Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: ZVSvDrPzIp3sbTeMslgKHEKSLrRbiJVRCAXLjL6nFVI=
Subject key identifier: 53:80:7B:F2:C3:19:6C:73:1C:93:28:63:41:95:EC:14:A8:D4:A5:65
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 01A1073853266439CBFC511E6A565C3C6B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 058B
Signing time: Sun 04 Oct 2026 14:01:34 +0000
Manifest this update: Sun 04 Oct 2026 14:01:34 +0000
Manifest next update: Mon 05 Oct 2026 14:01:34 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: G0TEEWqq+wCE5di01atu6Xf7tNH9ShsXln/07R17l7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:38:53:26:64:39:cb:fc:51:1e:6a:56:5c:3c:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Oct 4 14:01:34 2026 GMT
Not After : Oct 5 14:01:34 2026 GMT
Subject: CN=53807bf2c3196c731c9328634195ec14a8d4a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:44:04:3b:6a:c4:21:26:06:6f:56:22:cd:
74:62:dd:80:26:c5:d9:1b:de:a5:d9:f4:db:0d:d5:
f7:f0:2b:f6:ac:1f:16:76:d5:e3:c7:7d:91:34:a0:
40:f6:e0:ea:8b:b5:c5:39:15:e9:f3:32:a4:26:6b:
89:8a:16:35:fb:dd:9e:40:87:47:bc:40:dd:17:3f:
da:87:52:21:d6:64:9c:97:9c:82:0f:cc:34:c4:e3:
4a:c9:66:8f:2c:cb:f0:0c:ee:82:1e:0e:e7:53:9d:
b4:0e:ed:16:29:ed:15:2f:71:1e:79:49:82:c8:25:
16:b6:54:5a:c3:03:f8:38:c3:9c:eb:70:17:21:85:
d7:36:79:79:b0:92:9f:4b:0c:7c:cc:c2:42:b2:45:
8e:65:28:6a:83:f9:7b:ad:fb:60:16:5b:e6:c1:e7:
1b:8b:79:63:70:5c:ff:18:2e:74:75:9d:27:e3:0a:
da:88:4f:20:3c:6a:d8:2f:df:84:d7:2a:38:ce:1a:
38:2c:3c:8d:66:6b:96:c8:d4:63:8e:17:d3:42:ea:
27:8e:c2:ce:42:4f:24:f5:e1:2e:29:9f:2b:d3:a1:
47:01:c2:74:4e:b0:c8:13:5b:d1:32:06:f6:b5:e2:
70:c1:25:a6:12:ae:a1:63:75:26:94:18:45:40:be:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:7B:F2:C3:19:6C:73:1C:93:28:63:41:95:EC:14:A8:D4:A5:65
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:e3:19:98:6b:5b:d4:37:4a:f3:07:9b:1d:cb:5c:07:cd:
6a:b4:b9:f6:e1:97:1f:f0:ff:55:76:d1:6f:0e:48:06:f0:dd:
c8:e9:ca:eb:78:b4:86:01:f8:79:2d:ef:6a:d1:92:cf:84:bb:
6b:a7:e6:b1:7e:00:c4:54:7b:60:36:26:44:0a:61:7d:97:b3:
4f:06:73:d6:14:1e:0b:f1:6c:15:a5:91:3b:68:ef:8b:12:e2:
48:8d:a8:7a:a1:22:66:76:62:25:ad:b6:d7:cf:49:d6:1f:43:
d0:79:5a:eb:8b:5a:e7:03:f2:1d:b8:62:11:51:fa:af:7b:a7:
69:9f:ca:a7:01:62:03:41:77:5a:7b:96:d9:32:93:2a:61:1a:
b4:71:56:d4:5d:69:32:df:28:ba:7f:ec:b3:ed:f8:40:84:80:
c1:71:e5:03:64:f7:c8:d6:35:fb:30:c2:36:ff:82:ce:13:3a:
80:9f:b3:5d:75:db:5a:e0:23:97:4c:8e:0e:a8:d4:7f:2d:34:
29:4a:1d:fb:f8:44:e0:0e:ea:47:2a:87:e9:e6:c6:12:ff:4a:
49:04:ca:7d:f4:46:9a:e1:eb:30:d2:12:be:df:43:ad:3c:7d:
91:5d:c8:dd:4e:86:50:15:6e:4b:91:f4:f9:70:61:75:20:2e:
3f:f3:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:31:26 2026 by rpki-client