Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File: waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier: n5anTXV21ZNxSfIgMmJcWBU3dDd0Z2MCgJ7F+xL88Bw=
Subject key identifier: FB:45:1D:9C:D0:18:47:E0:76:A0:D0:1D:B9:AE:EC:10:52:F5:FA:57
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019FAB639538D8320F8135D8053082C3A51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 01:00:57 +0000
Manifest this update: Wed 29 Jul 2026 01:00:57 +0000
Manifest next update: Thu 30 Jul 2026 01:00:57 +0000
Files and hashes: 1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
2: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
3: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: UJwqvAQgBa54tH1PBXEmoTbipPtEC/3QB+0W5FulIa0=)
4: xPa2VWn8zPPJu1TS_BqirNCgVQc.roa (hash: DZ163Mk89KXMzE5FqtcclAXo6ecwVKvSxuhUWnKFYkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:95:38:d8:32:0f:81:35:d8:05:30:82:c3:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 29 01:00:57 2026 GMT
Not After : Jul 30 01:00:57 2026 GMT
Subject: CN=fb451d9cd01847e076a0d01db9aeec1052f5fa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:15:ee:35:61:b7:b1:c5:d4:71:26:b5:6f:
86:ef:7f:46:1f:ac:cf:3c:01:7e:c4:c5:9c:b7:d7:
35:69:f5:45:02:de:a9:7f:36:8e:cc:ee:56:96:23:
2c:fc:19:0f:33:3e:a1:8b:26:8d:38:20:be:6e:77:
36:7c:4c:0d:83:fc:4e:e2:f0:4f:05:e4:bf:04:9c:
2f:c9:ee:46:bb:83:fe:68:fe:ba:84:a6:af:0c:c6:
70:f6:63:bf:3a:2b:f3:05:77:af:17:40:89:26:b5:
8d:5b:7a:c5:bd:8b:d1:7f:d8:fb:48:11:00:09:b0:
7f:e0:62:c0:44:ee:c6:5c:5d:2c:18:fd:af:e4:26:
92:5f:f8:e3:20:ff:b1:9c:59:8a:54:10:51:33:21:
89:c0:51:bd:9f:29:e9:b1:da:97:cb:fe:c8:8b:12:
01:4b:33:6f:25:9f:c8:c2:e1:a4:8c:c4:41:17:83:
24:93:c5:68:bb:49:88:8a:b2:22:4f:46:5f:14:4a:
6b:00:19:b3:b4:5a:83:51:fe:66:5d:92:36:0c:fa:
a4:36:41:58:87:8c:4c:ca:44:4a:2f:c4:3f:6f:99:
cb:c9:df:dd:f1:b6:75:ff:a7:5c:6d:f1:63:6e:0f:
b3:af:ac:bf:13:34:39:fa:d9:a0:40:37:b7:12:ed:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:1D:9C:D0:18:47:E0:76:A0:D0:1D:B9:AE:EC:10:52:F5:FA:57
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:9c:dd:b2:a4:36:bf:27:78:0c:a5:70:e9:7f:42:0d:aa:
bc:b1:d3:6c:4f:31:92:b4:e9:f3:a5:23:be:b9:de:30:9e:71:
b0:6e:6c:0a:ba:ef:fd:90:ee:da:77:28:3f:a5:af:b3:69:f5:
57:06:8a:05:e0:9a:c9:bd:fc:18:49:d4:0a:3a:08:10:08:3f:
fc:8b:4f:7b:60:17:e9:25:53:1e:56:13:ea:f5:84:8f:43:48:
df:8b:9c:c0:0c:ea:f3:8b:17:f0:df:60:19:84:ae:6d:eb:b6:
d8:53:9a:12:72:73:a1:d6:a5:e7:1d:02:b5:8b:f1:dc:33:d3:
85:e7:77:46:f2:60:ba:f0:0c:e8:b4:a6:46:87:ef:9a:87:62:
c2:f9:d1:9b:22:c9:ad:d3:11:d7:ba:ad:37:ce:1c:2b:07:dc:
17:e6:aa:d4:9f:2d:13:c7:56:ad:91:64:37:f3:cf:d8:6f:c7:
70:4c:19:7f:31:da:2a:25:aa:9a:b0:d4:51:83:7d:f0:88:5b:
09:05:05:ed:d0:39:3f:67:0f:be:41:d4:cc:cd:fc:e3:1b:c7:
11:dc:8d:bf:ea:93:12:6b:14:df:75:f9:63:78:ee:91:1b:b6:
e1:b4:a5:8d:5c:79:ed:35:fb:85:8b:8a:a6:fd:40:9b:45:4a:
32:83:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:47 2026 by rpki-client