Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: 7gslGzGdSz6sTf5O2jom+jlrTFKGW8SXt66HYGNxafI=
Subject key identifier: FB:4F:8E:85:0F:7C:1B:F2:12:67:0D:9D:3C:26:12:57:EA:72:62:C8
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 01A0CAB45B1605C7C4FC15E343F2595E57F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 20:00:12 +0000
Manifest this update: Tue 22 Sep 2026 20:00:12 +0000
Manifest next update: Wed 23 Sep 2026 20:00:12 +0000
Files and hashes: 1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
2: vWoXZ2cjqRt11wOQD24nyWSDbTU.asa (hash: H/d3dWZIDW2sfXMUazgoFnBucag9BiVgeiQslyOpxvw=)
3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: qeEUpSiHXumHgKC2detVwIo/vcQR8zPpU2kTy7Aj2P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:5b:16:05:c7:c4:fc:15:e3:43:f2:59:5e:57:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Sep 22 20:00:12 2026 GMT
Not After : Sep 23 20:00:12 2026 GMT
Subject: CN=fb4f8e850f7c1bf212670d9d3c261257ea7262c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:d6:8f:2c:70:78:90:ac:43:e9:f6:d9:02:
e5:b4:da:e3:4d:67:52:9e:58:a9:3e:e1:40:60:50:
51:d8:6d:61:9e:0c:93:9e:84:3d:5a:fc:bd:87:62:
c4:c0:06:3e:50:ae:e8:a2:81:62:b3:b5:da:69:af:
51:74:b9:b3:96:61:49:2d:b0:3a:b8:11:1f:70:78:
00:d4:82:e0:56:02:4c:8c:f9:03:d5:14:77:9d:58:
51:2b:42:fd:71:9d:64:c9:d9:82:d8:8d:b7:8a:2d:
ff:37:f9:e1:80:c8:e0:c6:57:58:05:b6:20:2a:e8:
99:c5:d0:f3:88:81:36:a4:ee:d2:f2:09:05:bb:32:
42:0b:82:d9:ea:23:b2:62:16:be:4c:ea:1c:8f:0e:
b8:5e:98:3a:b3:89:dc:36:78:b2:32:8c:dd:db:43:
f3:6d:0d:61:11:89:03:95:92:dc:3e:68:bd:c9:ff:
6f:72:8c:b5:64:4f:1c:50:5b:95:f9:24:9a:99:2e:
8e:3f:c5:69:5f:f8:37:93:f5:19:c4:2a:f0:11:84:
dd:40:c0:ee:2b:5f:f3:18:85:96:f3:dd:29:05:96:
05:f5:bc:52:a7:7a:cd:8a:e8:14:53:a9:56:5e:0a:
50:00:39:5c:05:0a:6f:8c:ea:11:d6:43:6f:aa:d1:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:8E:85:0F:7C:1B:F2:12:67:0D:9D:3C:26:12:57:EA:72:62:C8
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f4:c3:fb:00:87:26:57:a0:34:7a:92:62:3a:d9:27:75:ad:
3e:e2:ca:40:1f:36:11:57:a3:2d:75:87:d4:af:07:9a:32:3c:
88:f1:26:11:1c:52:f3:bf:ec:7b:19:70:7b:e5:2d:e5:37:d8:
75:5b:5b:de:b0:88:4d:ca:b4:4b:b9:40:da:d1:c9:78:1b:cf:
65:30:03:1e:cb:03:1a:70:73:de:84:85:bb:f1:6f:52:87:44:
91:a2:01:70:db:08:72:8a:81:70:f6:23:6e:79:40:69:46:2f:
90:0d:dd:8a:bf:b1:be:a5:e3:4d:4d:08:0e:1c:e1:b0:23:f6:
6b:cb:18:f9:7c:6a:77:43:c3:31:24:a6:f7:7e:6d:3a:c2:b5:
ef:8a:69:e2:85:c4:b2:6a:93:cf:27:e5:5d:f8:7b:af:e5:62:
da:b2:93:54:fa:16:0c:99:a5:11:da:ee:1a:16:8f:6f:ad:aa:
14:b9:e1:26:38:1e:c3:41:8a:96:e7:e4:5a:df:97:c6:14:12:
14:2e:c1:e5:2e:2b:ea:0a:cd:34:b3:74:4c:a4:8f:ac:85:1c:
ba:e9:2a:55:48:3e:8a:cc:44:54:55:56:28:1f:5d:06:06:15:
ff:05:ce:e1:b8:ae:b1:79:a6:e3:aa:61:7e:7a:57:25:c3:8b:
03:c5:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:29:57 2026 by rpki-client