Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
File: waTZZ9XMsUJbke9O14moOvzkYS4.mft (raw, json)
Hash identifier: RYFiifzbmchvmoDuPFtpr5eSavLH/m6Fn0XwY5FpCzU=
Subject key identifier: D2:A2:70:3C:A6:D3:68:49:68:0B:BA:AA:25:71:35:3D:F6:14:C4:F1
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 01A026FC0FDCD33EF174F1CD21B0EC517181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
Manifest number: 8F
Signing time: Sat 22 Aug 2026 01:00:48 +0000
Manifest this update: Sat 22 Aug 2026 01:00:48 +0000
Manifest next update: Sun 23 Aug 2026 01:00:48 +0000
Files and hashes: 1: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (hash: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=)
2: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (hash: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=)
3: waTZZ9XMsUJbke9O14moOvzkYS4.crl (hash: jX37Af1+C18wFu5HYmtw8yVeJvjiF0/Z6TRP+LBCf6I=)
4: xPa2VWn8zPPJu1TS_BqirNCgVQc.roa (hash: DZ163Mk89KXMzE5FqtcclAXo6ecwVKvSxuhUWnKFYkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:0f:dc:d3:3e:f1:74:f1:cd:21:b0:ec:51:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Aug 22 01:00:48 2026 GMT
Not After : Aug 23 01:00:48 2026 GMT
Subject: CN=d2a2703ca6d36849680bbaaa2571353df614c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:ec:55:f8:43:45:19:e7:dd:18:7b:e1:85:
0a:36:fd:1e:4c:53:42:6b:28:a8:6d:04:51:9c:b0:
dc:d1:7d:d8:f7:77:c8:db:a4:f5:1a:91:60:3d:06:
28:ee:b0:a0:ec:ae:56:7d:16:02:b4:82:83:6f:06:
b9:c5:e4:77:bb:ad:8b:bf:c8:03:e3:a0:ab:1c:16:
7c:9f:77:2c:1b:c1:83:2d:97:f6:6a:51:47:78:02:
00:60:8a:d7:86:aa:6e:dc:98:16:48:08:05:7b:96:
62:60:d7:37:b2:3e:b8:10:15:9a:54:4b:de:5c:d1:
5b:fc:a7:87:66:9c:64:38:f5:9a:18:b8:a6:ac:89:
92:dc:b5:09:da:92:9f:83:19:bc:4e:77:ee:d2:29:
67:ee:e2:c8:e5:b0:6a:5f:2b:21:bb:6e:c2:d9:51:
bf:19:08:25:a9:89:0e:ab:2e:ff:47:80:ab:0d:e6:
e5:eb:e4:1c:e8:77:fd:4f:a1:45:84:25:47:ef:69:
44:df:01:99:9d:2a:ce:b4:0d:c1:d6:6d:92:fc:29:
99:53:f1:be:21:89:e2:82:5a:65:c9:2e:de:1c:90:
02:7c:53:ce:bb:e3:34:f9:24:58:44:7d:fa:f2:6c:
41:4b:1a:1b:1b:f6:e8:52:2a:f7:e2:e1:6f:83:fc:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:70:3C:A6:D3:68:49:68:0B:BA:AA:25:71:35:3D:F6:14:C4:F1
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7e:e8:f7:58:39:b1:5e:e9:3e:a5:af:65:33:dc:7b:e3:71:
4b:f9:dc:df:fc:3d:c7:04:c2:33:af:8f:34:21:16:34:61:46:
a2:71:2a:1d:c9:4e:b9:0f:cf:66:a6:b6:f7:2d:94:3b:f6:34:
b5:0e:0b:44:7c:ef:bb:9e:04:99:b7:e4:f3:12:35:02:0b:30:
f4:69:31:19:8f:eb:fc:be:99:19:4b:ec:65:3c:69:8e:f4:26:
15:27:a1:c6:30:bf:d0:9f:e6:f2:87:70:b4:4d:cb:10:9f:12:
ff:ed:44:d4:06:04:6c:62:e7:8d:cf:83:d1:9d:7a:91:e6:49:
1d:6b:8c:03:8e:29:94:4a:47:44:94:2a:ee:bd:7a:a8:8b:ff:
82:7c:d0:59:30:f1:d7:63:e9:76:a4:c5:c3:4c:5d:2a:22:36:
16:2f:2c:c3:cb:eb:f8:7d:db:90:53:d8:82:9b:fc:f6:82:a7:
ce:de:6b:53:f2:1a:d4:79:a3:5f:11:2b:b8:a0:19:72:45:f3:
c3:85:4d:e8:f5:48:28:9f:03:03:7d:06:5f:b6:88:e5:80:90:
94:c4:14:96:bd:e9:e2:74:37:11:0a:cf:68:ad:30:2a:b8:42:
2d:2c:e4:3e:cf:5e:a6:4a:85:5a:2a:ad:09:ff:18:82:79:9c:
f5:2e:ec:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAm/A/c0z7xdPHNIbDsUXGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkOTY3ZDVjY2IxNDI1YjkxZWY0ZWQ3ODlhODNhZmNl
NDYxMmUwHhcNMjYwODIyMDEwMDQ4WhcNMjYwODIzMDEwMDQ4WjAzMTEwLwYDVQQD
EyhkMmEyNzAzY2E2ZDM2ODQ5NjgwYmJhYWEyNTcxMzUzZGY2MTRjNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbsVfhDRRnn3Rh74YUKNv0eTFNC
ayiobQRRnLDc0X3Y93fI26T1GpFgPQYo7rCg7K5WfRYCtIKDbwa5xeR3u62Lv8gD
46CrHBZ8n3csG8GDLZf2alFHeAIAYIrXhqpu3JgWSAgFe5ZiYNc3sj64EBWaVEve
XNFb/KeHZpxkOPWaGLimrImS3LUJ2pKfgxm8Tnfu0iln7uLI5bBqXyshu27C2VG/
GQglqYkOqy7/R4CrDebl6+Qc6Hf9T6FFhCVH72lE3wGZnSrOtA3B1m2S/CmZU/G+
IYniglplyS7eHJACfFPOu+M0+SRYRH368mxBSxobG/boUir34uFvg/w9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKicDym02hJaAu6qiVxNT32FMTxMB8GA1UdIwQY
MBaAFMGk2WfVzLFCW5HvTteJqDr85GEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt
ZThhMzlkZDYwODY0LzEvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0
LzEvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv37o91g5
sV7pPqWvZTPce+NxS/nc3/w9xwTCM6+PNCEWNGFGonEqHclOuQ/PZqa29y2UO/Y0
tQ4LRHzvu54Embfk8xI1Agsw9GkxGY/r/L6ZGUvsZTxpjvQmFSehxjC/0J/m8odw
tE3LEJ8S/+1E1AYEbGLnjc+D0Z16keZJHWuMA44plEpHRJQq7r16qIv/gnzQWTDx
12PpdqTFw0xdKiI2Fi8sw8vr+H3bkFPYgpv89oKnzt5rU/Ia1HmjXxEruKAZckXz
w4VN6PVIKJ8DA30GX7aI5YCQlMQUlr3p4nQ3EQrPaK0wKrhCLSzkPs9epkqFWiqt
Cf8Ygnmc9S7s8A==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:33 2026 by rpki-client