Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: HQsVTBqwCc1sciWIE76st8J0diWMm8Kgf3RCmzT9z6g=
Subject key identifier: 03:03:D3:8F:B2:01:2B:69:D1:63:F7:B3:0C:06:F0:A0:E6:38:7E:74
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019EB6C4E677DE5F5B2580DC4994ABED4889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 138D
Signing time: Thu 11 Jun 2026 13:00:17 +0000
Manifest this update: Thu 11 Jun 2026 13:00:17 +0000
Manifest next update: Fri 12 Jun 2026 13:00:17 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: 0cYUSk0DMeZozabX9np4vf9LGJFCTy2gCCFEzQUfcGc=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:e6:77:de:5f:5b:25:80:dc:49:94:ab:ed:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jun 11 13:00:17 2026 GMT
Not After : Jun 12 13:00:17 2026 GMT
Subject: CN=0303d38fb2012b69d163f7b30c06f0a0e6387e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:f6:ec:67:4c:09:d7:42:f3:b0:30:50:b4:
f2:c6:ff:bb:81:01:43:f6:d2:8e:25:12:9c:07:a2:
06:18:28:4f:c1:a8:70:9e:76:de:39:bf:75:5f:7b:
00:c5:5c:8c:89:21:be:85:3a:34:52:5c:08:fa:6f:
bf:fb:31:0b:f4:f1:3b:01:95:f7:af:10:32:5b:8d:
e3:92:31:cc:a3:0f:f7:b1:53:b5:43:41:5c:15:02:
44:3b:e9:31:93:3a:23:ce:9e:db:49:c6:ba:7e:0e:
25:89:3e:ba:31:ae:0d:65:1c:c7:aa:2a:c4:23:78:
bb:b2:23:57:72:5d:69:88:c1:db:41:a6:70:fc:18:
0e:5d:9e:f0:09:d0:c2:1e:be:38:0f:63:bf:87:68:
93:e0:4e:2d:e7:d0:aa:06:b8:9b:66:5e:95:f2:1d:
13:fa:db:d1:fc:cf:90:dd:ef:af:26:a5:44:95:72:
25:f4:75:c1:58:de:2f:d7:23:19:ef:8f:28:73:74:
84:f7:1b:0b:90:bd:f0:3e:8f:dd:2a:f0:13:ca:6f:
e7:50:2d:98:29:67:48:00:ac:53:9e:06:a4:24:90:
79:dd:0e:cc:bb:6f:bf:91:d7:2b:36:bc:6b:2a:aa:
fb:91:38:53:2e:ac:75:16:68:59:9f:7f:fa:45:58:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:03:D3:8F:B2:01:2B:69:D1:63:F7:B3:0C:06:F0:A0:E6:38:7E:74
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:d1:a6:5c:3d:65:9e:8a:30:6d:e8:48:f8:16:8c:5b:ed:
80:72:08:54:59:05:47:22:37:7b:25:52:cf:d0:8b:d4:40:64:
b2:3e:b4:67:f4:91:4c:e8:54:07:71:71:19:23:a3:2a:05:a7:
b4:13:9e:9e:23:1f:ec:94:c6:58:32:f9:04:5b:ef:63:b1:73:
b5:06:65:fc:78:bb:1a:86:1d:9e:df:66:f4:e3:ff:a9:f9:ee:
5a:be:4a:4c:19:48:80:04:50:de:53:a9:b3:e2:ee:ea:64:8f:
49:5b:bb:65:e0:51:17:72:a3:e9:db:b5:0a:14:25:f5:c1:c3:
85:1b:1b:22:d5:45:54:76:c4:13:bc:40:ba:b5:1e:58:2a:b9:
28:73:01:d0:39:fd:49:c0:b9:9e:ce:73:59:ba:67:bc:8c:b1:
1b:0d:33:0b:dc:62:47:d3:aa:b0:7b:0f:fa:ad:1a:01:a5:d2:
7a:74:29:29:67:87:43:d2:c5:5b:85:b3:7b:92:3a:81:fa:34:
0c:be:ee:be:7c:7d:8a:4b:db:89:be:dc:c8:23:e6:1b:fc:c1:
67:46:12:5f:eb:a4:d4:b4:b2:91:65:2b:6e:0c:f2:2a:fd:64:
19:16:55:aa:60:68:1d:5e:07:85:7f:3c:d3:fd:eb:dc:2c:96:
92:e7:39:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xOZ33l9bJYDcSZSr7UiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjYwNjExMTMwMDE3WhcNMjYwNjEyMTMwMDE3WjAzMTEwLwYDVQQD
EygwMzAzZDM4ZmIyMDEyYjY5ZDE2M2Y3YjMwYzA2ZjBhMGU2Mzg3ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nn27GdMCddC87AwULTyxv+7gQFD
9tKOJRKcB6IGGChPwahwnnbeOb91X3sAxVyMiSG+hTo0UlwI+m+/+zEL9PE7AZX3
rxAyW43jkjHMow/3sVO1Q0FcFQJEO+kxkzojzp7bSca6fg4liT66Ma4NZRzHqirE
I3i7siNXcl1piMHbQaZw/BgOXZ7wCdDCHr44D2O/h2iT4E4t59CqBribZl6V8h0T
+tvR/M+Q3e+vJqVElXIl9HXBWN4v1yMZ748oc3SE9xsLkL3wPo/dKvATym/nUC2Y
KWdIAKxTngakJJB53Q7Mu2+/kdcrNrxrKqr7kThTLqx1FmhZn3/6RVj38wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMD04+yAStp0WP3swwG8KDmOH50MB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJHRplw9
ZZ6KMG3oSPgWjFvtgHIIVFkFRyI3eyVSz9CL1EBksj60Z/SRTOhUB3FxGSOjKgWn
tBOeniMf7JTGWDL5BFvvY7FztQZl/Hi7GoYdnt9m9OP/qfnuWr5KTBlIgARQ3lOp
s+Lu6mSPSVu7ZeBRF3Kj6du1ChQl9cHDhRsbItVFVHbEE7xAurUeWCq5KHMB0Dn9
ScC5ns5zWbpnvIyxGw0zC9xiR9OqsHsP+q0aAaXSenQpKWeHQ9LFW4Wze5I6gfo0
DL7uvnx9ikvbib7cyCPmG/zBZ0YSX+uk1LSykWUrbgzyKv1kGRZVqmBoHV4HhX88
0/3r3CyWkuc5wQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:06 2026 by rpki-client