Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: euN7F0qNIWe4YNOv6z3IF/0S28S+2JgcRavoml7O8aE=
Subject key identifier: 27:FF:79:24:11:73:5F:EE:F5:26:B7:9D:47:65:C0:FB:45:C1:AC:57
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019CE4EC56FD06936E86F61A1540562A86D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 0367
Signing time: Fri 13 Mar 2026 02:00:19 +0000
Manifest this update: Fri 13 Mar 2026 02:00:19 +0000
Manifest next update: Sat 14 Mar 2026 02:00:19 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: 0UMGKtrYWJ0KdvTuifyWpNLBnJqmV8WJ/iyc3WjBBIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:56:fd:06:93:6e:86:f6:1a:15:40:56:2a:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Mar 13 02:00:19 2026 GMT
Not After : Mar 14 02:00:19 2026 GMT
Subject: CN=27ff792411735feef526b79d4765c0fb45c1ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:e6:9e:29:d1:88:78:5b:11:cb:4f:e3:ab:
4d:e6:5f:e4:dc:e2:53:e4:34:e9:b0:fc:aa:55:4e:
19:1c:e8:28:8f:ec:03:72:f7:35:4d:31:a6:5e:74:
78:9d:21:f3:29:82:02:52:bd:db:a8:d1:a3:6c:cc:
eb:7e:8c:93:23:87:49:91:15:d5:3e:61:78:2d:8e:
81:c8:97:12:27:82:cd:f8:a8:90:20:8c:83:6f:36:
a8:59:a7:eb:07:25:c1:ed:f0:f9:94:ac:85:ac:0c:
d7:55:23:2e:47:0f:14:07:ad:27:bb:87:6d:67:fe:
b4:4a:79:c0:02:fc:d2:75:34:c3:c7:b9:e4:58:b7:
83:77:ab:5b:72:d3:88:7c:1e:6a:82:20:8e:0e:29:
fb:78:08:69:05:77:2b:ec:aa:e9:9f:0b:ca:ed:16:
a0:d8:05:8e:67:6b:28:e5:3b:bb:bd:d1:5c:a6:b6:
5a:24:fb:12:74:72:8e:ba:7a:3c:0f:a3:d7:ae:17:
11:08:80:29:38:57:c1:41:aa:65:af:c3:e8:59:b4:
aa:53:4f:84:66:9b:77:05:f1:52:44:ca:00:2f:c4:
08:bd:21:0d:91:57:49:c4:7a:eb:37:e1:c5:04:80:
35:ca:72:2d:e3:4b:78:a7:f2:d5:14:0b:bf:69:72:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:79:24:11:73:5F:EE:F5:26:B7:9D:47:65:C0:FB:45:C1:AC:57
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:e9:9c:a7:d2:7c:8a:00:87:ca:d4:49:4f:2a:3f:77:f2:
14:53:75:8d:78:7d:da:d9:c2:3d:84:99:19:0c:2b:24:73:5d:
c2:f9:4b:1a:9c:bf:50:00:35:1f:90:08:bf:5f:51:96:30:89:
68:ab:48:fd:3a:29:84:51:2c:bf:51:e3:74:4f:2c:fa:a6:78:
82:e8:2d:48:e5:79:26:82:5a:fa:86:00:fa:20:db:b0:4d:c8:
44:e7:e9:87:b9:47:32:3e:2c:ba:de:80:6e:5c:b5:85:1e:dd:
f7:29:3f:0e:10:02:10:68:8a:45:ce:f2:e8:6a:42:10:af:6c:
e0:fc:0f:b3:90:80:57:9d:9d:9b:84:5f:b5:c1:96:c1:bd:44:
76:32:43:e4:7e:01:1d:73:f8:9d:6c:1f:28:1e:31:ba:a9:a3:
aa:d3:b8:38:7d:43:17:4e:38:b9:b0:ae:25:e3:bd:35:9b:65:
ad:b6:e7:95:7b:c0:10:04:d1:38:3a:a7:50:2e:4c:62:06:c5:
5d:c8:d3:7e:02:fa:4a:fd:31:c1:79:11:2f:29:a5:2d:bc:d1:
34:13:9d:b7:05:8b:5d:b2:e8:1b:f2:7b:89:20:50:60:5e:c6:
05:e5:ae:ed:6b:1a:4d:8e:8c:73:da:74:1a:14:da:91:66:de:
ab:79:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:09 2026 by rpki-client