Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: FerIDci4nZIyzfTX86D2jmUQyY1wtrCY9JzBMFa/w30=
Subject key identifier: B1:39:B1:45:53:17:AB:1F:F0:58:81:CC:4B:24:2C:9A:88:CA:AE:16
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019D9C62E9098F1DDBF24960279514CB7E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 03C6
Signing time: Fri 17 Apr 2026 17:00:20 +0000
Manifest this update: Fri 17 Apr 2026 17:00:20 +0000
Manifest next update: Sat 18 Apr 2026 17:00:20 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: bpplVo/dpXdKodqjhufZ11XkBYxhVyLRNH8OCXQOzNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:e9:09:8f:1d:db:f2:49:60:27:95:14:cb:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Apr 17 17:00:20 2026 GMT
Not After : Apr 18 17:00:20 2026 GMT
Subject: CN=b139b1455317ab1ff05881cc4b242c9a88caae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:35:75:c1:ef:26:e9:58:a9:39:d0:9a:fd:
cf:39:5f:cc:8c:95:2e:c4:48:75:65:b0:89:0f:e3:
74:3b:34:cf:96:ea:15:a7:07:31:c8:55:d3:2f:70:
b9:62:9c:1f:95:74:cf:6e:02:9d:f0:f5:68:e5:58:
e3:45:09:62:97:f4:0d:13:15:30:99:d5:f2:2d:4e:
60:98:1e:ae:62:43:8d:df:d9:3a:f8:53:f7:e4:9c:
61:2c:e0:07:0d:a7:43:01:e8:28:96:75:cd:b8:ba:
41:17:4a:1d:c3:99:50:b5:a4:e1:b1:d6:b7:df:83:
5a:53:21:4f:79:d4:2a:d7:76:4e:b3:fa:02:bb:fc:
60:23:f7:6a:b0:28:ed:87:ae:92:4a:71:e1:5e:9f:
4f:4a:f6:34:4c:2c:5a:42:74:43:d5:52:d8:11:1a:
2e:94:82:cf:08:b4:b1:05:8b:1d:0c:1b:7d:e5:17:
c0:dc:77:fa:4a:33:d4:84:fe:74:3a:34:49:8c:bf:
57:4d:36:4e:71:67:64:d8:b4:da:f7:92:36:3c:4c:
ba:4e:a6:4f:8b:49:fa:9e:1a:bb:f6:d3:ee:84:77:
48:8b:55:4a:01:24:f4:88:ec:3e:63:08:c8:b9:e9:
99:9a:24:93:85:a0:bb:3b:28:3b:39:44:0e:e6:89:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:B1:45:53:17:AB:1F:F0:58:81:CC:4B:24:2C:9A:88:CA:AE:16
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:31:9a:27:2a:99:f3:93:e6:85:a4:0a:52:ec:82:c7:ce:29:
97:a7:72:b7:25:cd:3d:ed:82:a5:ca:ed:f6:5c:3f:b7:01:ef:
19:0a:9a:7f:a6:1b:c4:31:61:fb:f5:4b:bf:b6:ff:51:24:d8:
af:77:bf:2c:a2:16:3c:b9:11:6b:5f:bf:48:19:d0:c8:90:b2:
62:b3:74:98:f9:fd:11:17:d0:b1:24:38:7c:04:89:59:ba:44:
dc:42:94:1b:98:66:e6:33:a1:29:1e:69:bc:95:1b:3e:a0:dc:
d6:93:67:95:b6:0d:92:3d:7f:29:75:6c:d5:a6:67:63:e3:9f:
a7:1b:2d:09:9e:ff:58:f9:14:ba:43:ee:72:d4:47:9e:3a:3a:
5e:04:9e:98:8a:81:dc:84:a0:0d:44:1e:b8:3f:84:c4:78:b1:
63:b2:0b:70:89:8a:3e:d4:d2:b8:aa:a7:11:d1:2a:8c:d3:c1:
6c:55:43:80:65:f2:9b:43:1e:4d:71:9f:35:ac:b0:19:40:bb:
7d:8d:d3:64:95:48:6d:f9:a5:0a:4f:71:b7:84:b0:da:cb:73:
7c:a2:74:b9:50:f1:46:89:97:1a:cc:fc:02:2d:47:17:cc:ca:
8d:ff:5e:a1:c6:8e:0b:07:00:a9:95:a5:c2:9e:3d:69:38:e8:
f6:8b:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:58 2026 by rpki-client