Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: GqbRFspt6MhBPWVcT10RQhIwa0qX4i4BLEN0lQXk9rs=
Subject key identifier: 16:EC:FF:1C:F0:43:70:5D:37:C2:3A:EB:BC:2B:DA:32:F2:16:54:0C
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 01A08B68BF4B6FF2EB7E67FB93A518CABC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 0866
Signing time: Thu 10 Sep 2026 13:01:32 +0000
Manifest this update: Thu 10 Sep 2026 13:01:32 +0000
Manifest next update: Fri 11 Sep 2026 13:01:32 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: pmCmbk65e335XLNIgLQ5yU/sd/6ebNBbcwTNCH82x3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:bf:4b:6f:f2:eb:7e:67:fb:93:a5:18:ca:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Sep 10 13:01:32 2026 GMT
Not After : Sep 11 13:01:32 2026 GMT
Subject: CN=16ecff1cf043705d37c23aebbc2bda32f216540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:01:67:72:73:a1:d1:ac:3e:df:80:08:c9:
7f:1a:74:f8:6c:13:9b:c8:59:b7:cf:59:da:12:b1:
b5:a7:7f:1e:2e:95:b2:92:8a:2a:c3:b0:a8:33:1d:
5a:73:90:5d:af:8d:4a:6b:5a:1d:dd:53:85:94:ff:
87:fb:36:3e:65:08:ca:ef:d5:f5:1d:89:da:94:9f:
92:68:12:63:02:10:21:57:14:c4:84:99:de:9f:8f:
52:42:be:a1:17:50:1a:05:aa:bc:83:db:7b:c4:ac:
d1:bf:0c:17:fc:94:fd:92:5e:c0:b9:25:ec:a8:5d:
1f:20:bc:a9:dc:9b:63:24:e8:a4:be:8b:ad:65:a3:
b6:68:96:36:1f:8b:fe:30:67:bc:24:61:a6:0d:28:
d6:6d:55:2d:12:e0:7a:39:c4:fd:9b:03:cc:2b:e1:
79:f9:df:d0:0f:55:0e:db:5b:4a:7c:97:6a:b5:ef:
23:86:98:d6:28:89:0f:2f:eb:68:5d:01:76:8c:e2:
e4:2b:0f:23:89:eb:ee:2e:3b:04:29:86:88:a9:65:
f8:80:de:54:56:49:ce:93:ba:64:3c:5d:d9:93:94:
ac:7c:15:bf:8d:e8:8e:5b:3d:64:d8:74:c4:94:7c:
50:d1:4d:c7:39:00:41:03:24:19:af:e6:a5:f8:a9:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:FF:1C:F0:43:70:5D:37:C2:3A:EB:BC:2B:DA:32:F2:16:54:0C
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:33:4d:5b:31:6c:7c:e9:01:c3:54:62:0a:b8:1b:ab:2f:c3:
e3:b5:2f:ac:fe:69:97:57:d7:f3:34:36:f5:c8:e3:6f:c7:78:
64:59:de:71:a5:97:4a:7e:2b:03:06:07:04:ea:ce:01:44:47:
3c:b5:8e:2c:2b:b7:9c:c2:a0:c3:d6:69:12:0f:a5:06:e8:0b:
39:38:a0:0c:79:a0:cd:8f:72:7a:5c:77:47:9c:3c:68:c2:e6:
18:42:27:bf:05:25:93:6f:d8:c9:67:83:d9:a7:35:91:7c:d0:
c2:44:1c:52:7c:91:15:1d:d1:9a:fc:7a:15:d5:25:9a:8e:4e:
dd:76:ed:55:1f:72:c9:c0:6a:b7:c7:77:e7:11:b1:a5:dd:51:
39:85:72:ce:29:fc:59:e1:ad:36:e0:85:af:6a:a0:99:fb:d3:
8f:b3:2a:85:7b:13:90:c4:b3:16:be:51:fd:1d:3b:c6:b7:17:
ef:d2:4b:a4:9d:dd:95:cd:36:15:f6:37:5c:a2:bc:22:aa:92:
4b:9c:ec:b9:c5:0f:9e:4a:3c:f1:85:68:67:9d:2b:c9:5b:f6:
d6:2d:c2:3b:32:64:a0:1d:41:d8:b3:14:f1:00:47:e1:7c:d3:
d4:25:b9:d1:78:56:1c:f9:50:a5:11:88:9e:50:0c:b2:42:e3:
3c:25:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:55 2026 by rpki-client