Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: PG11y4xCYUGn5bbYbVdPGalSim3VUYM0lqH9miJXCqg=
Subject key identifier: 65:86:19:62:0F:0D:3E:B2:1B:12:E8:87:F9:18:FD:01:77:EE:2C:33
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019D9A3EB3C3B9027B9087E86F522A38E5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 06E0
Signing time: Fri 17 Apr 2026 07:01:33 +0000
Manifest this update: Fri 17 Apr 2026 07:01:33 +0000
Manifest next update: Sat 18 Apr 2026 07:01:33 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 7nHD1fCUx+aanKV7J8uL9/yM130ohiX0aC/cUP2lUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b3:c3:b9:02:7b:90:87:e8:6f:52:2a:38:e5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Apr 17 07:01:33 2026 GMT
Not After : Apr 18 07:01:33 2026 GMT
Subject: CN=658619620f0d3eb21b12e887f918fd0177ee2c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:07:3e:47:6e:99:31:1c:56:b4:d4:b5:f9:
84:c2:fb:4e:4b:a6:b3:7a:a4:61:56:74:f1:c9:e5:
a6:e8:54:92:e2:08:b9:20:f1:45:2c:58:d3:5a:7d:
43:33:ba:29:2a:92:41:04:55:bd:aa:44:af:76:98:
c5:30:74:e4:85:50:76:48:d6:63:2a:62:eb:a0:8a:
89:06:2a:02:f4:4a:c4:e5:45:92:a7:68:81:c0:b5:
9d:f0:d0:c5:86:46:df:98:6f:ac:3f:37:55:09:12:
8a:35:68:8f:ce:8b:ac:81:7d:5e:07:55:e7:e1:1b:
38:20:4e:36:28:6f:06:a2:58:15:cc:9b:c4:57:2b:
89:db:06:a3:dc:17:16:d0:12:f4:27:5e:b9:fd:42:
d5:0c:b1:9d:74:f1:6f:ac:7d:73:24:09:f9:ce:0f:
85:c9:94:0e:8b:17:77:81:b4:e7:ae:78:84:c9:8e:
10:ca:03:8b:92:39:93:1f:33:be:f4:16:b3:89:c3:
e0:50:2f:48:73:f1:4c:1c:88:21:1f:51:60:87:67:
ef:d3:2a:c6:37:a6:ce:e7:a7:42:30:e3:52:d7:66:
fe:f1:f8:fb:a7:e9:a8:66:d6:ef:02:01:f4:89:a3:
30:71:65:f0:8b:e4:ca:9b:f5:04:fa:38:d1:2f:94:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:19:62:0F:0D:3E:B2:1B:12:E8:87:F9:18:FD:01:77:EE:2C:33
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:35:e5:7a:c9:1e:4e:bb:82:28:ad:22:64:7f:e8:77:1f:
54:20:a8:53:7f:5d:c8:e7:5d:2c:b1:ed:79:e1:0f:bc:e6:04:
77:b5:94:63:8a:2e:a0:fc:51:98:c2:87:da:c4:c4:33:78:37:
45:d6:f3:36:ce:35:9d:62:25:25:33:4c:3a:9f:6f:fc:84:b3:
31:a6:92:93:9e:a0:ab:34:4a:46:8a:de:3d:10:4b:9f:4e:97:
2d:d0:7e:55:60:f2:3d:56:8a:e7:d0:e9:19:cb:9f:43:0f:b7:
f8:58:89:8c:72:60:6f:46:b9:c4:6c:72:c3:54:88:1d:a4:44:
51:4b:fb:5f:51:81:63:d8:ca:d9:4d:18:52:a4:42:79:e7:f6:
db:d4:4c:11:90:af:d8:38:aa:36:3f:d8:e9:ec:0f:3d:e8:9d:
b1:86:44:ac:65:f6:f1:cb:8a:22:d8:c5:ef:05:59:33:8d:62:
66:e8:5f:64:e3:ef:22:65:39:1d:fa:ab:fa:be:70:b3:fa:52:
ef:05:f0:07:7f:12:a2:58:e5:ac:8d:33:c9:03:76:ab:69:5b:
05:bf:3d:21:2c:7d:6d:01:aa:4a:79:5a:68:48:38:c3:97:a4:
0c:40:75:bb:74:d7:74:fb:cd:d2:a6:8b:e8:c4:1e:4e:6c:e3:
0a:44:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:22 2026 by rpki-client