Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 5dVsHEAmzovu8zOSOAPHYQMG3nQLkzoIQQB3FeOTHPI=
Subject key identifier: 8F:A4:5B:55:6D:AA:B0:1A:96:0B:8B:62:B7:75:E7:75:35:F4:8F:04
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 01A1889B9C41FCC5A862A0B43B9F5C981077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 05CE
Signing time: Thu 29 Oct 2026 17:01:01 +0000
Manifest this update: Thu 29 Oct 2026 17:01:01 +0000
Manifest next update: Fri 30 Oct 2026 17:01:01 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: oyd6YP7nYAuoFc9Hbk7upTq77/LAXmtbDWh4DfyzFcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:9c:41:fc:c5:a8:62:a0:b4:3b:9f:5c:98:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Oct 29 17:01:01 2026 GMT
Not After : Oct 30 17:01:01 2026 GMT
Subject: CN=8fa45b556daab01a960b8b62b775e77535f48f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:a2:66:0c:0e:c8:df:03:db:c1:b2:00:eb:
e4:01:12:5d:44:64:9e:75:11:b7:8e:bb:7c:09:81:
42:c1:67:26:14:25:30:aa:a3:99:a2:29:dc:90:0f:
33:19:5c:a6:a3:fa:8c:2c:4c:f9:f5:eb:29:a1:4f:
4f:51:77:ca:63:98:a4:96:16:e2:34:b8:5b:fa:d2:
37:71:34:f0:4a:3e:68:e9:37:9a:b2:b2:7a:d4:e9:
61:53:e2:c7:71:c5:ae:83:1b:63:17:2a:22:06:6e:
6d:f8:5a:ef:d7:3b:7b:93:2a:67:92:1d:7a:f6:f3:
3d:fe:04:e4:54:d6:2b:33:1a:d4:76:3b:65:76:b8:
b6:ac:10:34:8f:d3:de:78:03:6c:e8:48:bd:74:d8:
35:c7:b2:1f:bb:b3:f8:13:30:64:bc:82:58:b7:3b:
7d:6c:a3:86:6a:09:c4:76:92:e7:3c:f1:2a:a5:b9:
45:97:66:d1:a0:c8:6c:91:6d:64:5f:83:56:ec:66:
f4:1e:db:1f:48:65:03:3b:6a:87:40:a5:88:6d:82:
63:b7:59:4b:7f:3c:ad:a0:d4:91:69:ca:83:38:86:
32:05:a6:f2:97:42:1f:7c:a5:07:3e:eb:97:3c:95:
ab:fd:27:f7:10:70:b5:14:fa:6a:7d:89:12:05:d1:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:5B:55:6D:AA:B0:1A:96:0B:8B:62:B7:75:E7:75:35:F4:8F:04
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:6d:be:ad:7a:5b:06:4f:76:c1:5c:11:8d:b7:85:97:64:
a4:ac:ec:d4:d6:96:76:9d:b2:84:90:9c:89:4b:6f:26:b5:25:
e9:b4:94:be:a2:ac:51:cd:c3:80:81:39:58:1c:ed:62:1b:df:
ee:bb:0f:70:45:a3:64:eb:99:e3:ad:8e:c5:0a:e1:a7:21:fe:
e1:2f:78:c4:c0:2e:7c:e4:9e:ff:26:d6:8b:b8:aa:0b:ca:97:
26:92:9e:94:1b:91:2b:72:94:fa:3b:86:5e:e1:ed:23:10:72:
cd:4d:1e:36:c7:c4:56:70:75:df:77:3b:77:63:94:5f:86:3e:
33:dd:2c:d5:90:24:95:95:80:3d:42:03:0a:a2:51:0b:ea:af:
de:9a:e5:e0:9a:3c:96:5a:e5:55:41:64:74:1d:65:a2:c1:c5:
cb:10:83:50:e8:ee:0b:7c:51:ec:75:9d:d6:c0:8b:5d:b1:d0:
37:9f:10:13:83:4b:48:50:6b:0a:c5:16:22:f5:9f:21:23:4c:
82:64:80:cf:af:00:65:87:98:e3:d9:88:04:fe:4a:c0:07:89:
3c:e1:ed:ad:df:c5:4a:fe:bc:5d:9e:72:d1:53:03:72:91:f5:
60:b5:f7:44:f4:ff:b3:e8:44:16:36:6f:ed:07:3c:c1:59:05:
3b:70:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:37 2026 by rpki-client