Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: KFxasEgojlCZbbNOmri6ACgWnVe+xDL6vxOVeJZL+nk=
Subject key identifier: 1E:BC:6A:81:6E:F9:B6:71:73:E3:AB:A6:C0:28:27:E3:11:0C:31:67
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 01A11BD0B53F35CC2817AB29DBF9C55E613E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 14:00:25 +0000
Manifest this update: Thu 08 Oct 2026 14:00:25 +0000
Manifest next update: Fri 09 Oct 2026 14:00:25 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: vWoXZ2cjqRt11wOQD24nyWSDbTU.asa (hash: H/d3dWZIDW2sfXMUazgoFnBucag9BiVgeiQslyOpxvw=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: EI/UYkOR4JGBWgof1v8ysVPZ3+4SWrnOnz6kHqd3DcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:b5:3f:35:cc:28:17:ab:29:db:f9:c5:5e:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Oct 8 14:00:25 2026 GMT
Not After : Oct 9 14:00:25 2026 GMT
Subject: CN=1ebc6a816ef9b67173e3aba6c02827e3110c3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:0b:96:37:4d:4a:ed:0a:8d:7b:29:36:00:
e8:c0:77:63:77:55:d5:89:7d:c4:6a:55:5c:ca:a0:
99:b6:ec:bd:f5:29:5b:82:6a:16:61:ed:e6:f6:06:
7f:5f:b7:d5:e9:4c:7a:f0:bc:90:55:89:86:4e:df:
89:f2:c2:63:27:a5:1e:87:63:07:53:b7:85:c4:6e:
7c:d9:3f:ca:a0:ab:8b:e4:8a:ea:5b:56:3e:69:c8:
10:33:63:79:17:cf:4a:90:dc:26:ff:95:c9:c1:1e:
e0:ce:fe:e9:38:dc:59:3d:6e:b6:09:36:30:17:14:
f5:b3:7e:8f:8f:58:df:1a:8c:73:30:2e:a8:57:ab:
f5:52:6a:b6:e3:5c:77:af:06:9d:90:0b:72:ac:d3:
31:0e:20:96:8b:d2:b5:fc:3c:d0:31:e8:46:28:4e:
ba:5c:4a:aa:ef:cb:a8:e3:15:3c:e8:4a:b2:1a:4c:
6f:e1:a5:f3:15:be:61:e4:2e:9e:9d:4d:94:d5:41:
50:a3:35:7b:33:41:b6:7c:6e:15:b1:b0:4e:ca:bc:
af:f3:62:20:c2:a3:8a:b6:42:7b:7e:4c:0e:00:b8:
5c:8d:0a:ba:61:01:95:fc:58:61:b6:9b:61:2e:75:
8d:36:67:b0:04:e5:ec:3a:9c:29:fd:7d:3c:e9:e8:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:6A:81:6E:F9:B6:71:73:E3:AB:A6:C0:28:27:E3:11:0C:31:67
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dd:77:68:70:f8:6e:17:0a:28:a0:ac:79:21:e4:3f:43:b8:
77:08:69:dc:c9:86:aa:28:f3:3f:9d:95:2c:bd:0e:d4:05:33:
3e:74:af:cb:e2:e6:55:3a:4c:03:8f:7b:09:4d:ab:c7:9a:e8:
1d:30:38:3a:7f:e1:92:26:b0:df:06:79:7b:7b:20:3b:9f:ee:
79:d4:7a:08:8e:87:e0:e0:45:57:2b:15:5e:26:5d:f7:a4:a2:
93:30:3a:17:b2:81:96:c2:99:8c:3f:6e:bd:1a:73:57:54:6c:
70:65:d1:a4:da:66:54:b0:71:17:18:22:4a:60:6d:31:8f:d7:
cb:ac:cc:a2:74:63:13:af:7b:bf:4f:ac:8a:d1:fb:c8:12:4c:
e3:08:b5:46:b4:77:f5:87:58:bc:ec:36:0f:a5:37:3f:fb:d8:
74:d6:75:52:07:04:df:31:ed:39:d5:7e:84:6b:35:69:52:72:
a4:d5:ba:dc:95:08:ae:d2:e4:36:17:40:c5:c7:27:db:b9:3e:
23:cc:68:a5:a3:9d:f9:72:1b:31:da:9d:ca:4d:ce:81:d9:f9:
40:62:2d:f5:0f:88:df:9e:51:8a:6c:c9:66:d4:bb:26:c0:73:
0c:c9:cf:a5:d5:6c:e6:cc:e4:6f:ad:a5:85:63:6c:6f:a1:1a:
3f:33:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:31:50 2026 by rpki-client