Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File: waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier: hWJdC5dOInGFidGtPDlh4vngGUgWeAllS5fbiVRGWiM=
Subject key identifier: 63:36:91:2F:A7:BE:6C:25:FA:0C:16:51:A2:06:D7:AE:FD:F0:62:32
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019F2801A3418492A2C9A3C2846FABF812B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number: 0A
Signing time: Fri 03 Jul 2026 12:43:43 +0000
Manifest this update: Fri 03 Jul 2026 12:43:43 +0000
Manifest next update: Sat 04 Jul 2026 12:43:43 +0000
Files and hashes: 1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
2: fU9G1xViiFBAMkydmGaiZ4wfW-4.roa (hash: n+ycwzmY2TKhAULErTgn7mIq9lbCk2qlJBifPQNmgOY=)
3: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
4: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: WfuE1u9ZWvot+tiUR5U6RgDcy4n+4YH5fFpGJV6ZjeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 12:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:01:a3:41:84:92:a2:c9:a3:c2:84:6f:ab:f8:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 3 12:43:43 2026 GMT
Not After : Jul 4 12:43:43 2026 GMT
Subject: CN=6336912fa7be6c25fa0c1651a206d7aefdf06232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:71:43:5e:2e:b7:de:5a:bc:23:26:8d:40:
c1:31:bb:45:e6:f2:fb:3e:5a:e4:c0:82:5a:b0:6f:
e9:b5:5c:30:57:95:df:da:d6:d2:8f:02:ba:f6:91:
8a:50:d4:99:44:5a:b6:ec:6a:fa:36:1b:7e:dd:92:
67:03:e0:d2:1a:b4:17:40:f2:38:00:93:04:27:38:
33:cd:d2:36:ae:27:c4:57:ff:2a:1c:26:7a:0f:ce:
15:23:85:51:f4:cd:5a:9c:db:1d:81:15:97:20:37:
b9:fd:af:22:f6:11:5e:8c:aa:10:1c:ec:65:8c:f1:
74:68:6f:7b:f8:1f:e3:ad:a1:2b:a5:54:97:a1:bb:
ec:44:92:fc:85:3d:d6:f9:87:f5:21:18:62:45:6b:
3e:86:c9:f4:e8:ad:65:84:78:c6:56:4a:4e:7b:19:
74:55:28:a6:32:3a:c1:bd:21:98:59:7b:76:45:45:
c5:97:e1:52:06:18:29:ad:00:43:74:15:a7:93:a7:
ab:41:27:d2:1e:de:bc:fc:2d:c9:92:78:a9:03:f9:
a4:cd:8c:49:37:f4:04:35:c2:a7:4b:6e:9e:e1:8e:
e8:3c:63:8d:48:74:fb:22:fe:e8:74:17:6c:6c:9e:
b6:bf:34:53:6d:51:34:25:a6:4e:88:15:b5:99:68:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:91:2F:A7:BE:6C:25:FA:0C:16:51:A2:06:D7:AE:FD:F0:62:32
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:8b:a4:6a:38:2d:ed:db:9b:8e:1c:9f:1a:c5:63:e9:e3:
02:b6:ec:39:97:bc:49:64:01:86:21:21:35:c0:c1:29:df:47:
5d:8b:82:47:81:7a:d3:04:7b:f6:8c:94:af:1e:11:24:db:b8:
93:84:62:e6:87:12:8e:2e:34:49:e1:e7:89:82:6d:9b:66:c6:
d3:c3:e9:de:00:10:47:bc:5e:54:23:db:f5:80:a1:f8:5f:78:
b1:13:90:b3:8b:f6:7d:f5:d6:2f:d2:46:01:02:62:00:18:a7:
a2:8e:e7:c0:c7:35:b8:ae:0a:36:8a:1e:9c:65:e5:3d:39:ab:
9d:c9:d8:46:aa:92:5a:4f:1e:bc:e8:6b:00:33:df:6e:88:e3:
ca:62:17:77:b2:93:46:d2:3f:b1:03:cc:07:6d:11:0d:53:0c:
16:a3:48:19:73:72:25:79:76:20:da:73:91:ca:3e:38:13:d3:
f7:4e:cf:a6:d4:24:4c:bb:cc:41:a7:21:04:9c:50:6a:45:87:
55:92:57:51:97:be:32:a8:20:bf:e1:a8:40:57:fc:09:43:c0:
ae:86:b8:bb:8a:63:6c:49:c6:a0:97:a4:97:fe:04:ef:03:0a:
31:f3:16:dd:89:eb:ab:95:35:ad:92:72:88:c1:41:54:09:e5:
31:30:d7:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8oAaNBhJKiyaPChG+r+BK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkOTY3ZDVjY2IxNDI1YjkxZWY0ZWQ3ODlhODNhZmNl
NDYxMmUwHhcNMjYwNzAzMTI0MzQzWhcNMjYwNzA0MTI0MzQzWjAzMTEwLwYDVQQD
Eyg2MzM2OTEyZmE3YmU2YzI1ZmEwYzE2NTFhMjA2ZDdhZWZkZjA2MjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25hxQ14ut95avCMmjUDBMbtF5vL7
PlrkwIJasG/ptVwwV5Xf2tbSjwK69pGKUNSZRFq27Gr6Nht+3ZJnA+DSGrQXQPI4
AJMEJzgzzdI2rifEV/8qHCZ6D84VI4VR9M1anNsdgRWXIDe5/a8i9hFejKoQHOxl
jPF0aG97+B/jraErpVSXobvsRJL8hT3W+Yf1IRhiRWs+hsn06K1lhHjGVkpOexl0
VSimMjrBvSGYWXt2RUXFl+FSBhgprQBDdBWnk6erQSfSHt68/C3JknipA/mkzYxJ
N/QENcKnS26e4Y7oPGONSHT7Iv7odBdsbJ62vzRTbVE0JaZOiBW1mWiFjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM2kS+nvmwl+gwWUaIG16798GIyMB8GA1UdIwQY
MBaAFMGk2WfVzLFCW5HvTteJqDr85GEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt
ZThhMzlkZDYwODY0LzEvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0
LzEvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7qLpGo4
Le3bm44cnxrFY+njArbsOZe8SWQBhiEhNcDBKd9HXYuCR4F60wR79oyUrx4RJNu4
k4Ri5ocSji40SeHniYJtm2bG08Pp3gAQR7xeVCPb9YCh+F94sROQs4v2ffXWL9JG
AQJiABinoo7nwMc1uK4KNooenGXlPTmrncnYRqqSWk8evOhrADPfbojjymIXd7KT
RtI/sQPMB20RDVMMFqNIGXNyJXl2INpzkco+OBPT907PptQkTLvMQachBJxQakWH
VZJXUZe+Mqggv+GoQFf8CUPAroa4u4pjbEnGoJekl/4E7wMKMfMW3Ynrq5U1rZJy
iMFBVAnlMTDX9g==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:03 2026 by rpki-client