Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: jB2c3wLcG8Lx26+85+B7V2bcIUuzt7VNkrVhYo1y9OA=
Subject key identifier: 08:86:A3:63:A6:15:79:2A:70:C3:1E:6E:B9:D6:B2:A4:C7:DE:78:3F
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 01A0EFD4DB5081BA2482EA4F9B9A4FD309F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 089A
Signing time: Wed 30 Sep 2026 01:01:39 +0000
Manifest this update: Wed 30 Sep 2026 01:01:39 +0000
Manifest next update: Thu 01 Oct 2026 01:01:39 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: nRVaXQE6OZxrSidEAUgnNzj3QmOWguCg0Pr0W+GTZZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:db:50:81:ba:24:82:ea:4f:9b:9a:4f:d3:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Sep 30 01:01:39 2026 GMT
Not After : Oct 1 01:01:39 2026 GMT
Subject: CN=0886a363a615792a70c31e6eb9d6b2a4c7de783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:36:34:86:d5:fd:9c:b1:d4:ca:e6:9a:2f:
11:89:5e:0f:ed:ae:16:44:58:21:a2:d5:ed:5c:bc:
84:d4:d2:c5:53:99:f7:88:b3:4c:6d:0c:da:fa:f5:
ee:37:48:9a:74:1b:ed:4f:8f:2d:83:75:76:d5:29:
bf:4c:b2:93:2f:64:66:42:9e:a7:07:eb:52:b7:45:
b9:95:60:d8:1c:27:d2:f8:b8:c5:14:a4:0f:d7:06:
fd:8a:e1:76:db:a1:c6:df:51:2f:7d:6e:16:84:6a:
4b:c2:81:7d:35:0b:8e:dd:c3:ee:d8:95:c2:68:83:
23:89:bc:0c:17:d1:13:7b:c6:06:67:e4:fb:6f:ec:
5a:3c:d7:81:7a:60:bf:fe:2c:74:94:08:1a:7c:2f:
92:9e:da:53:c8:6f:41:c8:7a:07:d0:94:0b:7c:5e:
01:a9:77:b4:36:77:f4:82:8f:70:dd:fb:12:30:de:
35:75:c7:be:12:c3:6b:65:b9:66:be:19:0d:4b:34:
8f:3c:7f:14:32:70:2b:c1:ff:b6:63:90:86:50:b7:
84:c6:63:7c:49:d8:97:7c:4f:f1:84:8b:57:da:33:
2f:93:5e:52:5b:6a:04:5c:e3:d6:13:7a:0a:30:7d:
76:c4:96:15:e2:ce:52:53:54:af:09:a5:ea:f8:fb:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:A3:63:A6:15:79:2A:70:C3:1E:6E:B9:D6:B2:A4:C7:DE:78:3F
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:c3:69:d1:e0:0f:62:e7:ea:29:f0:a6:dc:60:37:b9:50:
55:54:d7:b0:39:59:15:b0:f8:30:51:5e:45:08:f6:13:76:a0:
72:dc:f9:1a:0e:b6:c6:0e:e5:10:47:c0:0d:a4:02:a1:f4:f0:
c4:af:5d:8a:26:8a:d9:e4:aa:2b:e2:8c:2b:4f:be:43:03:ce:
e0:ec:f3:30:36:33:47:77:5c:e6:c3:c0:7c:5f:17:4b:10:32:
0a:40:b1:70:2b:e5:d7:6f:f0:32:06:4c:36:1a:b8:f8:79:57:
f0:e5:be:6b:5a:4c:76:16:95:37:7d:4a:bd:24:cd:35:15:f5:
21:4b:65:51:0e:b7:0c:b5:73:06:ec:5d:b0:b1:a9:1b:13:a1:
28:9a:8c:11:b1:61:1f:90:61:17:79:3d:d1:19:3d:99:db:56:
b2:d2:2c:ab:57:a6:ae:47:41:61:76:6c:9c:fb:f9:ed:3f:72:
a9:d2:e6:56:f5:87:5a:57:c1:6f:35:35:24:ea:0b:76:c1:d5:
f6:29:1a:a0:4f:ea:27:79:3d:62:31:78:c2:28:39:e4:05:aa:
d8:89:28:68:cb:b5:7d:36:fc:27:11:07:a1:11:74:77:b2:27:
6a:2b:05:8b:15:52:25:7e:08:bb:32:cd:c7:ee:29:44:d5:6c:
54:6e:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:21:51 2026 by rpki-client