Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: gvCiWHyzV9btqP2dNWw2LiZDuO0k7800szt8+CPk4Xo=
Subject key identifier: 2F:9D:7C:45:58:26:82:6F:67:0E:03:D1:74:CC:CB:39:CB:AF:50:C2
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019CACB4975CA5B24C39E866770A4323BD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 0665
Signing time: Mon 02 Mar 2026 04:00:42 +0000
Manifest this update: Mon 02 Mar 2026 04:00:42 +0000
Manifest next update: Tue 03 Mar 2026 04:00:42 +0000
Files and hashes: 1: D22wrWnHRb0BnSrTTPVEYOw3PFQ.roa (hash: MeKrOdTk/7GTqftAxInzPrHs9Ilc0JJlnBJ0oVp9gSs=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: HzbtkZnqwv6/XvyWF8IsyWutaXSpoDQ7Okllq4Q1K6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:97:5c:a5:b2:4c:39:e8:66:77:0a:43:23:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Mar 2 04:00:42 2026 GMT
Not After : Mar 3 04:00:42 2026 GMT
Subject: CN=2f9d7c455826826f670e03d174cccb39cbaf50c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:eb:87:42:36:ad:b2:b1:5d:28:98:2e:2e:
e2:4e:62:93:51:88:df:b7:7c:27:f7:6f:81:a3:25:
7f:e1:15:f7:b0:7a:5a:dc:66:a3:08:0d:cb:a9:ef:
7a:82:5b:49:25:1a:6f:6c:29:f4:ce:cf:73:c0:48:
ad:fe:03:3b:94:d5:4f:cd:3e:bf:89:b6:95:b5:3d:
93:5d:6f:e3:bd:88:b6:e0:c0:13:3b:ef:5b:e6:ef:
cf:1d:70:ca:a3:a7:19:48:9a:ae:11:c5:ac:a9:67:
4f:d2:ee:0e:a2:5a:01:7c:e9:13:8f:51:d8:db:05:
13:06:be:5c:4e:34:8b:77:3c:f6:54:9b:0d:c9:a2:
a3:4a:47:7a:e7:44:85:60:1d:fb:29:d3:ff:b8:f2:
af:36:54:bf:20:98:14:60:ea:31:9f:65:40:b5:48:
0e:ca:f6:8a:07:48:c1:f9:eb:3e:cd:d7:5f:67:8a:
dd:3f:2d:5e:49:dd:90:4c:24:27:43:1d:1e:87:ff:
dc:a3:47:de:3e:78:fc:67:23:97:dc:7c:99:64:33:
e7:ea:4d:e0:56:c5:9b:b3:c3:20:31:bf:92:14:ed:
77:5a:35:55:12:d3:c4:a5:3e:2a:b6:f4:50:f2:52:
de:e2:12:e7:86:24:b5:98:98:c5:e4:b1:43:ed:e2:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:7C:45:58:26:82:6F:67:0E:03:D1:74:CC:CB:39:CB:AF:50:C2
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:fc:83:dd:12:25:a2:4a:89:4e:69:d6:22:78:5a:02:14:
33:22:c7:49:73:07:4f:43:78:a4:1f:97:9b:64:8a:a6:84:fb:
39:49:4e:80:bb:6c:7e:bb:36:2d:77:10:04:cd:f8:e8:58:92:
a6:ff:66:27:95:ba:1c:37:1e:27:20:91:4d:86:71:9d:09:10:
de:ee:ae:31:b4:c2:e6:43:fb:60:36:4b:23:e8:66:ed:f7:d4:
fe:9c:2e:16:21:da:31:07:0b:92:24:28:6d:6f:f6:ae:72:f8:
5e:fe:8f:0d:81:3c:c2:0a:e2:84:96:45:cb:a8:f2:de:32:c3:
e2:bb:da:ff:34:c0:5b:ed:2c:6e:2b:78:8c:1d:56:1f:46:57:
be:bd:c9:67:bb:2a:7f:be:d1:f1:0e:b2:a4:09:5d:10:12:02:
e7:4f:e5:8c:34:f8:de:a8:5d:9b:eb:33:5f:b0:21:31:8c:08:
af:9c:e2:94:16:2a:79:51:c9:e9:07:f1:f0:fc:da:cc:de:04:
4c:35:59:46:3f:b6:01:bd:30:04:08:e3:c9:c2:aa:29:44:13:
4f:23:b4:88:f4:87:94:b4:d8:13:27:05:91:8f:29:ad:1b:dc:
75:7f:cd:83:70:99:95:ae:c6:ce:4b:8c:08:35:04:53:10:eb:
de:de:c3:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystJdcpbJMOehmdwpDI70LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjYwMzAyMDQwMDQyWhcNMjYwMzAzMDQwMDQyWjAzMTEwLwYDVQQD
EygyZjlkN2M0NTU4MjY4MjZmNjcwZTAzZDE3NGNjY2IzOWNiYWY1MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvnrh0I2rbKxXSiYLi7iTmKTUYjf
t3wn92+BoyV/4RX3sHpa3GajCA3Lqe96gltJJRpvbCn0zs9zwEit/gM7lNVPzT6/
ibaVtT2TXW/jvYi24MATO+9b5u/PHXDKo6cZSJquEcWsqWdP0u4OoloBfOkTj1HY
2wUTBr5cTjSLdzz2VJsNyaKjSkd650SFYB37KdP/uPKvNlS/IJgUYOoxn2VAtUgO
yvaKB0jB+es+zddfZ4rdPy1eSd2QTCQnQx0eh//co0fePnj8ZyOX3HyZZDPn6k3g
VsWbs8MgMb+SFO13WjVVEtPEpT4qtvRQ8lLe4hLnhiS1mJjF5LFD7eLc2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+dfEVYJoJvZw4D0XTMyznLr1DCMB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNT8g90S
JaJKiU5p1iJ4WgIUMyLHSXMHT0N4pB+Xm2SKpoT7OUlOgLtsfrs2LXcQBM346FiS
pv9mJ5W6HDceJyCRTYZxnQkQ3u6uMbTC5kP7YDZLI+hm7ffU/pwuFiHaMQcLkiQo
bW/2rnL4Xv6PDYE8wgrihJZFy6jy3jLD4rva/zTAW+0sbit4jB1WH0ZXvr3JZ7sq
f77R8Q6ypAldEBIC50/ljDT43qhdm+szX7AhMYwIr5zilBYqeVHJ6Qfx8PzazN4E
TDVZRj+2Ab0wBAjjycKqKUQTTyO0iPSHlLTYEycFkY8prRvcdX/Ng3CZla7GzkuM
CDUEUxDr3t7Dqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:50 2026 by rpki-client