Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 0SQZ25OBHN5xUu0gJyGWK0kFY5G4hyWu5HDvROZy/OE=
Subject key identifier: C2:D1:60:FB:A2:8A:BF:0B:43:1A:ED:36:EA:11:FD:B5:31:F9:F8:25
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019FAB9A55082C9BC43FEC8ACC8E4E9494DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 04D7
Signing time: Wed 29 Jul 2026 02:00:45 +0000
Manifest this update: Wed 29 Jul 2026 02:00:45 +0000
Manifest next update: Thu 30 Jul 2026 02:00:45 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: Ym8vaMcOkb7PLXoaHtOgHQPyoJcc/HpGJFEsFM96x44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:55:08:2c:9b:c4:3f:ec:8a:cc:8e:4e:94:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jul 29 02:00:45 2026 GMT
Not After : Jul 30 02:00:45 2026 GMT
Subject: CN=c2d160fba28abf0b431aed36ea11fdb531f9f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:13:ea:0d:58:d2:f9:bc:9b:58:45:b7:c4:
a7:c2:4b:e4:c4:8f:a0:fe:97:31:47:f8:28:69:2d:
45:f0:b8:73:84:28:f1:d4:ef:66:a6:b0:25:86:4f:
ed:ab:f9:ca:45:fe:7c:37:03:53:45:3a:11:f4:e9:
a1:93:45:77:4c:95:b9:2d:78:a7:cf:37:88:bd:f5:
76:3c:4d:3b:26:4e:1d:51:45:d9:12:46:b8:62:85:
20:86:12:c9:7c:cd:a7:89:7a:89:30:f0:bc:da:6e:
bd:32:c7:1d:66:37:5d:89:06:8a:39:a9:25:3b:12:
7b:1b:97:f2:30:83:03:04:25:5d:58:31:eb:67:96:
f3:9d:90:f8:98:61:e6:32:22:81:26:cc:3b:d6:92:
49:9d:ee:a2:5b:29:c2:27:23:f8:d5:0b:f3:a8:b2:
7a:42:05:d1:21:72:39:e9:42:40:48:66:33:dd:a5:
bd:67:56:09:29:e3:9b:bc:70:ba:cd:20:0c:81:0b:
74:8c:0f:c3:35:08:66:2f:c3:be:44:33:20:25:0d:
d1:ca:fd:a6:12:20:bb:f6:9e:c9:e7:f9:a4:d1:27:
83:ae:ee:3b:54:a8:f4:e0:d9:3a:a7:00:a5:b0:fb:
a1:ae:b9:70:eb:1c:34:8f:1d:78:19:05:70:0d:29:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:60:FB:A2:8A:BF:0B:43:1A:ED:36:EA:11:FD:B5:31:F9:F8:25
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:95:03:4d:06:e7:ab:72:9f:bc:d4:64:71:3a:a0:05:31:
49:d2:1d:e1:c1:98:d4:62:ee:97:72:a6:b3:0c:e8:17:79:ce:
5c:2f:c3:d5:e0:06:7c:78:d3:8c:b4:4b:e4:58:50:65:2e:16:
93:a5:26:c6:3d:0d:63:e4:ef:3d:18:5f:8a:60:70:74:8c:6a:
da:20:9a:2c:9c:04:bf:d8:0c:b4:91:a0:59:84:7f:85:7d:04:
ca:b4:34:5e:b6:0e:a8:55:a3:2f:43:95:5d:fe:01:a4:6e:d7:
b1:b2:d8:80:ab:cc:02:97:4e:5b:bc:a1:5f:17:41:81:64:3d:
66:ec:64:77:a6:bb:b0:11:a4:04:6a:e5:08:b5:aa:e3:06:04:
58:22:df:03:de:f3:82:89:7d:1b:70:08:4b:51:64:67:a6:40:
6d:c4:d1:31:bf:55:20:b4:92:5c:6a:92:c8:9e:64:63:16:f8:
2e:e1:18:04:ac:d8:89:d2:2e:d1:bd:7a:74:75:e5:bc:01:db:
62:8a:9c:54:53:86:bc:1f:0d:84:41:c9:ca:be:3d:a2:16:4c:
a0:05:0f:61:a5:5b:58:53:62:2d:01:9d:d6:60:7e:86:88:04:
c0:35:4e:6b:04:d8:7c:0d:e2:43:a2:31:06:61:8d:40:58:dd:
bb:99:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:46:56 2026 by rpki-client