
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: ZPb3nyObsUqbFN8nfYMEZlfJa+Owc1UhbbZbMX8sczU=
Subject key identifier: E8:C4:F5:E9:40:4B:92:63:DE:44:03:15:5D:F3:03:DE:B5:18:F2:AA
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 019DA3E5E314F52CD7E6FA1DF1194DDFA142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:00:45 +0000
Manifest this update: Sun 19 Apr 2026 04:00:45 +0000
Manifest next update: Mon 20 Apr 2026 04:00:45 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (hash: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: zfG/3fInbPF765r0xZ9OvzUHKBZl+k5nhYIYrOpLjz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:e3:14:f5:2c:d7:e6:fa:1d:f1:19:4d:df:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Apr 19 04:00:45 2026 GMT
Not After : Apr 20 04:00:45 2026 GMT
Subject: CN=e8c4f5e9404b9263de4403155df303deb518f2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:b9:2e:9f:fd:c3:9e:c0:22:d8:a9:43:7c:
df:30:01:8a:39:01:7b:4a:b9:15:ea:65:de:f1:dc:
55:ff:67:17:e1:b8:e8:9e:57:c8:d1:21:56:d1:aa:
11:07:0f:ef:41:6f:43:aa:97:f5:91:b7:b7:16:43:
df:ee:24:11:da:18:93:cc:84:7e:39:9d:99:15:02:
cc:7e:71:71:6a:3d:a7:8c:70:a0:86:ff:2d:1c:2c:
e9:76:a3:71:4c:17:cc:bc:8b:a7:98:15:d7:cb:06:
d7:d2:a4:07:bf:4a:1b:f6:9e:32:2f:4e:30:a7:72:
47:d4:60:ce:53:3e:19:c6:aa:ea:65:20:aa:2c:fc:
ed:07:23:e2:0b:df:fe:ba:c4:ab:53:eb:da:e1:4d:
f5:29:a2:51:24:bf:a9:63:01:a0:a0:ec:04:60:ff:
ff:db:71:65:32:04:50:21:2c:d3:42:7d:1d:61:1d:
ab:94:27:16:d7:65:4b:40:d3:f0:ed:11:f7:e1:5b:
a8:f7:2f:c4:32:91:48:71:06:f4:84:8e:23:4a:80:
c0:e2:55:14:bf:3f:b1:bd:b4:d0:d4:ef:02:3b:2d:
77:69:22:ab:a9:66:8e:fa:87:0e:c8:95:f4:54:f0:
7c:5a:9d:3c:0b:7e:43:cd:9c:3e:26:96:e1:a4:ce:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:F5:E9:40:4B:92:63:DE:44:03:15:5D:F3:03:DE:B5:18:F2:AA
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:20:d1:f9:4c:e6:37:04:1b:2e:f8:48:10:55:67:89:6c:6b:
fa:62:bd:43:d7:b4:7f:98:2d:e6:3b:4e:9c:15:62:32:d8:88:
ed:69:31:75:08:b6:41:f1:36:1b:3f:fc:f5:62:2f:4d:23:98:
f8:5c:f0:58:0d:1b:a8:90:3d:3c:d2:10:85:83:c3:1f:ca:2f:
a3:03:55:50:a5:7e:08:44:4e:2e:d3:61:dd:19:b6:d3:f7:ac:
2f:bb:68:a8:b1:8a:15:20:fd:45:72:8b:9f:66:f7:9c:d6:63:
b0:5c:77:99:80:3c:0c:a6:5b:b2:47:49:7c:19:47:79:07:23:
e0:13:a4:53:a6:84:80:7b:cf:a2:c1:4f:cc:8a:6d:ba:00:93:
73:75:92:21:cd:58:77:54:03:72:b4:94:55:a7:39:59:22:99:
26:4d:ca:0e:57:02:26:ab:50:e5:ab:88:58:ba:30:b8:23:68:
dc:94:2e:77:78:44:5e:57:0f:ef:93:2d:63:2e:72:2c:c0:f1:
01:2f:48:dc:4d:fd:2c:fd:75:f9:7e:9a:81:0b:9e:41:be:b9:
ee:41:c7:e4:43:61:f9:34:8b:2b:da:28:26:d5:48:5d:ee:21:
53:04:5f:3c:a4:e6:6b:8e:07:20:02:da:df:13:aa:d4:8b:61:
b3:e5:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:28 2026 by rpki-client