Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: zAjYEYGg0hqmWhsOTXiKCGnWeX/4Si30oz6N1+NKAWg=
Subject key identifier: 91:93:76:71:36:46:65:F9:DE:3F:66:B3:AF:C0:4A:56:97:80:80:8A
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019D2A72AAAE88CCADEEAC1D0B277AF486BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 038B
Signing time: Thu 26 Mar 2026 14:00:50 +0000
Manifest this update: Thu 26 Mar 2026 14:00:50 +0000
Manifest next update: Fri 27 Mar 2026 14:00:50 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: EXyx7Plm4s2WVmkNME6/pLCzjjK7K79XeAgC/DzMu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:aa:ae:88:cc:ad:ee:ac:1d:0b:27:7a:f4:86:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Mar 26 14:00:50 2026 GMT
Not After : Mar 27 14:00:50 2026 GMT
Subject: CN=91937671364665f9de3f66b3afc04a569780808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:7c:bd:8c:cd:b8:96:20:b8:a6:06:3e:1e:
e3:d1:3d:6f:83:d0:35:cf:51:81:cc:f1:73:94:da:
b4:0e:8b:e7:93:50:b0:8b:4d:9b:53:98:88:5f:7d:
ec:bd:a6:04:ee:f6:1f:42:c6:5c:b9:41:62:ea:26:
90:42:ca:2c:e5:39:74:47:63:bc:38:c5:dc:1b:4d:
7a:21:b5:e0:c1:ab:87:0d:69:f7:2b:4e:60:5a:d9:
e2:ce:99:39:12:1b:0d:51:3d:45:06:b7:d3:86:fb:
80:77:95:14:fa:83:f2:e3:30:99:90:cd:0f:6b:39:
e9:03:6f:da:5e:c2:a7:06:57:cb:72:48:eb:5f:f9:
64:f2:78:31:db:21:ef:fa:84:f4:c1:26:80:a5:fb:
6f:b9:30:2c:99:9b:61:b3:08:f8:7c:35:b5:89:c3:
3b:0b:b0:81:5e:d2:3a:97:a9:0e:fb:df:2b:bc:34:
c8:46:b3:7e:f0:9d:22:fd:09:8c:47:9e:85:79:ce:
2d:04:08:b5:4c:dc:5e:af:c3:f6:37:d3:fe:86:31:
10:a1:29:77:24:12:d8:7c:9f:cd:59:5d:0c:68:56:
d8:4e:18:bb:e7:bb:f2:b0:43:e5:cb:8a:38:2e:7a:
5a:9c:25:b6:dd:4a:28:33:16:1b:95:db:19:a7:99:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:76:71:36:46:65:F9:DE:3F:66:B3:AF:C0:4A:56:97:80:80:8A
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5c:42:04:53:fd:e3:9c:8d:06:d2:75:79:89:ca:99:34:36:
4c:f9:83:3f:c3:1d:88:ae:75:b9:a5:8c:8d:f9:3e:e0:a1:5b:
7a:df:fa:8b:45:35:6e:ef:76:e3:4a:09:83:a8:e1:77:4f:a2:
39:4c:fe:1e:9c:7f:f0:8c:b7:56:91:65:f4:4b:d5:e9:e7:c6:
3d:21:a7:33:89:cd:00:e8:5b:fb:2c:b2:bd:2d:04:8e:7e:22:
83:cd:77:e7:8d:6e:5a:7e:d0:16:e7:20:9c:4d:f3:2d:ad:ba:
6c:76:4f:f1:f1:a0:8b:6a:a3:ae:d2:a6:b7:e0:2f:b8:7e:0a:
57:4f:53:5b:73:14:29:b0:a6:e5:5d:04:f8:d3:f1:d6:e1:b4:
37:12:c0:70:d5:c6:e2:00:df:32:02:ab:b0:e7:fa:cc:8f:e9:
0e:eb:49:48:5f:d0:bd:d1:02:7b:27:c5:68:d9:60:ac:64:3d:
8a:a1:64:f3:e0:dd:12:0d:f1:02:53:8b:0d:3a:4e:9d:83:a8:
d8:e0:70:08:98:ed:ce:5f:d5:73:0e:4d:ba:5f:c1:a4:01:c7:
e2:d6:df:63:36:f4:81:d0:0a:8c:52:36:f1:35:2e:74:83:76:
5e:13:2d:e3:ed:2f:db:a7:d2:21:df:c8:17:5f:bd:83:6a:0b:
60:a8:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:31 2026 by rpki-client