Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: v8bSqDX+xju+PzFmqKxpbhGtkeUnVuKhSkkNGDaG5Dc=
Subject key identifier: 4D:C2:73:62:5E:1A:E9:E7:C0:5E:1B:40:97:58:ED:11:E6:6C:2E:21
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019D28F239A654AFC10B1CE9A732168B80EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 12BF
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: 4KqvxMQSLnp3JC8ZX/dsw0Qn7NeLUXM89EtyqREWxYA=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:39:a6:54:af:c1:0b:1c:e9:a7:32:16:8b:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=4dc273625e1ae9e7c05e1b409758ed11e66c2e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:b4:b6:be:a2:c0:ac:7f:70:ae:b9:c3:8f:
8f:c8:b5:ec:1a:f7:2a:e6:a9:50:76:8f:45:7c:84:
e1:99:7a:f7:3b:5d:75:0b:63:8a:72:38:40:51:dd:
1f:2a:a2:93:19:3e:45:75:a7:76:4a:38:82:da:60:
8f:cc:89:b0:a7:0c:ed:ec:4c:cb:6c:5f:61:ec:8f:
2c:75:08:ce:ce:d9:0d:62:9b:6c:d9:7c:82:00:58:
52:7a:db:fb:b1:1e:4b:04:49:2a:ac:ed:44:2e:3c:
ea:d9:74:60:ce:de:cf:c9:b8:e6:57:c2:cb:28:97:
bb:de:bb:43:59:fd:bb:59:92:60:27:65:c1:79:95:
16:9c:b1:4e:bc:59:ba:57:b1:b1:15:38:9b:c3:3b:
06:4c:75:f9:5c:9e:b5:4d:99:cf:9a:f2:07:c4:5a:
8c:c1:d3:e8:ec:ee:9d:be:ea:7a:c5:cf:5d:bc:cb:
72:bf:cf:60:0d:a3:74:18:07:50:82:2b:bc:ba:7b:
60:ae:ba:1f:7c:35:bf:22:b4:00:38:dc:c8:b8:0c:
f2:a0:af:7f:87:7c:eb:8b:dd:6b:09:66:3f:10:16:
58:e3:d6:17:5f:8e:01:22:5d:44:20:c0:e0:fb:93:
29:a0:ee:1c:64:0f:87:75:fb:d7:20:5c:63:17:db:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:73:62:5E:1A:E9:E7:C0:5E:1B:40:97:58:ED:11:E6:6C:2E:21
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:db:98:dc:04:53:24:58:a7:3d:14:17:56:ec:6e:e8:06:
1d:0b:ac:bc:c7:55:a5:56:0c:cf:1d:da:27:7d:71:31:5d:6e:
07:7b:8b:c7:16:88:20:d7:02:f5:05:5b:1c:a0:1e:7e:98:70:
33:72:76:b0:41:79:17:e2:60:a2:d9:c5:ce:20:80:88:d8:42:
95:de:9f:1e:cf:f9:e2:49:a3:30:a1:d1:d3:ce:0f:0f:47:a6:
0f:90:a9:c3:b0:53:ba:ac:17:80:5f:27:c8:f6:6d:4e:95:ab:
50:40:90:42:c8:7b:81:d1:b5:df:51:60:28:dc:7a:fc:e0:ea:
55:f8:23:cc:96:a2:6a:b7:54:14:09:b5:2d:5e:a5:79:93:f3:
a9:d6:c8:09:bc:21:17:70:07:6a:bc:43:6d:d6:df:c3:ce:c5:
cb:25:ae:58:f1:5b:a7:85:fc:79:cf:2e:87:a4:8c:84:4e:2e:
a3:26:26:0b:85:74:12:16:b2:05:32:22:0c:f7:94:0b:d8:db:
ca:5a:e7:cb:95:1c:0e:3f:e0:8a:fc:a4:37:af:16:ab:0c:0d:
1f:64:a3:de:21:d8:48:72:9e:ea:68:63:ec:d5:0f:24:e7:85:
4d:cb:cc:0c:8a:8d:54:c1:1d:e3:84:3e:31:7f:f7:a1:91:fc:
61:21:8c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jmmVK/BCxzppzIWi4DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjYwMzI2MDcwMDU2WhcNMjYwMzI3MDcwMDU2WjAzMTEwLwYDVQQD
Eyg0ZGMyNzM2MjVlMWFlOWU3YzA1ZTFiNDA5NzU4ZWQxMWU2NmMyZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOy0tr6iwKx/cK65w4+PyLXsGvcq
5qlQdo9FfIThmXr3O111C2OKcjhAUd0fKqKTGT5Fdad2SjiC2mCPzImwpwzt7EzL
bF9h7I8sdQjOztkNYpts2XyCAFhSetv7sR5LBEkqrO1ELjzq2XRgzt7PybjmV8LL
KJe73rtDWf27WZJgJ2XBeZUWnLFOvFm6V7GxFTibwzsGTHX5XJ61TZnPmvIHxFqM
wdPo7O6dvup6xc9dvMtyv89gDaN0GAdQgiu8untgrroffDW/IrQAONzIuAzyoK9/
h3zri91rCWY/EBZY49YXX44BIl1EIMDg+5MpoO4cZA+HdfvXIFxjF9u6swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3Cc2JeGunnwF4bQJdY7RHmbC4hMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPDbmNwE
UyRYpz0UF1bsbugGHQusvMdVpVYMzx3aJ31xMV1uB3uLxxaIINcC9QVbHKAefphw
M3J2sEF5F+JgotnFziCAiNhCld6fHs/54kmjMKHR084PD0emD5Cpw7BTuqwXgF8n
yPZtTpWrUECQQsh7gdG131FgKNx6/ODqVfgjzJaiardUFAm1LV6leZPzqdbICbwh
F3AHarxDbdbfw87FyyWuWPFbp4X8ec8uh6SMhE4uoyYmC4V0EhayBTIiDPeUC9jb
ylrny5UcDj/givykN68WqwwNH2Sj3iHYSHKe6mhj7NUPJOeFTcvMDIqNVMEd44Q+
MX/3oZH8YSGMNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:21 2026 by rpki-client