Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: VFuDIhdmoQNmvyMF4sRfrQ9x/4wJvp/9CGEFLon8QSs=
Subject key identifier: D2:A7:D5:49:34:A4:E5:9D:FA:78:44:EB:96:EB:6E:1A:80:7B:A2:70
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 01A08D8D95EAF071C02006B9373020800CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 054C
Signing time: Thu 10 Sep 2026 23:01:01 +0000
Manifest this update: Thu 10 Sep 2026 23:01:01 +0000
Manifest next update: Fri 11 Sep 2026 23:01:01 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: Y3xdWEuODD3xAUv2lq1qrk7uFLoYNFdnXF6iTrqWM3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:95:ea:f0:71:c0:20:06:b9:37:30:20:80:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Sep 10 23:01:01 2026 GMT
Not After : Sep 11 23:01:01 2026 GMT
Subject: CN=d2a7d54934a4e59dfa7844eb96eb6e1a807ba270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:61:b2:17:0a:04:69:f5:03:47:92:3d:b1:
eb:28:4b:be:9f:0d:f7:db:22:e6:3b:f1:2a:4c:47:
02:4e:31:4d:49:36:b6:83:d3:21:fe:82:b4:f7:7f:
1f:c4:93:14:dc:d5:02:2f:69:5c:74:db:8b:58:05:
28:09:82:21:29:f8:e6:eb:3d:97:8f:5c:8c:ac:9e:
a6:23:21:c6:8b:07:b4:3a:02:ad:ac:44:81:45:2b:
ed:13:6e:13:fe:7b:e1:20:2d:48:8c:a8:c5:1a:ec:
2a:c6:e2:ae:73:61:25:f9:08:65:5e:89:ec:65:d6:
22:38:fe:c7:4a:c2:fd:8e:09:22:ae:e3:b1:8f:05:
97:bf:a4:3f:cf:42:9e:82:dd:04:45:35:fa:37:0a:
73:ac:4d:e4:d6:f2:d5:31:77:cf:ec:fc:1f:1c:a5:
23:a5:21:3f:dd:b8:d7:5f:ee:7e:30:d5:1f:7d:5b:
ae:39:4f:b9:ef:65:e1:1e:56:4c:ce:8c:bd:e2:64:
90:25:4a:2e:ef:89:00:ab:de:67:5a:a8:e6:31:de:
1c:f0:56:58:55:23:28:9c:17:b8:32:e5:2d:28:44:
17:92:7b:ad:0c:ad:b5:21:05:de:92:51:10:be:dd:
85:ad:91:fe:a7:c9:46:a0:94:04:a9:38:cd:5b:97:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A7:D5:49:34:A4:E5:9D:FA:78:44:EB:96:EB:6E:1A:80:7B:A2:70
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:ac:3c:10:7a:79:4f:17:23:31:ae:bb:e4:87:9c:d7:b2:
ce:d1:49:4b:6b:6c:21:50:2c:45:57:60:a0:79:6e:69:ab:6b:
9a:17:7d:fb:a0:88:31:8c:a2:8d:a6:a6:c5:97:2f:4e:71:b4:
85:c3:89:54:b5:87:08:db:0a:ec:b0:75:b3:6f:d0:68:02:1a:
14:08:b5:2c:44:b0:ef:2c:32:4d:c5:72:cf:05:a6:b3:c1:40:
75:9b:16:cf:45:63:89:d9:72:cc:56:d1:e8:bb:5f:26:ce:81:
b9:fc:bc:ad:f4:45:47:81:a1:ac:cd:56:50:0e:b1:ef:b3:07:
74:f6:7d:24:57:4a:06:ca:8a:07:19:27:9d:c7:6b:ea:7c:12:
30:05:bf:b5:c5:9e:0e:68:ee:ae:ab:c2:33:b7:90:e1:09:51:
61:e4:6c:c5:2a:06:49:6c:58:5e:d3:4a:f1:61:b2:6a:c3:38:
ce:8f:8d:ca:2f:91:a9:a4:88:5a:af:a7:75:ac:c9:5e:8a:62:
06:43:1a:60:e6:7c:65:bb:6e:7b:09:ef:57:4f:9e:1f:af:bc:
5a:ca:96:60:4f:7c:0f:5f:ac:33:04:3e:77:19:46:4d:52:74:
80:24:8c:51:f2:62:2b:1f:45:35:91:81:43:6c:29:30:5d:56:
17:a3:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:00:02 2026 by rpki-client