Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: kXv5e4JoNNBuegKorYfZHSsrmiwRsGpsrIu4iWOffkE=
Subject key identifier: 29:B6:76:EB:AD:11:74:B1:18:93:B7:7A:C0:EC:C0:E2:23:9E:8D:B5
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019CAED9D0BDF8A874BED0314599EC42C89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 034B
Signing time: Mon 02 Mar 2026 14:00:36 +0000
Manifest this update: Mon 02 Mar 2026 14:00:36 +0000
Manifest next update: Tue 03 Mar 2026 14:00:36 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: jX2SNmKPhvg6vjKUXQgcwUTH9ZudH1htSY3wDhhmZNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:d0:bd:f8:a8:74:be:d0:31:45:99:ec:42:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Mar 2 14:00:36 2026 GMT
Not After : Mar 3 14:00:36 2026 GMT
Subject: CN=29b676ebad1174b11893b77ac0ecc0e2239e8db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:c6:8e:bc:47:5e:dd:5c:1d:e8:ab:c5:7b:
87:12:d7:c5:16:f2:5d:ca:5b:a7:ee:7e:66:e4:7f:
5f:4e:fc:ce:29:4b:c0:89:e4:f7:92:d7:b4:57:47:
22:6b:72:89:32:2f:12:85:20:18:9f:a2:1a:1e:c7:
13:41:f1:b0:66:69:a5:97:ef:a9:ee:5a:88:07:4a:
53:0d:49:5a:15:d9:5a:cc:79:28:6b:ca:73:ee:6e:
3b:6f:a3:c5:96:0d:fe:4c:ea:58:71:cd:ea:d0:73:
c9:2c:8b:87:2c:f0:d4:cb:a1:67:65:9e:e0:e6:17:
2a:02:32:62:66:97:cd:a7:43:73:de:00:11:de:86:
84:44:c8:be:0c:f3:a5:74:fb:b1:a8:ce:69:c5:f4:
47:7c:8c:40:ba:71:6f:36:b9:4c:97:48:8b:0f:48:
dd:23:12:18:d3:cc:4f:90:5e:76:e8:dd:fa:97:69:
e3:5e:51:bf:8e:0e:f1:b3:af:69:f2:a1:5a:cf:54:
35:d0:45:fa:c2:26:d8:b9:be:ec:b8:28:3e:9b:74:
0a:b6:29:9b:76:5e:b3:3e:c8:f1:f5:2e:96:65:42:
38:e6:8d:1f:da:5c:88:01:f5:a6:90:11:5d:3a:b7:
3c:2d:45:33:1e:f2:25:8b:02:90:aa:9d:58:84:f1:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:76:EB:AD:11:74:B1:18:93:B7:7A:C0:EC:C0:E2:23:9E:8D:B5
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6c:f6:5a:4c:9e:01:8a:36:0e:ca:7c:a7:27:af:2c:62:2a:
ec:b3:7d:7c:14:d4:fa:31:e4:68:f5:f5:66:89:b0:05:08:1e:
40:33:81:7e:cd:0c:86:68:8f:8e:d8:b5:50:d1:31:a7:b4:f0:
f4:ee:c0:97:a1:30:3e:1b:23:63:73:e8:4f:05:ca:79:8e:18:
58:27:e9:b1:6e:3f:3f:80:42:16:b8:6f:25:22:e6:92:36:18:
97:37:21:10:41:6a:cf:d4:38:a1:23:6b:9c:31:64:30:3b:d9:
3d:ad:ea:12:cb:03:f6:41:b0:81:b8:c6:64:9c:a9:e9:1b:ef:
a8:c8:b3:cf:f4:6b:81:91:4a:f9:61:a4:de:d3:60:b7:da:54:
d2:29:70:d8:49:f7:03:31:3f:13:13:09:c4:59:91:4f:d3:56:
1b:2a:45:15:a1:34:9e:90:a1:74:ff:03:bc:89:b5:e6:fa:b7:
5c:14:4c:83:2c:67:77:73:22:6f:a1:e8:f8:d0:85:0e:e1:c8:
5e:5f:c6:f9:ee:e7:67:15:52:69:f2:65:b1:c2:1f:ab:25:3d:
0a:25:ed:30:19:cd:c4:ae:48:89:98:c8:7e:c7:31:2d:26:47:
1e:a4:7b:64:6e:94:33:45:9e:95:38:ce:4b:27:63:5a:a8:0c:
d7:cd:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:41 2026 by rpki-client