Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: tkqmlryhftPjJ1X3hIs880quk7Ouf1CtMxihG+pSTnk=
Subject key identifier: FC:A7:C1:87:16:F8:D6:FF:A7:04:81:F9:53:B8:47:34:43:3C:CF:2F
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019E1FB60EC2476B240E4381D959FCE23C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 040A
Signing time: Wed 13 May 2026 05:01:25 +0000
Manifest this update: Wed 13 May 2026 05:01:25 +0000
Manifest next update: Thu 14 May 2026 05:01:25 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: LLHQrcpZE6A/hz4Xgt0P++ob1PmmuKRVBACBBeQ1D1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:0e:c2:47:6b:24:0e:43:81:d9:59:fc:e2:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: May 13 05:01:25 2026 GMT
Not After : May 14 05:01:25 2026 GMT
Subject: CN=fca7c18716f8d6ffa70481f953b84734433ccf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:1c:df:c9:14:c8:d7:7c:db:6a:cf:b6:68:
ac:07:26:9f:c5:0d:de:fe:1d:e9:8b:dd:94:61:50:
ef:53:e6:c5:00:b3:b9:b0:cd:32:98:01:a5:24:56:
e0:9a:7c:43:d0:b8:46:89:28:14:73:3a:cb:2e:60:
1e:93:b7:b3:73:9b:99:9c:9f:6f:e4:9a:72:a6:bd:
65:be:38:c9:1e:1d:ee:4f:30:cc:0a:bb:d4:a0:89:
8c:b2:76:fc:d4:ac:43:84:c6:6c:b8:ed:5c:0e:fb:
11:cf:37:a6:36:0f:b7:48:06:5a:c6:48:76:23:75:
b8:0f:cb:93:8f:5d:a6:83:09:f0:ee:8b:51:ac:1b:
87:7c:84:e1:f6:08:b3:10:1c:5c:29:1f:0f:b5:34:
86:e2:a9:19:57:40:93:84:c6:94:80:a8:50:37:59:
26:29:67:38:f4:60:73:8e:6b:93:25:b2:50:3e:e9:
95:d5:2c:58:f5:5d:07:55:ee:0e:c5:87:73:5c:bc:
25:f1:08:12:8f:10:f1:01:4e:46:cb:af:f0:1b:bd:
fd:30:a5:6c:22:f2:3c:7d:d8:b2:ef:e2:c7:31:c7:
3c:e8:76:d6:4f:49:3f:73:8f:50:58:cc:cf:a7:b2:
ab:b0:4c:40:3d:40:d7:53:63:1c:91:17:cb:aa:26:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:C1:87:16:F8:D6:FF:A7:04:81:F9:53:B8:47:34:43:3C:CF:2F
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6e:2d:c3:20:1a:96:24:5f:63:d6:fe:e1:a5:fc:3e:00:
bc:45:6a:60:87:13:c1:dc:82:0a:fc:4e:87:86:c6:c5:90:0f:
b5:9c:f9:2c:04:fa:20:ea:3e:23:e0:3e:ee:7e:6d:48:56:25:
8d:af:b4:f5:87:34:f6:68:26:2d:11:49:5c:8d:30:74:39:3d:
0b:13:74:66:fe:1c:e8:78:8d:1a:6c:b7:a1:6b:24:77:6d:3f:
b9:bd:5d:96:84:ac:e7:2a:b5:11:82:39:a9:c3:ff:6b:18:2a:
d5:22:01:eb:a2:90:df:8e:82:6b:31:53:38:f2:19:3a:dd:f9:
ad:d2:e3:3f:55:94:0c:db:33:a8:be:00:a7:0f:59:77:a5:3a:
32:51:c5:b3:b8:e4:d8:c5:ed:4f:d1:39:83:83:05:4b:96:aa:
80:dd:8a:39:1a:d4:4c:c1:8a:12:f2:32:13:67:d2:a9:de:f5:
3a:ba:6a:6d:d3:c9:71:11:3d:80:4f:b1:1f:61:8e:e8:54:2f:
87:46:28:00:98:63:1b:49:a0:67:43:e5:4b:22:7e:2d:a2:b1:
ba:e9:53:61:bb:c3:69:b6:cd:07:c8:ee:9a:9a:66:ac:ec:81:
e7:de:7f:e0:87:ad:46:d3:42:01:64:f6:0e:9a:73:67:b9:6c:
71:ca:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:02 2026 by rpki-client