Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: 2eVkM91UMTS0YW5MOsnfez0ZKElJcnICRE+cEZgV/Gg=
Subject key identifier: 3E:86:76:59:C0:10:54:78:F5:6F:04:C3:17:60:6A:9F:B7:26:F0:48
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 019D39AE9BA59F0429D995990F9E53215592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:37 +0000
Manifest this update: Sun 29 Mar 2026 13:00:37 +0000
Manifest next update: Mon 30 Mar 2026 13:00:37 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (hash: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: bQQ8RnT4Mfanm9gXZe6Jq1h7AppUrZ01LL1zzcPinHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9b:a5:9f:04:29:d9:95:99:0f:9e:53:21:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Mar 29 13:00:37 2026 GMT
Not After : Mar 30 13:00:37 2026 GMT
Subject: CN=3e867659c0105478f56f04c317606a9fb726f048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:f9:f1:22:63:54:de:7d:d4:28:92:91:c4:
a5:97:81:a7:0a:a6:d6:45:3d:ea:2e:cf:70:7c:34:
9a:71:61:6e:3d:6e:79:8f:a7:e1:2b:8e:8f:7c:42:
ff:63:57:79:d4:f5:d9:dd:e2:b8:39:ee:c5:2a:c1:
ea:44:25:b2:55:90:68:ca:8c:df:75:55:83:bd:47:
04:ed:1e:ab:56:7b:dc:27:d7:cc:b9:e3:66:70:e5:
ef:c5:3e:b3:42:c2:04:3b:55:4f:83:86:fb:fe:21:
9d:7b:0f:76:85:31:21:05:e9:f4:4d:3f:0e:c2:be:
b8:f9:64:e3:bd:4f:78:41:61:8f:fa:a2:a5:c1:41:
f7:77:47:fe:38:ce:b5:67:9c:4c:42:7e:0a:5d:17:
86:45:69:6c:35:f7:be:8f:cc:c1:c7:e5:89:95:34:
2f:4c:cf:38:74:e8:65:6a:1d:d2:be:6e:a8:e2:d6:
4e:47:8e:00:d0:af:96:f1:19:ed:58:1c:75:cc:62:
a0:ba:0e:ef:78:dc:35:69:b1:fa:4f:7d:6c:80:c6:
74:22:1c:d3:ca:12:ce:5f:aa:9c:3c:2f:c5:a9:5f:
c2:04:6a:62:a6:a2:47:9b:cd:b1:75:15:5a:69:7c:
fb:e2:d2:e4:ef:5a:40:6b:cd:fa:53:4c:af:1a:01:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:76:59:C0:10:54:78:F5:6F:04:C3:17:60:6A:9F:B7:26:F0:48
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:82:2f:cc:77:f1:23:24:4c:cc:0c:83:ff:78:fc:b0:56:
2e:6d:e0:21:38:96:22:a2:5d:25:70:1c:c3:8e:04:e6:71:3a:
17:10:19:9b:6e:2b:d9:14:05:90:ac:7d:28:cb:56:57:9b:f8:
50:c2:57:d2:a7:4d:ff:bf:cd:b1:ef:66:24:8a:cc:9b:53:a9:
3a:5f:ea:f6:b9:fb:e3:bc:eb:d4:fd:86:0c:b0:0f:05:c6:e3:
90:1c:64:64:41:a9:97:09:ec:d6:d4:60:d8:b7:47:e4:db:bb:
71:a1:9f:d5:cd:b7:84:b9:9d:89:f7:45:74:e9:49:49:6b:a1:
c7:05:8b:34:1a:b6:1e:20:90:a1:71:d7:8f:76:d3:bc:2f:8d:
f7:11:4d:b5:4f:2d:a6:50:c3:cf:34:1a:7c:f7:f1:03:34:7e:
6e:f1:02:03:27:14:80:29:38:68:85:93:e4:26:e4:9c:ec:fa:
41:97:84:30:83:d0:5e:26:f8:62:e3:45:78:54:3e:e5:db:c7:
e3:64:c0:16:e0:42:79:f4:af:c4:47:de:1c:7c:4e:8f:bd:e9:
50:2a:28:9f:87:57:23:91:2c:62:4a:27:da:2a:88:e2:b2:fa:
05:f3:6e:ba:ed:fb:80:10:f6:b0:2f:11:d7:64:fb:24:73:11:
ad:02:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:56 2026 by rpki-client