
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: 0NqY6ZU6NvT3NA2xrT7b6FWKmu02lxn+r+maz3i4VgU=
Subject key identifier: 03:F8:41:98:DF:98:2F:E7:B9:E1:D4:03:F7:AB:E7:36:82:04:57:E7
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 019FA9072926C89B49A0B60B699E5E699DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 14:00:46 +0000
Manifest this update: Tue 28 Jul 2026 14:00:46 +0000
Manifest next update: Wed 29 Jul 2026 14:00:46 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: vWoXZ2cjqRt11wOQD24nyWSDbTU.asa (hash: H/d3dWZIDW2sfXMUazgoFnBucag9BiVgeiQslyOpxvw=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: o/+kGZdDnlF097tk+gHfiCoyxLro8EV/+hpqfw2MCK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:29:26:c8:9b:49:a0:b6:0b:69:9e:5e:69:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Jul 28 14:00:46 2026 GMT
Not After : Jul 29 14:00:46 2026 GMT
Subject: CN=03f84198df982fe7b9e1d403f7abe736820457e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:ca:e0:1c:fb:d7:00:e9:75:2c:40:59:8f:
b1:a0:b4:d3:b2:06:00:00:d7:d3:53:94:f5:08:dc:
08:f6:5a:0a:b3:f6:23:1c:f2:13:06:1a:c0:40:19:
5e:4e:43:1a:90:f6:2b:e5:bf:c1:fa:74:da:cc:97:
c0:f4:7b:a9:74:48:5c:2c:9f:1b:d4:80:16:b9:e9:
93:20:54:9f:8d:e5:a7:94:18:ed:d5:32:d8:b3:e1:
3b:de:15:0e:43:8d:2d:32:e2:20:66:02:30:cd:47:
fb:7a:e3:4e:dd:02:58:97:55:d3:5e:1b:3e:8d:cc:
45:dd:03:11:4e:c4:74:22:e6:c7:a9:d8:ad:66:12:
67:03:ec:f7:6e:2f:b7:a2:cd:17:54:2e:3d:43:4c:
05:26:9f:49:7d:ca:5e:66:67:98:8b:1a:09:4c:f3:
9b:62:e5:24:77:ec:92:0c:b4:65:f1:0d:b7:21:4c:
9e:3f:29:58:b5:bd:c7:ff:ef:d3:ed:64:52:57:e5:
a4:f3:77:04:d9:6f:7b:55:e2:6b:b1:12:1b:4a:aa:
96:c3:79:04:00:9e:84:4d:df:0e:9e:d1:bb:b4:69:
df:6d:34:d9:e1:09:ce:19:a0:33:d2:bc:b9:70:c4:
d6:91:4c:09:f2:07:fc:5e:66:8a:10:e1:c2:5f:43:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:41:98:DF:98:2F:E7:B9:E1:D4:03:F7:AB:E7:36:82:04:57:E7
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:93:d2:59:d5:61:1a:04:c7:db:c9:cc:49:a1:33:78:6e:
3b:2f:f6:20:c5:69:c6:43:a3:bb:18:c2:ea:fa:63:47:37:76:
12:d4:c9:31:33:73:66:f2:d7:aa:80:2e:d1:f1:90:ad:d3:5f:
e0:66:47:e6:38:cf:b6:55:65:93:1c:d3:68:95:9e:ff:d0:f3:
e4:74:91:01:b7:a3:7b:ce:ac:87:ef:bc:36:19:da:a3:e3:8f:
0c:53:cb:8c:ab:46:15:58:79:8f:9d:63:40:a2:6c:f6:a7:f2:
ee:4a:e7:de:5e:92:3b:bf:7d:62:a0:22:94:4b:69:e6:40:d8:
0b:06:11:c9:03:02:b8:8c:84:ff:0b:a9:40:d3:06:9c:89:7f:
d4:a3:7a:31:ff:ba:ac:d5:47:cd:ee:7a:23:0e:7b:4f:34:4e:
df:92:21:a0:4b:24:7c:30:dc:41:db:9c:96:e1:df:05:f5:e5:
35:cb:6f:c8:1b:ec:ee:2a:6f:d6:2a:df:95:65:6c:b2:bd:4a:
cb:77:c2:0c:fc:cb:1e:5d:95:d1:fd:dd:21:7e:7b:de:13:2b:
ee:4f:aa:fb:d6:73:4e:dc:1e:b2:06:25:48:dd:55:a8:b1:99:
82:c3:07:65:5d:9e:a4:56:d6:89:95:8d:5b:8d:23:e6:fb:dc:
66:65:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:25 2026 by rpki-client