
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier: 3gQ1HTiRXCUtSj+eoWXNXAlApvfyZ5VPsH3L75UbjZ4=
Subject key identifier: E9:2E:99:4F:77:A8:C9:C8:B1:6D:1E:81:51:5B:7F:0B:BF:C4:A9:DC
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 019D389C62E53ABA631E168EBA53FD0C1C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: qfLg6_O2M8WS1thcqc7yvX4X2YA.roa (hash: QWR0hHgaSdM86S0MEOSeh4BxClfakxPYih9gZR0Zp3g=)
2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: vFEn9mRc6gYI5YejAWUmIAAhAL9kASUxA/cHsxQoU2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:62:e5:3a:ba:63:1e:16:8e:ba:53:fd:0c:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=e92e994f77a8c9c8b16d1e81515b7f0bbfc4a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:10:ea:ca:9b:17:cc:61:19:bf:dd:4b:9c:
a3:d6:87:7c:68:b9:f7:19:d8:bb:a0:28:82:84:a0:
92:21:57:ee:cc:2e:d5:74:92:da:45:e9:2c:e8:6f:
29:ef:bc:bb:fb:6c:a7:7e:04:a5:c5:d1:d8:34:a8:
16:5e:85:52:87:f7:90:12:ae:ae:47:c9:30:a9:16:
fd:ac:c6:78:91:ce:f4:1f:fa:9c:69:53:33:81:dc:
76:16:e1:06:29:db:f9:9c:8b:5c:31:d7:d7:8b:4a:
37:eb:45:70:58:1b:16:5b:25:43:52:37:c6:82:61:
5e:10:67:3e:d4:ef:e7:d3:d4:92:16:13:34:78:c0:
27:06:49:d5:d2:b3:4f:4d:ed:5c:34:1c:db:4a:4b:
59:88:0a:e2:6b:1e:95:ca:7f:21:7c:d2:9a:7d:19:
fd:90:2f:a1:19:3f:20:5c:7f:7c:ec:9a:5f:1f:6f:
1f:05:6f:b7:8d:d2:f9:6f:29:03:95:40:0e:01:e8:
e3:42:e7:3b:31:11:63:25:a2:e0:bf:bd:80:e4:12:
9f:2e:f2:3b:43:a0:36:36:cb:74:e7:35:01:68:95:
77:11:ab:77:df:65:ad:40:bd:e7:8a:51:14:61:bf:
d1:92:0a:93:56:76:c9:2c:20:33:95:f6:ce:af:f1:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:99:4F:77:A8:C9:C8:B1:6D:1E:81:51:5B:7F:0B:BF:C4:A9:DC
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6a:71:2a:e1:ca:24:22:91:0b:47:b2:78:8e:ce:c1:78:d2:
83:fc:08:05:28:5a:18:1a:15:e6:6b:f7:8e:7f:e9:16:a5:25:
60:8f:96:37:a4:f9:49:9a:75:36:05:97:b9:49:a0:ae:89:1b:
00:76:a6:8b:91:85:7a:7d:69:0a:7a:ea:52:23:72:18:2e:2c:
9c:84:d6:c5:1b:11:1e:3a:f2:09:dc:b5:21:1c:4b:3d:47:9c:
8e:3c:e2:8b:fa:72:87:70:4e:7a:55:b1:c4:37:95:f6:81:49:
20:1a:41:a4:07:4e:4b:ef:38:6e:70:1f:da:f8:04:9a:0a:81:
a7:b4:05:29:07:51:49:9a:f5:a6:0a:24:1b:8c:f3:30:02:b3:
94:6a:ec:45:85:2a:88:ba:bd:10:2d:f7:24:60:43:c9:2c:52:
cd:7e:0f:82:f9:4e:f7:3e:7c:75:f5:c4:51:24:f1:75:fa:e1:
1c:14:1c:23:e7:00:e9:b8:95:8e:e3:30:08:ca:71:5b:6a:98:
f0:82:9a:39:4f:85:bf:ba:45:3a:fe:fc:c6:da:31:f8:47:db:
6c:4f:61:9c:9c:89:bd:04:3b:ed:01:4c:21:36:85:a1:37:c4:
0d:2f:c3:af:1d:0d:23:03:e8:c7:4a:00:02:2f:c8:f5:c1:ac:
bb:5a:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:43 2026 by rpki-client