Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 9hfde6XWH+YKk1a+D+ZbBp/6d6ErDwQbtWPgUbgj2Dg=
Subject key identifier: BD:E0:5A:FC:DE:1F:79:79:29:4B:D3:C3:14:72:C2:C5:C6:27:F2:4A
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019DCE9961958A063EF65355661D68FEB555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 03E0
Signing time: Mon 27 Apr 2026 11:00:51 +0000
Manifest this update: Mon 27 Apr 2026 11:00:51 +0000
Manifest next update: Tue 28 Apr 2026 11:00:51 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: jdRB8HhJZfN4Pw7MKAHS695rKxkP4E68Ut9i+/1KwQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:61:95:8a:06:3e:f6:53:55:66:1d:68:fe:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Apr 27 11:00:51 2026 GMT
Not After : Apr 28 11:00:51 2026 GMT
Subject: CN=bde05afcde1f7979294bd3c31472c2c5c627f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:7d:80:ed:af:67:7f:2e:9f:19:f2:1a:6e:
ed:ec:04:cd:d3:2b:22:0d:ac:7e:28:c9:f8:51:19:
da:31:da:c9:b5:48:f3:4d:0c:62:87:6d:e7:46:60:
58:9e:30:68:04:17:0f:db:8c:df:ba:f6:1c:02:0c:
1f:0f:f3:8d:62:78:72:d8:fd:3d:73:4e:9c:84:82:
93:61:81:49:06:ce:fc:16:10:6f:d0:c7:48:c9:5c:
f5:ae:0c:ad:73:06:ba:55:f5:e8:a5:fb:77:b8:6c:
e1:cc:f7:e0:8a:b5:e0:fd:32:cf:86:dd:82:0a:d9:
f1:5e:9f:70:e2:44:e6:50:7e:d4:47:2e:34:fe:a1:
be:f8:ce:9b:bd:dd:2c:29:30:7a:f6:21:ed:53:65:
9b:e1:4b:6b:b0:4c:4e:a2:ba:e8:1b:4f:0a:70:3b:
b0:56:f1:09:f8:45:ee:49:5c:2d:ea:b1:f9:92:5e:
4c:8a:e0:2d:b0:37:94:cf:7f:ae:03:f8:04:de:4b:
f1:d3:c9:00:1b:ed:ef:93:ac:1e:d9:b8:bb:50:bc:
6a:53:1d:a4:da:d1:ba:dc:d2:eb:ea:fb:fc:98:c7:
88:f8:e1:8f:1c:73:a6:65:d2:c9:ff:0b:bd:3f:a4:
17:2b:99:49:b1:0e:66:07:35:83:1e:92:80:52:67:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:5A:FC:DE:1F:79:79:29:4B:D3:C3:14:72:C2:C5:C6:27:F2:4A
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5e:7b:3d:98:6a:1f:e2:94:13:b2:37:d7:ed:eb:f5:1a:3d:
ed:7f:b5:99:9f:01:27:29:b5:30:b3:62:35:ec:53:5c:df:ef:
0a:a1:13:7d:c7:27:c9:44:24:42:37:a4:7e:8d:0b:52:35:43:
df:31:17:07:77:a7:7d:e8:e9:0f:64:53:39:82:6a:0d:14:e8:
f6:5d:93:94:91:8d:5d:9a:e7:9e:55:cf:35:8b:e1:c7:20:97:
6e:f1:4d:11:f8:ab:70:09:ad:08:5d:ed:83:e8:48:ad:91:bb:
64:9e:5e:87:db:26:c0:ab:63:02:53:3b:8e:ab:cb:a7:c1:92:
b3:d8:51:54:f1:9e:5c:1d:a0:01:c0:e2:c3:d3:06:1d:c3:dc:
09:0e:47:e2:ca:56:4d:67:1e:d2:8a:9e:b6:54:b8:c6:15:d3:
d6:71:6c:61:1b:79:91:f4:e3:07:dd:2c:87:87:bd:99:6b:9b:
91:a4:59:48:90:65:0d:a9:2f:8c:4c:da:4e:07:02:93:e7:f5:
2c:48:ee:fc:e5:f6:2e:71:c4:a8:cd:86:5f:fb:0f:b2:a1:c1:
76:24:25:5d:b2:8c:db:d1:4d:8e:08:c0:ee:f5:19:88:dd:41:
3b:ef:e0:41:e8:6e:bb:d6:7b:63:7b:fe:64:0b:4c:03:e4:25:
7b:89:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:49 2026 by rpki-client