Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File: waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier: 0fbHjc9oFRvbrlB4RjJgDSbXlVOxmiNyINSLFYG1a7A=
Subject key identifier: F9:CE:E6:5E:C1:2D:02:BD:5B:DB:E4:2C:CD:C2:68:85:9D:55:E7:2B
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019F94374FAF6A726CBADFA570C4CDD0D8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number: 43
Signing time: Fri 24 Jul 2026 13:01:20 +0000
Manifest this update: Fri 24 Jul 2026 13:01:20 +0000
Manifest next update: Sat 25 Jul 2026 13:01:20 +0000
Files and hashes: 1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
2: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
3: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: MaoQasRqY8RR9H9ExDgptjrbxglrbyQLfVZojyNPWLY=)
4: xPa2VWn8zPPJu1TS_BqirNCgVQc.roa (hash: DZ163Mk89KXMzE5FqtcclAXo6ecwVKvSxuhUWnKFYkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:4f:af:6a:72:6c:ba:df:a5:70:c4:cd:d0:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 24 13:01:20 2026 GMT
Not After : Jul 25 13:01:20 2026 GMT
Subject: CN=f9cee65ec12d02bd5bdbe42ccdc268859d55e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:f8:f4:0b:13:c0:39:4c:23:dc:17:b1:d0:
81:7e:e8:5b:14:9f:2c:dd:c9:a4:2a:ba:33:fa:53:
14:24:f3:11:c6:22:47:ce:66:2b:9d:63:0e:fb:d0:
17:3a:f0:32:10:7b:59:4b:be:9f:9f:21:30:40:b0:
e2:3c:9c:de:44:9f:7c:8b:f7:94:08:79:7f:2b:fc:
66:5e:0a:53:b4:8e:b9:a0:6f:fa:3b:19:8e:29:4f:
7a:95:b9:67:36:36:c0:ae:0b:2a:1e:b4:6b:59:99:
5c:5b:0b:cc:37:cb:4f:71:d9:91:19:38:b6:d5:67:
9a:60:a3:e4:56:ad:09:4e:15:3e:f5:70:65:c5:0f:
54:7b:a7:d9:06:6a:b1:f1:87:da:8c:7e:09:bf:52:
1e:ea:07:af:a4:6f:d7:dd:65:11:ee:fa:aa:07:68:
29:47:cd:37:7c:ff:0a:0b:75:c2:29:9f:75:9b:96:
36:ae:6b:c0:98:ab:a1:40:83:53:6f:46:39:e4:bb:
9e:9b:82:cc:c6:3a:4f:7c:0b:b1:39:70:41:6c:e3:
b2:ce:aa:9e:90:d6:4e:3a:34:e3:26:9f:45:a3:f3:
f8:92:fb:7a:67:00:e0:fa:72:1d:db:ba:45:58:8f:
1e:29:9e:f2:ad:5e:5b:57:89:f7:47:ce:dc:61:10:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:E6:5E:C1:2D:02:BD:5B:DB:E4:2C:CD:C2:68:85:9D:55:E7:2B
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:63:a4:ff:90:b1:94:83:0c:31:02:e4:53:af:39:f2:33:5c:
05:23:b1:dc:89:7a:d5:40:ad:8b:82:c2:b3:ca:e0:8f:af:b7:
0b:cb:b2:4b:e1:16:96:3b:da:5b:5f:c2:78:c8:51:05:e2:3b:
72:ad:dc:7b:6a:6b:2e:13:1d:5b:ee:c5:91:0e:d5:3f:98:76:
c1:aa:d9:44:89:42:61:53:c6:a3:a2:6c:14:94:04:d9:85:f0:
65:77:f2:c4:d6:8e:15:d9:2f:8d:da:40:fa:77:aa:42:71:ba:
34:10:c2:65:4d:25:f3:71:67:68:f8:e8:b2:36:1d:6c:39:a8:
4e:4f:e5:34:5d:b6:bf:fc:ce:db:23:e6:f9:b6:f9:cf:cf:b4:
75:44:37:de:a9:ba:7f:4f:c0:08:45:cb:9a:9b:37:9e:b1:63:
43:77:ab:cb:6f:34:78:08:f5:66:56:0c:fe:4d:54:6e:6a:be:
1b:a2:c4:b4:c1:4d:e6:56:97:2d:f0:c1:8c:6e:c1:0c:82:0a:
43:c9:e3:06:2e:dc:c0:78:e7:2a:81:27:12:40:3c:78:19:25:
81:21:58:00:77:23:64:7d:56:d9:39:83:5d:b4:60:2a:1c:a0:
18:7c:23:83:d2:88:2e:82:d3:41:ab:d6:8e:23:e0:93:d1:9a:
61:4a:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:21 2026 by rpki-client