Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 82N6OtYca9xvqmGHEAl/gS67ZGz28o7w2180a0UFp1U=
Subject key identifier: 99:68:7D:2A:2D:34:1E:3A:0E:8D:89:48:92:12:FF:F1:E3:3B:AA:43
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019F946D88872BB6BB285349EF90E3E2C5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 04CB
Signing time: Fri 24 Jul 2026 14:00:34 +0000
Manifest this update: Fri 24 Jul 2026 14:00:34 +0000
Manifest next update: Sat 25 Jul 2026 14:00:34 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: PZBHkAPR5h8CXmqCRtB26QUfqiEECUYyl4aEPTCZk8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:88:87:2b:b6:bb:28:53:49:ef:90:e3:e2:c5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jul 24 14:00:34 2026 GMT
Not After : Jul 25 14:00:34 2026 GMT
Subject: CN=99687d2a2d341e3a0e8d89489212fff1e33baa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:cc:32:cc:fb:65:a6:d7:a5:45:c7:8a:3c:
5f:5c:d7:24:05:0c:d0:41:cc:3d:78:a9:b0:41:ab:
02:13:3b:78:17:cd:54:cc:f3:1d:ed:e3:25:42:e5:
f6:e0:ad:fc:49:a2:2c:1a:43:b4:60:c6:cf:d4:ea:
31:67:ab:5a:01:6b:3a:91:53:1c:e7:39:fb:04:e3:
cd:0e:42:65:ef:25:83:9d:12:6a:4c:d9:6e:cf:8e:
76:eb:ac:76:ab:ff:bf:c8:f2:42:91:7f:97:59:48:
bd:17:2d:b6:6a:b5:54:2e:94:3b:b4:8b:82:c7:9f:
e6:d9:f7:db:d6:4e:15:b3:a2:8c:04:5e:45:50:a7:
fc:31:41:cd:eb:8a:cb:9e:33:49:c2:08:9d:13:ff:
11:c5:bd:a8:41:0e:d5:ff:8c:8a:1d:af:07:e3:16:
bb:a6:50:06:9e:6b:cf:dd:0b:4c:5b:99:00:29:a3:
01:38:a8:57:5c:54:9c:c3:04:67:02:f7:ab:7e:71:
92:b1:7c:a3:81:7c:4b:47:44:a5:e5:1c:2e:be:75:
56:35:39:ff:9a:4d:ed:51:f2:47:d4:0c:88:53:89:
ef:43:6c:78:a3:9f:bf:a2:87:0f:39:1e:cb:d7:d1:
95:06:c0:0b:c4:fd:fb:e1:29:dd:53:24:c4:fe:b1:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:7D:2A:2D:34:1E:3A:0E:8D:89:48:92:12:FF:F1:E3:3B:AA:43
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:eb:a4:b5:b8:1a:a0:95:dd:f6:b8:14:a0:b1:e8:88:8a:
f0:98:4b:ac:de:b5:25:0e:60:98:43:5f:d3:ad:7d:ec:05:ab:
59:c2:17:1d:8c:14:35:8d:9d:f0:ea:ab:f5:a1:37:02:37:e6:
89:cb:45:fe:44:01:03:cf:8a:a9:9d:05:17:12:9e:36:13:7b:
bc:6d:5c:04:8a:6d:6c:f3:8f:bb:1b:c7:1c:9e:14:42:7f:cb:
cb:cc:c0:a1:3c:c6:84:65:e7:68:cd:69:e3:ca:8b:78:5f:6a:
cb:6a:96:50:4f:6f:f8:87:8a:fd:72:e3:36:c6:aa:0d:a1:29:
44:ca:96:73:64:08:ca:17:95:68:39:e1:95:17:52:5a:4d:36:
73:c6:dc:94:4d:fb:4a:23:5d:d0:a2:06:fa:0e:ab:bd:7d:12:
2d:1d:40:75:8e:39:d8:67:f5:56:54:74:5a:a9:10:7b:33:82:
ff:72:99:70:60:fd:5b:b3:fa:41:08:1c:37:01:58:96:ec:e7:
f6:24:f2:24:7b:f2:8d:54:f7:82:52:e3:8d:66:1c:8a:b6:3e:
26:a3:24:c6:66:98:78:6d:fe:56:5d:f5:31:15:90:97:54:49:
af:2c:6a:de:3d:f7:fa:fa:3c:10:59:f8:60:f1:1b:47:e5:4f:
75:71:89:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbYiHK7a7KFNJ75Dj4sWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl
NmRjODEwHhcNMjYwNzI0MTQwMDM0WhcNMjYwNzI1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg5OTY4N2QyYTJkMzQxZTNhMGU4ZDg5NDg5MjEyZmZmMWUzM2JhYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bLMMsz7ZabXpUXHijxfXNckBQzQ
Qcw9eKmwQasCEzt4F81UzPMd7eMlQuX24K38SaIsGkO0YMbP1OoxZ6taAWs6kVMc
5zn7BOPNDkJl7yWDnRJqTNluz45266x2q/+/yPJCkX+XWUi9Fy22arVULpQ7tIuC
x5/m2ffb1k4Vs6KMBF5FUKf8MUHN64rLnjNJwgidE/8Rxb2oQQ7V/4yKHa8H4xa7
plAGnmvP3QtMW5kAKaMBOKhXXFScwwRnAverfnGSsXyjgXxLR0Sl5RwuvnVWNTn/
mk3tUfJH1AyIU4nvQ2x4o5+/oocPOR7L19GVBsALxP374SndUyTE/rG/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlofSotNB46Do2JSJIS//HjO6pDMB8GA1UdIwQY
MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt
OTkwOTc2NzBiNDRlLzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl
LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCDrpLW4
GqCV3fa4FKCx6IiK8JhLrN61JQ5gmENf06197AWrWcIXHYwUNY2d8Oqr9aE3Ajfm
ictF/kQBA8+KqZ0FFxKeNhN7vG1cBIptbPOPuxvHHJ4UQn/Ly8zAoTzGhGXnaM1p
48qLeF9qy2qWUE9v+IeK/XLjNsaqDaEpRMqWc2QIyheVaDnhlRdSWk02c8bclE37
SiNd0KIG+g6rvX0SLR1AdY452Gf1VlR0WqkQezOC/3KZcGD9W7P6QQgcNwFYluzn
9iTyJHvyjVT3glLjjWYcirY+JqMkxmaYeG3+Vl31MRWQl1RJryxq3j33+vo8EFn4
YPEbR+VPdXGJdQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:06 2026 by rpki-client