Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: TKyB3n7/uO5xPwsFk7YiOfKG+QnjO3mjk1M+Cw+Pg0A=
Subject key identifier: 5A:A2:CB:64:87:3F:4E:6A:FA:A6:1C:9C:AE:C5:C1:B2:3D:20:19:56
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 01A18299A610A6C70AF4913C7ECF4A738102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 08E6
Signing time: Wed 28 Oct 2026 13:01:09 +0000
Manifest this update: Wed 28 Oct 2026 13:01:09 +0000
Manifest next update: Thu 29 Oct 2026 13:01:09 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 15RKmZ7bRS+UCdrMJwH6mK0P0vux74agnFrzMusBJPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:a6:10:a6:c7:0a:f4:91:3c:7e:cf:4a:73:81:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Oct 28 13:01:09 2026 GMT
Not After : Oct 29 13:01:09 2026 GMT
Subject: CN=5aa2cb64873f4e6afaa61c9caec5c1b23d201956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:a1:70:fb:c4:34:28:4c:c5:5f:6c:8c:8f:
33:9c:5a:2d:44:88:49:06:db:e2:e8:9c:70:b0:9b:
21:55:19:0d:13:c5:d0:f2:1a:9d:8e:6f:e8:85:44:
f1:7d:76:37:18:72:7d:20:44:d2:5b:2e:c7:e8:d1:
95:2a:80:a0:80:e8:01:0a:fb:18:70:04:dd:b3:68:
13:b5:66:71:d0:c7:5d:20:f2:61:8c:8b:87:af:4d:
03:cc:99:6a:0b:49:58:e0:bd:ce:98:6d:77:b1:d1:
a1:a9:2e:7a:c4:e1:04:7f:54:9f:9c:6d:e0:90:86:
1f:8e:f5:95:8e:66:f7:bb:7d:d9:71:f2:5b:d8:ab:
b0:e1:12:93:ee:ad:90:8c:7f:62:33:b5:4d:cf:bb:
38:a8:fb:b3:4e:72:74:c7:73:9a:59:b1:ec:66:0a:
b1:39:be:23:ed:02:29:37:e5:4b:06:be:a9:b0:96:
cb:83:d8:df:1d:9d:34:7c:4f:d5:7f:4b:8f:f4:54:
11:f5:22:ef:98:59:8c:f6:b2:6d:b6:3c:f1:69:30:
bc:19:0c:ea:27:3a:8c:37:e5:f3:99:31:4b:b0:ef:
c5:02:6f:23:df:95:b7:51:d0:f0:25:a3:8c:4d:c9:
95:c0:e8:ed:86:c0:42:74:39:9e:65:70:80:8c:83:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:CB:64:87:3F:4E:6A:FA:A6:1C:9C:AE:C5:C1:B2:3D:20:19:56
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:9a:95:c8:12:f8:4f:1b:86:a6:e2:f7:9d:d5:c1:69:b4:
d7:6f:3b:db:05:21:cf:c8:0c:17:02:31:ec:73:b0:bf:35:1f:
a1:b3:8f:5a:1f:35:3b:74:f9:0a:65:ec:55:c0:51:f7:b8:bb:
bc:67:75:03:cf:5b:81:bb:42:10:6f:b8:49:ff:db:cc:f8:5f:
53:82:6d:c9:e2:a7:0a:66:b7:5e:81:89:d0:9a:a9:ed:01:73:
ca:c0:90:f7:89:a4:6d:d0:f4:df:00:8a:23:f2:34:9d:34:b5:
ea:60:60:b1:d7:0f:a4:20:aa:0f:a0:bb:c7:93:22:21:b1:8b:
bf:7a:a2:93:0b:77:d0:8d:9b:f5:92:0c:08:a4:5b:9a:8f:1b:
dd:a5:e1:55:93:51:e6:17:01:10:fc:18:af:55:70:f5:60:c9:
8d:e3:b3:63:00:72:c4:11:34:e5:c3:6b:1b:4a:c6:c1:3f:38:
2d:ad:04:d8:e7:0b:66:9f:db:64:ae:f9:8c:82:fd:ef:6c:15:
20:13:31:ae:c9:8a:32:be:76:21:dd:51:9d:48:2e:50:3e:c8:
3e:96:b0:bf:28:0a:1c:00:92:80:a1:ca:c3:0f:59:50:75:19:
08:17:37:f2:a6:af:68:bc:cd:33:a7:e9:28:60:7f:c7:fc:62:
06:05:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:25:46 2026 by rpki-client