Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File: WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier: 84iSuhbXURA29q9K/KjsYTkf2k3LuB40D+yuG7cMG/8=
Subject key identifier: 87:A9:32:C3:55:73:FB:56:F8:A1:40:2B:0D:5B:28:9D:AB:FA:F9:89
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer: /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial: 019D26CD44063A6A8E610A6F0430D4E93455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number: 0635
Signing time: Wed 25 Mar 2026 21:01:19 +0000
Manifest this update: Wed 25 Mar 2026 21:01:19 +0000
Manifest next update: Thu 26 Mar 2026 21:01:19 +0000
Files and hashes: 1: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: luWDazHAJWTQ3tofrKoz7LGqQkJvSalaYjYpPWZYYPc=)
2: ekH1YvPD-YZnP0TGaeNVBU9uPwA.roa (hash: yhXaGcbJjLQcOeY+d/XbKfWIjxXbIlwUIiih7HIWhjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:44:06:3a:6a:8e:61:0a:6f:04:30:d4:e9:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Validity
Not Before: Mar 25 21:01:19 2026 GMT
Not After : Mar 26 21:01:19 2026 GMT
Subject: CN=87a932c35573fb56f8a1402b0d5b289dabfaf989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:2f:68:38:7b:e0:4f:42:dd:66:9d:14:6e:
41:fb:55:b3:fd:df:63:08:9a:af:29:fe:c5:9f:2b:
95:71:60:14:15:91:40:1c:96:a9:1c:6c:a5:7d:9c:
62:e2:00:28:3e:f3:3f:f8:8e:00:7e:94:2b:5e:9b:
1b:f1:a5:22:1b:2f:52:74:18:32:95:d7:5c:55:79:
d6:92:b0:37:8a:76:2b:c0:4c:5d:ee:4e:04:c7:f1:
07:a4:5c:69:5b:fe:4f:f0:c4:f7:38:dd:b0:9a:00:
6e:97:c1:c0:f6:de:14:4f:a8:13:d1:b0:30:ac:2c:
ab:23:87:d1:b1:b9:4d:18:3c:1f:ce:78:4c:25:46:
4f:46:1b:ad:3e:bf:dc:49:26:02:5d:bf:bf:25:5e:
42:99:ab:73:51:6e:b7:f7:c8:d9:c9:6b:55:f5:32:
41:a6:32:0a:ca:76:50:f3:6f:4f:64:b4:a1:ac:a6:
33:ae:0d:d0:c8:22:2e:99:f4:a4:b4:0e:a0:df:21:
7b:a7:ef:db:3a:e3:52:1c:8e:72:55:e4:12:fc:30:
e2:59:8e:b7:f0:4b:c8:10:13:8e:87:54:fe:aa:47:
ad:96:bb:8e:62:0b:84:df:97:d2:7b:30:19:d9:18:
3e:33:4c:82:6c:b3:f6:f8:ac:51:53:b5:d3:20:80:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:32:C3:55:73:FB:56:F8:A1:40:2B:0D:5B:28:9D:AB:FA:F9:89
X509v3 Authority Key Identifier:
keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a9:22:b4:79:8f:b3:73:eb:f9:49:ec:7b:36:31:ac:a7:4d:
59:c6:3f:60:0a:2e:61:77:24:29:3f:56:02:67:6f:33:d5:21:
b9:ea:b8:74:07:8a:b7:f5:78:7b:59:f3:9b:a0:00:6b:3a:37:
15:e2:8e:9e:7c:d9:eb:4c:61:57:3b:34:98:20:ad:ea:fb:e5:
73:dc:75:d2:14:c7:6f:6a:b6:58:4e:16:5a:08:29:3b:9e:07:
4c:04:14:2d:e3:45:06:81:76:51:cb:b2:2d:58:3b:e4:74:2e:
db:2e:71:9c:9f:49:f9:af:d8:ba:cf:49:4f:88:cc:39:54:aa:
8b:71:10:b1:8a:f2:18:b7:e6:39:11:5e:5d:98:ec:4d:33:6a:
b0:53:e3:8f:2a:74:8d:3c:ef:cd:4f:a0:6f:be:34:8a:1e:14:
86:1a:ef:f1:8c:b4:c6:a5:ef:42:9a:7d:72:3a:0e:cb:32:06:
f5:f6:ac:2e:40:0a:9b:36:26:66:62:92:9d:aa:94:21:8d:9f:
cd:e6:6d:04:45:b7:f6:c9:c0:02:ec:34:b9:77:b6:50:2b:0f:
93:ca:e5:7a:3f:da:09:68:bd:89:4d:8a:94:f5:31:00:9b:80:
75:df:94:11:f4:70:1d:77:e2:73:13:3c:0e:ba:1b:57:d7:eb:
dd:78:5c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUQGOmqOYQpvBDDU6TRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmM2OTlmOGZlY2JlYzg0N2QzMzkwYjQ2NThkZDNjYjIx
YzUyYjMwHhcNMjYwMzI1MjEwMTE5WhcNMjYwMzI2MjEwMTE5WjAzMTEwLwYDVQQD
Eyg4N2E5MzJjMzU1NzNmYjU2ZjhhMTQwMmIwZDViMjg5ZGFiZmFmOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjovaDh74E9C3WadFG5B+1Wz/d9j
CJqvKf7FnyuVcWAUFZFAHJapHGylfZxi4gAoPvM/+I4AfpQrXpsb8aUiGy9SdBgy
lddcVXnWkrA3inYrwExd7k4Ex/EHpFxpW/5P8MT3ON2wmgBul8HA9t4UT6gT0bAw
rCyrI4fRsblNGDwfznhMJUZPRhutPr/cSSYCXb+/JV5CmatzUW6398jZyWtV9TJB
pjIKynZQ829PZLShrKYzrg3QyCIumfSktA6g3yF7p+/bOuNSHI5yVeQS/DDiWY63
8EvIEBOOh1T+qketlruOYguE35fSezAZ2Rg+M0yCbLP2+KxRU7XTIIAiCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIepMsNVc/tW+KFAKw1bKJ2r+vmJMB8GA1UdIwQY
MBaAFFksaZ+P7L7IR9M5C0ZY3TyyHFKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEt
YjI4YzNjOGM5OTA5LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEtYjI4YzNjOGM5OTA5
LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKkitHmP
s3Pr+UnsezYxrKdNWcY/YAouYXckKT9WAmdvM9Uhueq4dAeKt/V4e1nzm6AAazo3
FeKOnnzZ60xhVzs0mCCt6vvlc9x10hTHb2q2WE4WWggpO54HTAQULeNFBoF2Ucuy
LVg75HQu2y5xnJ9J+a/Yus9JT4jMOVSqi3EQsYryGLfmORFeXZjsTTNqsFPjjyp0
jTzvzU+gb740ih4Uhhrv8Yy0xqXvQpp9cjoOyzIG9fasLkAKmzYmZmKSnaqUIY2f
zeZtBEW39snAAuw0uXe2UCsPk8rlej/aCWi9iU2KlPUxAJuAdd+UEfRwHXficxM8
DrobV9fr3XhcdA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:50 2026 by rpki-client