Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: /unQGcs3dVGUHGD0yIKHzDaFoCQ+oiBakfhxHf41+7w=
Subject key identifier: C4:FA:3C:FD:6A:19:B5:46:59:9A:80:22:35:A0:AF:7A:EC:67:72:5F
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 019CAAC690CE695B203D7FBC35BB2C4C9045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (hash: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: 7K0CHpDTv4jmVSe1jo200Y0YNvjN3JvCxc6MMQQOofc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:90:ce:69:5b:20:3d:7f:bc:35:bb:2c:4c:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=c4fa3cfd6a19b546599a802235a0af7aec67725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:33:76:cf:f0:cb:92:b9:15:07:e7:be:7b:
f5:13:26:04:7b:6b:74:86:56:76:b6:61:5a:30:40:
e4:92:4d:2d:21:99:ca:25:0b:1f:e1:79:5b:ec:fb:
29:4f:85:ca:9e:f5:42:8e:26:44:96:00:0b:09:cd:
6f:93:a2:eb:60:92:cd:13:c4:62:90:6b:33:e0:4c:
64:81:3f:2d:1f:b9:ea:52:ef:3f:e4:3d:b1:9b:f9:
f8:1f:d9:dc:da:a8:d7:0d:49:ba:f8:52:27:f9:97:
65:51:56:96:9b:de:c5:e1:f9:6d:e4:05:d7:88:77:
b3:55:81:d1:23:0a:17:18:6e:22:df:93:eb:f8:61:
b5:02:a5:35:83:f2:75:ff:18:ba:86:71:5f:25:78:
3d:df:22:54:30:4c:69:49:6b:f2:71:37:76:0a:08:
db:d6:f2:7a:06:a6:b5:22:3c:72:7b:60:12:09:f7:
49:27:1d:6f:46:64:10:a0:df:21:ec:ea:5b:00:5d:
5f:66:95:25:be:ac:e1:8f:15:81:c7:dc:aa:cd:b3:
a3:7f:c2:5a:6a:4b:45:a7:49:dc:00:fd:86:87:dc:
57:94:61:25:83:e5:8c:60:46:da:3c:b1:04:25:49:
8e:fb:1a:4f:58:ae:92:6e:33:70:9e:5c:e8:6e:0b:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:3C:FD:6A:19:B5:46:59:9A:80:22:35:A0:AF:7A:EC:67:72:5F
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:ab:91:e7:1b:69:64:bf:e5:a4:26:7e:d3:7d:b1:97:c0:
58:2d:e0:8a:9f:66:7c:43:a9:d6:12:ed:1a:de:fc:f5:40:33:
40:84:cc:86:c1:30:1e:9d:be:d0:0a:cf:23:f2:f4:4b:b6:0e:
64:1d:57:1c:85:a4:e3:78:4e:94:8b:86:c6:73:03:ff:51:41:
2e:d5:fa:a9:a5:c2:1c:df:c6:a9:d6:b8:73:f3:73:93:2e:d8:
fb:26:03:60:9d:93:dc:48:53:0c:ab:62:ef:8f:8a:f1:fc:aa:
0c:83:28:be:d2:d7:a2:f0:69:5f:7c:4f:fb:c1:c0:3d:f7:70:
6e:0c:75:36:4d:ff:8d:9b:18:8f:a7:5e:d0:c4:31:6d:c0:cd:
30:93:1a:76:2c:94:ad:01:74:9a:fd:8f:f4:71:bb:e1:50:0e:
0b:11:30:9c:15:67:a3:cc:bf:25:7c:00:60:3c:39:ac:29:c3:
ff:f8:ed:09:35:c5:e7:2f:3b:94:cb:c3:30:87:20:d0:a1:5c:
f8:80:a2:0d:f2:5c:66:ec:0f:4f:22:20:b1:ff:6e:6d:3c:b4:
90:c1:8e:87:de:d6:5c:99:a1:12:78:27:77:c5:25:85:d5:cf:
9e:97:ce:07:ee:46:59:be:50:cb:86:66:53:7c:ce:bf:17:bc:
43:ce:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:53 2026 by rpki-client