29:f6:f6:db:5c:c9:14:c3:99:a2:14:8f:85:37:08:
8a:15:ac:af:ee:55:0f:f3:3a:a8:62:73:e5:23:89:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:BC:D3:B6:7A:8C:1C:6E:DF:BD:99:AC:56:CA:0B:73:75:1B:89
X509v3 Authority Key Identifier:
keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:02:af:06:9f:6f:aa:4c:ee:fa:61:2f:60:d7:01:a5:b1:15:
11:2f:b8:5c:84:45:2f:24:28:6c:2e:d7:0a:a9:a4:2a:ef:ab:
3e:11:41:f4:56:8f:ee:bd:c5:d8:a1:e4:8a:0d:bd:db:89:51:
4e:3f:ff:59:3a:bc:2c:3c:83:76:8a:4d:87:05:56:d0:ed:6c:
14:60:92:bf:db:9e:85:da:d0:16:11:00:0e:0d:06:dc:f0:b9:
c0:c2:be:e3:52:7e:2b:74:76:8e:24:11:ff:64:77:b3:86:ea:
f9:14:f4:08:b8:b2:fa:61:4a:b2:fb:72:35:95:34:a6:cd:51:
dc:aa:8d:c3:dc:4a:7b:f6:44:ae:b6:1b:67:7b:74:4c:39:16:
21:fc:08:6b:60:76:5c:c8:31:62:43:c5:17:81:6b:56:91:ec:
c5:48:60:b0:9d:6f:e9:54:ea:de:37:50:66:6f:2b:91:d0:4c:
81:6f:92:6d:77:82:d7:5e:ce:95:bb:de:d1:dd:6c:8a:7b:05:
44:01:9d:02:8d:73:69:6e:b6:6e:7a:17:65:40:0d:0a:7d:ba:
85:9b:cf:d3:cb:5e:42:7f:90:11:ae:69:18:1f:82:09:09:08:
28:a9:32:5b:f3:f2:bc:70:51:ed:e0:8f:c3:93:5c:d8:1a:c1:
28:6b:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:09:45 2026 by rpki-client