Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: jQhfdsoJUqelswIjLhq8UfwdnCP/YeAS/yKnFDoNVNw=
Subject key identifier: AA:15:A5:D3:82:E3:D3:86:C5:75:0E:15:4E:4A:80:E1:54:59:94:1E
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019D39AE774F87797891DD131B789CD6A201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 06AE
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 3cYoWv7kF74ZBbxoEJfJAMMJX5o58DOFOVP1mO6DwV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:77:4f:87:79:78:91:dd:13:1b:78:9c:d6:a2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=aa15a5d382e3d386c5750e154e4a80e15459941e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:cd:69:dc:85:24:8f:df:ce:98:03:eb:5c:
f2:ac:32:7c:ad:24:1d:00:77:b6:f7:33:c7:1a:e9:
cb:66:8d:77:7f:01:b0:3c:51:54:92:e2:32:b5:b2:
a9:d7:3f:71:f1:7d:4e:a1:71:f5:7f:7c:dd:63:2a:
d2:52:eb:20:f1:1b:e6:d7:6a:39:d0:65:d1:92:d0:
8c:9e:6e:7b:23:d7:df:2a:14:b6:8f:58:20:b5:8e:
fc:4c:a9:74:bc:43:80:11:60:17:a5:09:69:fa:7a:
e7:64:8d:2b:b0:b3:fd:b2:01:d1:d6:90:36:e6:39:
c5:b2:30:ea:8d:fa:7e:b5:78:50:07:34:7a:94:bf:
7c:50:f3:82:e1:93:8b:2c:8d:49:dd:5e:af:d7:19:
60:3b:70:38:29:2a:bf:ee:57:d1:e0:3a:a7:2c:5d:
41:66:bf:66:91:86:30:a0:d0:64:a0:9a:87:44:9d:
c9:b9:af:3a:bb:59:74:08:37:bc:88:3e:b1:09:af:
19:0d:0c:cd:26:49:82:cb:27:d8:d8:12:16:d8:91:
65:c7:3d:ac:4c:f6:ca:f1:21:82:12:ee:d8:4a:2a:
d7:38:27:44:08:0d:da:62:28:30:b6:fb:25:70:2b:
ab:90:69:21:73:36:d1:8c:01:92:aa:e1:cb:b4:a4:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:A5:D3:82:E3:D3:86:C5:75:0E:15:4E:4A:80:E1:54:59:94:1E
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4c:24:8b:87:64:73:56:f1:ee:90:2f:53:89:c4:79:24:f0:
c9:0a:64:6c:1d:c4:15:26:1e:90:1f:cd:84:af:14:cc:47:87:
c9:88:9c:64:83:ca:04:ac:fd:05:cf:18:25:7e:07:59:26:95:
9c:05:40:73:9b:47:0b:bd:cc:3b:4c:26:32:4a:81:a0:42:ff:
61:88:3d:7e:4d:7a:91:d4:d3:06:d3:82:8f:db:d8:fa:05:48:
f0:cd:1d:27:1c:8f:ff:47:01:6c:43:3d:8b:38:79:0d:27:39:
19:0f:f6:6c:3c:5d:c5:bc:29:dc:07:8f:81:ba:68:53:53:b5:
1e:6a:46:f1:db:f1:cb:01:bc:5a:39:34:eb:22:cb:85:81:55:
78:68:24:58:0b:7b:3d:ef:cb:54:20:9e:30:36:33:5a:66:3d:
05:f6:9c:18:e0:dc:2e:27:65:df:2a:66:91:b1:de:c1:8e:96:
b0:c7:66:d3:7b:1d:24:ac:96:bf:a5:5c:57:79:0f:44:0b:03:
44:d5:22:10:a2:74:58:93:2b:6a:9e:ff:dd:b0:48:f5:31:fd:
5c:8c:0f:92:c5:6e:54:36:1b:01:d6:44:ff:74:28:5f:f8:82:
41:36:97:3a:35:04:4f:8a:a5:b8:20:68:80:f8:a8:21:c2:27:
b9:62:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:06 2026 by rpki-client