Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 24OlRyNmkCKHOBYiJZGbtTdyMvY9U4HjYyxwaWdnXtM=
Subject key identifier: 29:7D:F3:8A:1D:5E:CA:6D:1B:78:DF:6A:39:12:6D:E4:82:CE:02:5C
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019FA1F26231743555EF36DD2A8BF24CCFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 04D2
Signing time: Mon 27 Jul 2026 05:00:44 +0000
Manifest this update: Mon 27 Jul 2026 05:00:44 +0000
Manifest next update: Tue 28 Jul 2026 05:00:44 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: n+Xrv6CTKTnX7DnxfiaHoyceyWGstRr6qQ+zS0OeVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:62:31:74:35:55:ef:36:dd:2a:8b:f2:4c:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jul 27 05:00:44 2026 GMT
Not After : Jul 28 05:00:44 2026 GMT
Subject: CN=297df38a1d5eca6d1b78df6a39126de482ce025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:de:86:fb:50:35:38:47:0a:5c:71:c9:3d:
b4:53:ed:a1:81:f2:17:ca:e5:d7:ae:83:e8:a3:c4:
29:8c:c7:e2:09:f8:63:56:c9:61:96:d8:1a:53:c3:
3f:36:1a:4b:7d:74:b2:25:87:70:3e:ca:fa:e5:3d:
73:82:f6:2f:df:94:d0:58:c2:fd:ef:1e:2c:c5:6b:
f0:e8:01:08:7d:82:a5:2c:36:85:c5:4b:15:57:d1:
87:4c:4b:1f:52:36:12:30:48:b7:a4:90:d3:03:85:
67:62:00:07:93:8b:b8:aa:2b:5f:a0:bd:90:79:dc:
a1:d4:37:09:f2:f5:56:d4:8f:f4:7d:28:d4:e3:f5:
1d:88:7e:90:be:a3:45:ba:4a:6f:3f:f4:2b:21:17:
62:25:d3:af:ab:f5:46:88:a4:ff:23:e8:19:8e:14:
42:29:8b:0b:3f:ed:2d:c9:65:0b:be:d7:f5:d4:24:
d4:67:29:c8:5c:ba:77:0a:4c:67:7f:eb:fe:d0:c5:
e3:89:85:02:69:61:94:6b:d5:50:42:91:8c:c2:78:
30:7b:2d:b7:bc:ed:fa:ac:b0:c8:fc:b0:81:61:cc:
a5:fd:80:14:96:12:54:1f:0c:91:8c:76:30:68:4b:
ca:c1:b6:42:fc:b5:b0:9f:b0:3c:39:f5:c3:11:06:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:F3:8A:1D:5E:CA:6D:1B:78:DF:6A:39:12:6D:E4:82:CE:02:5C
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:cf:29:77:fc:31:c4:4e:94:2b:7f:fe:e7:4f:55:fd:35:
33:7e:a6:66:f1:69:5a:b3:b5:95:b5:37:0c:a4:ed:f9:76:14:
a8:71:98:96:65:44:76:2d:3f:dc:2d:21:1d:65:3d:33:b5:63:
56:b7:cc:f5:54:df:28:e7:bf:7d:18:df:39:79:71:66:dd:d0:
4f:bb:ae:83:1a:96:22:21:04:1d:58:64:41:6e:50:4e:42:df:
90:83:36:1f:bb:c6:b5:40:cc:89:87:9e:0d:f5:7d:52:5b:a4:
63:66:92:46:db:d3:cc:cb:49:25:79:bd:19:54:75:44:dd:57:
21:bd:2a:d2:31:52:be:b6:20:07:5c:c0:1b:ea:d5:d5:0d:7f:
ef:77:be:34:23:0b:44:61:c8:8c:13:9d:d8:a7:87:cd:2f:86:
c3:25:79:ef:b7:44:f8:26:40:a1:ea:1a:74:ce:5f:7d:c4:31:
b1:e4:67:87:2e:0f:9b:50:d5:e9:7b:4c:30:9b:6c:a8:3c:b0:
5b:ff:7b:cd:d1:51:c8:e2:92:8e:af:2e:a6:23:1a:24:41:da:
c3:2f:f8:5f:c8:c6:d6:69:08:4c:9f:bf:e3:0d:15:44:c6:28:
60:e0:c5:e5:22:aa:99:fa:de:67:3e:91:98:f1:b9:88:a1:bc:
bf:76:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:54:02 2026 by rpki-client