Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: DSJ6TdIPgoMRjRiNqhbiwnd7GL6/EwsPxc8/OfWYPCs=
Subject key identifier: 83:43:3B:C5:87:B3:46:7C:94:56:A8:C8:44:67:98:B4:82:BB:74:2D
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019EB846086E1D63F6A2D1955005A8A1BAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 0459
Signing time: Thu 11 Jun 2026 20:00:57 +0000
Manifest this update: Thu 11 Jun 2026 20:00:57 +0000
Manifest next update: Fri 12 Jun 2026 20:00:57 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: CTGAvQQBvNBJtwGZiGDsPFd5VCXjfJpyEkR+BHKQB5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:08:6e:1d:63:f6:a2:d1:95:50:05:a8:a1:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jun 11 20:00:57 2026 GMT
Not After : Jun 12 20:00:57 2026 GMT
Subject: CN=83433bc587b3467c9456a8c8446798b482bb742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:e4:95:cc:04:1a:b0:34:25:7e:e8:38:24:
f8:e0:95:07:88:eb:17:ac:73:55:e0:68:53:63:f5:
ed:13:c1:00:28:cc:31:89:e9:79:e4:a5:3d:ff:8a:
e9:22:b6:22:d2:74:0a:bc:5b:e8:3e:1f:19:c2:e0:
07:a5:66:65:9b:dc:4f:a0:88:a3:47:ec:ba:83:e6:
f7:e7:08:91:b4:d7:f2:7e:b9:2b:c7:24:ca:46:00:
72:f3:70:60:f0:1b:9a:5c:cc:2d:06:7a:9c:d2:b3:
18:e3:66:79:43:72:ab:92:6d:9e:ce:19:75:01:5d:
d5:9f:68:2e:56:69:ed:2a:b9:9d:00:d6:e8:34:bc:
72:86:4a:c7:37:84:49:d4:e7:df:07:8d:6e:ee:9e:
ff:77:d7:0e:81:44:8c:1c:e4:55:1a:66:7a:12:15:
00:44:7b:b9:9c:23:91:11:1b:ad:8c:10:b0:c8:71:
93:2a:80:0e:a5:d5:66:90:6a:94:b0:bf:c4:a1:9a:
07:e0:e6:35:25:b6:ec:93:65:a2:09:28:7c:5f:76:
bb:54:fa:ba:4e:0c:10:65:ef:7c:7f:de:0b:1e:de:
2a:3f:d6:e6:df:67:e4:73:2c:18:61:aa:8e:ab:05:
da:d6:5f:a8:9f:e8:d1:ca:2b:40:50:be:c4:4d:31:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:3B:C5:87:B3:46:7C:94:56:A8:C8:44:67:98:B4:82:BB:74:2D
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:c2:54:b8:ee:37:19:fa:e8:c1:8f:ea:b9:e2:46:ea:91:
e4:db:6d:53:83:d1:60:25:61:78:a8:59:b0:60:8d:ff:c4:6e:
8b:b3:44:46:09:2c:1d:cc:88:60:69:62:9a:cf:00:83:97:07:
c2:4d:48:62:09:93:59:54:90:2f:46:e8:4a:dd:14:49:98:79:
a2:26:bd:61:a4:d0:c8:86:8b:24:90:52:76:74:9e:ca:57:aa:
a3:e5:73:0f:1e:5a:a8:60:26:0b:6b:7c:a4:9d:11:d5:9c:6f:
4a:73:3e:f4:c1:3f:c3:bc:94:ea:9b:f0:17:e0:67:e5:c2:28:
40:80:93:33:24:2b:52:11:82:68:0c:af:d2:82:49:95:fa:42:
18:f8:30:e6:43:b2:5d:19:3d:d6:7a:fa:97:cb:9b:78:59:35:
2e:ff:42:36:d3:a4:8a:b2:74:68:ae:e7:b6:a5:b6:a9:74:9a:
a4:c9:73:44:3b:59:28:ed:2f:97:6f:9b:f7:b3:4e:4d:4b:ab:
fe:1c:f0:6f:38:71:75:da:a1:15:0e:b7:38:00:59:0a:dc:61:
28:43:74:bd:5c:43:a0:8b:f0:ba:72:29:f6:20:d1:cb:16:d9:
87:47:39:42:7f:7f:36:c1:7f:40:3f:a6:e6:dc:ac:41:83:98:
f8:f1:ef:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:17:48 2026 by rpki-client