Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: apLHZHoXmLu5tfY41sG6LKqO90R2BaxMoB6k3ShsXgo=
Subject key identifier: B5:C2:71:D1:23:7A:33:81:AF:C6:4E:B3:BC:12:89:92:F8:6B:98:E5
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019CACEB6EDD238B1C346446D404E6BC05D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 034A
Signing time: Mon 02 Mar 2026 05:00:36 +0000
Manifest this update: Mon 02 Mar 2026 05:00:36 +0000
Manifest next update: Tue 03 Mar 2026 05:00:36 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: R66+5Z8SxUAAT1jFKOzvvzmBdnM5fqDNwVmXB8bs/GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:6e:dd:23:8b:1c:34:64:46:d4:04:e6:bc:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Mar 2 05:00:36 2026 GMT
Not After : Mar 3 05:00:36 2026 GMT
Subject: CN=b5c271d1237a3381afc64eb3bc128992f86b98e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:ff:d6:59:30:26:56:3e:36:21:b7:be:29:
f1:68:78:31:e9:ab:c4:15:10:51:d1:eb:a4:19:e1:
4f:50:42:fb:e6:b8:79:c0:ff:78:b3:28:24:80:6a:
07:ab:1d:e6:0d:3e:86:9e:2a:fe:91:2c:a1:54:91:
2f:69:6f:dd:81:34:fc:b3:22:b6:38:f9:f1:7c:c3:
f9:5b:45:5a:8f:6f:e7:12:52:1a:6f:2e:44:93:df:
de:bd:54:41:61:6d:a5:7e:20:c0:5a:11:30:39:df:
ab:b8:ea:00:b1:44:d5:bc:76:98:d6:f2:d1:60:1a:
0a:62:8d:80:1a:54:4c:a0:dd:6d:1c:af:26:42:d3:
b2:fd:1c:ca:3c:f8:52:e3:0b:61:31:9f:81:df:20:
7d:06:8d:08:16:3c:76:96:1c:c0:61:15:29:5f:8a:
61:44:f8:a4:ac:2d:fd:d4:fb:61:67:e9:5e:0d:c3:
df:4c:64:96:56:20:c2:02:ab:b8:67:a4:43:9d:7f:
56:88:b9:36:6c:cf:d4:6d:57:a9:92:6d:3c:d1:c4:
ad:08:66:c1:3c:7f:e8:2c:60:ce:46:3a:19:e9:00:
d7:1c:ad:22:25:fb:2b:b5:40:0a:8e:9b:84:c3:07:
9d:5c:a1:3e:38:1c:a0:24:77:d3:0f:f8:ab:0e:2a:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:71:D1:23:7A:33:81:AF:C6:4E:B3:BC:12:89:92:F8:6B:98:E5
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:e6:82:0b:b6:86:d9:7b:0e:1b:78:9f:57:98:5c:ee:1e:
ef:e4:f1:dd:29:eb:11:16:68:b7:41:9e:42:a7:71:2a:2d:ed:
f1:de:76:83:f4:2d:6b:3b:5e:73:e4:8d:7a:78:91:ee:c6:62:
0b:af:16:25:bf:d6:80:2a:db:3d:65:6c:d1:62:77:42:d6:ba:
4f:5b:dd:32:2a:8a:4e:4c:d0:f7:d1:41:ed:75:57:f8:d3:bb:
6c:e6:a4:6a:25:84:4d:82:1d:a3:76:51:da:91:03:b3:bf:02:
92:0e:f8:d5:89:9e:1b:4b:c8:7b:16:2c:f6:5e:7d:56:05:8a:
79:a2:e2:10:50:17:ee:ed:18:ab:7e:95:d4:c6:45:02:1a:70:
cb:fd:fd:73:bd:f1:34:66:13:2e:82:76:4a:d9:e3:90:2d:3b:
71:15:5d:46:7f:ba:97:ba:23:19:9f:6c:eb:e1:d2:67:d6:f9:
33:fd:06:55:80:74:01:da:33:d6:b8:23:9f:f8:d7:f3:ac:ae:
1e:c5:bf:be:40:63:2a:0d:7a:34:17:38:42:4a:68:6c:ce:a5:
eb:33:6e:41:ab:f8:06:63:0a:03:c9:03:a9:8f:d3:cf:79:56:
a5:9c:d2:55:22:97:30:f3:c4:53:42:ae:6c:d0:67:0e:52:6b:
0d:c2:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:39 2026 by rpki-client