Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: qlW1fHn7BpyiwV7wLSsrUX9yo6lVcvXt5+JH7qep5N0=
Subject key identifier: 37:8B:F6:BE:77:B0:20:7E:DD:21:50:8D:70:8D:E3:7D:0E:6A:CB:12
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 01A11FAE94BBE6AFBBBD3089528F3F359175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1A97
Signing time: Fri 09 Oct 2026 08:01:37 +0000
Manifest this update: Fri 09 Oct 2026 08:01:37 +0000
Manifest next update: Sat 10 Oct 2026 08:01:37 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: vWoXZ2cjqRt11wOQD24nyWSDbTU.asa (hash: H/d3dWZIDW2sfXMUazgoFnBucag9BiVgeiQslyOpxvw=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: ftCsOJr8xvU1YbSa4VbiyS+uKBDZ2tIhrLSuV6HeOOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ae:94:bb:e6:af:bb:bd:30:89:52:8f:3f:35:91:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Oct 9 08:01:37 2026 GMT
Not After : Oct 10 08:01:37 2026 GMT
Subject: CN=378bf6be77b0207edd21508d708de37d0e6acb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:1b:73:79:97:30:8c:86:fb:2d:cc:45:cf:
30:28:fa:b3:e1:70:76:93:f4:ed:33:cc:3e:10:50:
a0:c3:5b:00:3a:6d:91:4f:5c:b3:33:60:7f:18:c2:
12:fc:a9:e1:90:86:36:4e:6c:d4:ff:1c:77:a3:b0:
fe:cc:2e:dd:f5:03:78:db:73:47:f0:ac:3f:bb:bd:
56:2d:b6:ac:f6:89:c5:5d:b1:7d:86:75:22:02:eb:
59:6e:96:6e:a0:ae:f6:8a:65:48:e1:f0:1a:66:88:
18:d4:b8:f4:5e:29:0d:1f:c6:cc:3e:46:eb:f6:c3:
a8:a5:c5:d0:a9:3d:cb:d2:45:22:02:4b:9e:ca:6a:
50:65:fb:b3:bc:49:cf:05:c1:84:e8:78:de:d6:6f:
44:e6:e5:e3:6e:67:ff:e7:7f:5d:2c:62:f3:69:9a:
d5:0e:ee:4d:21:06:de:e3:9a:ac:81:f8:4f:5f:84:
16:fe:7f:c6:4b:d4:15:a8:fa:c0:53:36:98:99:73:
da:b4:97:90:28:a7:f1:52:e5:d0:25:49:92:e9:47:
e1:8f:dc:86:e6:6e:15:89:fc:05:9a:69:1d:22:71:
84:56:24:64:fc:cd:59:f5:b2:7f:af:a8:77:65:c6:
ac:c9:7e:89:f9:d1:91:b5:64:63:55:a4:3d:32:55:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:F6:BE:77:B0:20:7E:DD:21:50:8D:70:8D:E3:7D:0E:6A:CB:12
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:1d:f3:d0:83:e4:46:f9:ec:b4:08:79:64:1b:dd:6f:75:
69:04:f0:82:ff:9e:19:ca:e4:e4:e7:df:47:9c:56:2c:d3:0c:
cf:3a:84:5f:05:c0:d6:70:be:ee:0f:9f:e5:84:b6:ca:6a:f9:
ef:08:7f:4e:a2:5b:d3:9f:d6:3f:a2:21:f2:6f:5a:b6:87:da:
b6:32:d6:7e:13:60:c5:ac:d2:c4:d3:31:7e:2f:14:ef:5c:40:
38:3c:79:73:1e:43:7a:a4:6e:9a:e9:6f:a8:d6:3f:f8:94:85:
05:fc:99:3d:9a:ec:2b:09:b2:18:9f:b5:f0:8b:93:03:9e:b5:
ea:ee:c7:85:3d:8a:81:d8:3b:e5:2e:56:bd:8d:f5:78:ba:8a:
ed:b6:4e:0c:dc:83:33:56:1e:df:5c:af:10:52:c1:24:09:6b:
6b:99:d4:e7:58:58:55:2e:2b:7c:f7:60:72:f1:f9:f6:3c:d3:
a7:c9:1f:ad:4d:3e:c9:57:a5:85:d3:33:be:36:b5:65:18:79:
07:ff:34:1b:4e:74:3d:02:32:3d:a4:db:54:75:e4:32:42:2f:
67:9d:5d:32:c7:02:e5:a3:d3:97:4b:2c:13:6c:83:68:3b:05:
bf:42:2b:e5:33:56:1c:9e:63:1c:89:21:64:d3:3a:5b:c7:a9:
c3:d9:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:06:35 2026 by rpki-client