Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File: wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier: y77VWgDdvcTiRpRcb3Q6cC4cWpa87YexfGHiRgq78Mw=
Subject key identifier: 82:37:02:CF:3F:02:22:DC:ED:21:7D:E2:C9:ED:32:1B:BA:76:AE:66
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer: /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial: 019D3A53FEDF878F2F53BFFC0DBA7DD3B6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number: B3
Signing time: Sun 29 Mar 2026 16:01:16 +0000
Manifest this update: Sun 29 Mar 2026 16:01:16 +0000
Manifest next update: Mon 30 Mar 2026 16:01:16 +0000
Files and hashes: 1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: WPmBfbKUyE46jqhGzasRviVGNJDHwp7CFkllGHYrp68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:fe:df:87:8f:2f:53:bf:fc:0d:ba:7d:d3:b6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Validity
Not Before: Mar 29 16:01:16 2026 GMT
Not After : Mar 30 16:01:16 2026 GMT
Subject: CN=823702cf3f0222dced217de2c9ed321bba76ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:ac:22:36:ea:8d:33:7c:a3:a6:37:f8:c6:
4f:94:99:31:fb:3a:07:d4:b3:56:ca:e0:7e:63:b7:
a2:50:e2:30:15:f3:73:c4:a0:89:29:af:6c:70:57:
d7:fe:e1:c3:a2:8c:9c:11:ce:b4:e0:88:6c:4f:44:
ca:2c:26:1e:5e:d6:5d:c3:d5:eb:22:f0:74:04:fe:
fc:65:fc:d1:6d:6e:78:2d:a7:00:bf:63:69:6b:4b:
fe:5d:bc:e4:f7:9d:7a:96:0f:91:22:67:8c:7f:d3:
5a:6c:b8:e3:8b:7a:46:cb:8a:5f:b4:43:57:9e:de:
ee:48:76:58:de:40:8b:74:02:85:b0:ce:01:cc:8d:
c4:d4:be:9b:2b:46:7b:44:ff:29:d4:c3:0f:1a:b4:
95:76:db:35:c4:c1:a3:09:c3:a9:1c:9a:ba:09:8a:
54:1b:d8:96:c5:17:a8:92:3f:44:cc:56:20:4f:65:
40:11:93:de:cf:e1:fb:9a:c8:54:bd:78:c6:cb:d8:
80:c7:2c:29:eb:75:22:6b:a5:42:61:8b:d8:5b:2b:
89:ca:e2:6f:a5:64:91:b6:c1:25:ee:d6:78:46:67:
16:48:e0:13:cc:fe:5d:a0:5a:73:8b:2f:f1:2b:80:
26:00:b1:34:80:2e:71:89:8e:4e:0d:2c:cd:81:e1:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:02:CF:3F:02:22:DC:ED:21:7D:E2:C9:ED:32:1B:BA:76:AE:66
X509v3 Authority Key Identifier:
keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:76:d4:90:d8:43:7f:82:8d:ab:a3:d2:80:08:3d:c1:69:ed:
e0:4c:88:0c:93:dc:44:09:b1:61:55:e1:0b:eb:62:74:4a:b7:
0e:5f:36:76:e0:04:fb:79:ba:33:43:bf:5c:c9:aa:0e:2a:ce:
cf:67:38:f6:47:d9:70:c7:a9:2f:2c:b4:57:2c:c3:e7:6d:05:
7b:c4:43:24:33:41:1e:50:d2:95:4f:80:c0:5e:2c:8f:cc:90:
8f:1f:6c:b5:f1:8d:c1:19:95:dd:f1:d3:c2:f9:37:b3:a5:b2:
4b:a9:f0:09:fd:af:b4:17:2c:da:ec:72:ba:05:4c:de:21:22:
a8:96:60:ca:5e:6d:1c:ca:b9:04:54:9f:b2:af:cc:85:e9:2f:
4f:1b:45:40:8f:01:ba:98:ba:54:8f:d4:4f:ed:ca:50:c6:fb:
9d:c3:c4:34:07:cc:6a:50:ec:11:9a:a7:1a:dd:ff:d1:c8:f0:
cd:0b:44:15:65:77:91:16:11:ca:18:55:0d:51:dd:e1:24:e4:
21:45:33:c1:69:ba:10:4b:15:8a:02:43:26:a4:77:6b:84:c2:
73:00:09:ff:47:40:56:57:49:56:58:ea:c9:41:5e:22:b2:ae:
83:1d:c2:1a:ea:a1:1a:6a:2e:c2:e0:38:67:c4:ad:40:2a:75:
28:48:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:15 2026 by rpki-client