Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: kWqevI12tfYNN0CiqDhxA49UyuxeRvBNomxqlE4wlyU=
Subject key identifier: A9:54:47:97:EF:16:A4:CD:11:0E:40:C0:0B:C6:87:AD:8F:83:9D:8F
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 01A13590B7153B93D1C2C429DE469F6A020F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 05A3
Signing time: Tue 13 Oct 2026 14:00:38 +0000
Manifest this update: Tue 13 Oct 2026 14:00:38 +0000
Manifest next update: Wed 14 Oct 2026 14:00:38 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: DwvWPT45i8iSHjhCBdtWDUKiGhC4hETiJh++wKuTep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:b7:15:3b:93:d1:c2:c4:29:de:46:9f:6a:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Oct 13 14:00:38 2026 GMT
Not After : Oct 14 14:00:38 2026 GMT
Subject: CN=a9544797ef16a4cd110e40c00bc687ad8f839d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:24:90:b0:9b:e1:a6:53:8e:e4:2c:36:a0:
4d:03:d6:77:2d:40:78:81:a5:55:c5:17:ba:67:cd:
31:84:96:97:0f:72:b0:a0:4a:3d:13:39:fe:eb:59:
71:59:c1:57:17:4b:ae:4f:cf:b6:ff:f8:52:05:75:
6f:21:98:04:fc:39:39:0e:5a:73:9a:77:ef:2a:29:
4d:06:2f:20:54:c4:f9:80:db:16:c5:dc:cc:88:72:
c8:3e:e3:b5:9c:65:6e:83:e4:0e:2b:d3:18:79:0a:
a5:73:e3:de:7c:41:2b:c1:88:4a:5b:3f:f2:f0:a5:
32:8d:6f:e5:eb:f7:43:0d:a9:f6:b4:ef:64:7c:62:
5d:23:1d:4e:0b:da:08:a5:b4:f5:9d:85:1c:cc:d6:
f5:f5:3e:f2:52:6d:8c:c1:48:f3:c8:d2:d3:4c:f8:
67:49:8b:6a:11:15:81:ff:0e:2f:fb:0b:6b:53:ab:
2a:4a:0b:cf:7c:1f:d6:51:78:0a:0c:22:f5:33:61:
8f:4a:d3:c8:b4:63:59:2d:34:44:d0:aa:4b:27:44:
2a:11:41:4e:6b:d3:68:57:6d:f2:42:40:72:5e:c7:
55:95:08:48:b2:42:b9:a6:5b:2a:fa:44:08:e6:79:
10:42:03:27:91:d1:4e:4c:60:1f:de:24:89:97:8e:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:47:97:EF:16:A4:CD:11:0E:40:C0:0B:C6:87:AD:8F:83:9D:8F
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:6d:80:e9:32:53:14:3b:f4:16:c7:bf:66:04:75:9c:48:
9e:7a:7f:7c:09:a8:77:88:c0:3e:0b:40:87:98:64:a2:9e:a5:
44:ac:c1:fb:70:5f:cc:fa:52:c1:88:4c:f3:db:27:88:fc:9a:
65:d1:19:b0:8b:b7:16:20:1c:b9:1a:81:56:f2:06:65:0b:9a:
49:3b:e0:97:02:04:02:c3:3b:e9:66:de:d9:3a:4b:3b:94:0a:
41:3f:2d:29:96:b1:fd:f6:b5:f6:cd:93:6f:a0:39:e3:68:fd:
2a:9c:67:b0:80:8e:be:16:6d:db:dc:cc:af:40:2f:9f:cf:61:
bc:6b:e2:fc:02:3c:91:03:b0:f3:2f:b1:8e:ff:ac:5b:5b:5d:
c8:29:94:ab:40:26:57:7d:d8:74:42:b8:6d:a2:9c:b9:e2:df:
1b:c4:7c:d2:df:ce:5b:0b:55:6f:79:df:60:47:62:83:54:55:
cb:24:33:bb:ff:2b:01:36:14:e4:b5:cd:bc:5b:e0:88:67:0e:
e1:e3:81:50:37:72:53:ca:1d:52:84:00:3d:1b:e5:a0:78:dc:
5b:68:3c:12:2c:f9:2b:1d:33:14:43:db:f7:13:86:f5:c0:df:
a7:25:07:b6:bb:91:70:53:f8:f1:e0:b4:37:22:5f:58:90:f4:
14:46:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:20:38 2026 by rpki-client