Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: hFNkvVYmvpDiIsRJvmESyaobuPBGN/IBYKLb/ZT5TVY=
Subject key identifier: 34:41:19:73:D0:E8:0F:48:06:90:23:EE:58:BB:82:D9:71:05:3A:E9
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019DCF0722DDA0EE4EBCB160894553BC4F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 1315
Signing time: Mon 27 Apr 2026 13:00:44 +0000
Manifest this update: Mon 27 Apr 2026 13:00:44 +0000
Manifest next update: Tue 28 Apr 2026 13:00:44 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: X5fODla87C32UmWE8Hq8Y4ddz6m0KGubbBJi6gqJGe8=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:22:dd:a0:ee:4e:bc:b1:60:89:45:53:bc:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Apr 27 13:00:44 2026 GMT
Not After : Apr 28 13:00:44 2026 GMT
Subject: CN=34411973d0e80f48069023ee58bb82d971053ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:61:89:30:28:c2:0a:75:29:86:f0:79:d6:
91:bc:77:d1:ba:a6:74:d8:05:da:14:9f:7f:fc:e4:
a7:cb:0e:e2:56:0b:1e:80:59:8c:7b:10:85:1d:dd:
c2:1d:80:0d:8e:bb:30:e4:5a:69:4a:59:42:77:ee:
36:b2:cc:bb:28:b0:74:5e:9b:b8:86:2a:c1:e0:f5:
e2:d3:8c:b1:64:6c:08:95:7d:9e:6c:b5:e2:43:a7:
df:1e:92:dc:8a:29:7b:70:ba:80:99:73:6c:2f:42:
59:d5:71:37:94:2f:30:26:e4:00:c5:03:45:4d:d3:
28:e9:04:eb:f7:c0:58:11:16:83:12:a1:99:0b:2a:
a0:c5:3f:12:93:69:6a:b3:a2:e7:b8:41:d4:5d:d7:
e9:c0:dc:e9:08:42:38:0f:1e:58:76:ee:5f:13:dc:
4d:bf:bc:54:77:1e:78:71:74:a9:59:d5:a0:b6:ec:
c2:c0:01:63:e2:35:2a:9e:26:86:04:24:53:74:de:
34:bd:11:80:67:17:33:13:b1:78:ae:a4:fb:e3:d9:
5e:b2:c4:3d:51:4d:a9:a8:59:c8:4b:a0:bf:8f:2c:
d1:a8:3a:92:17:c8:36:f3:56:a3:3a:d8:cb:29:2d:
eb:de:1f:59:7f:41:a9:15:c0:f3:94:55:5c:b2:a9:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:19:73:D0:E8:0F:48:06:90:23:EE:58:BB:82:D9:71:05:3A:E9
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:1e:5e:46:1e:7d:ba:4d:20:b5:7f:11:a1:38:bb:1b:c5:
1c:88:69:1e:68:9e:5b:9a:f4:14:66:2a:ad:e1:5c:51:f0:47:
1d:1e:ce:f7:3b:34:11:47:3d:aa:91:84:84:f6:60:97:bb:8f:
a9:2c:3e:53:be:49:4b:50:94:d1:f8:30:c2:0f:4a:b7:e1:43:
5d:19:ca:ec:63:7d:d0:16:52:7f:61:70:45:16:c3:33:0d:da:
ab:11:15:89:e8:d3:e9:ca:7b:72:17:b9:3b:2c:e7:ca:ee:03:
f9:57:8b:49:df:99:82:0d:fb:41:36:b6:12:0f:75:fc:8a:bb:
1f:10:ba:92:4d:09:b4:84:bb:82:25:da:5a:1b:14:89:da:a9:
ed:3e:09:19:73:31:e7:bd:f8:72:ca:8d:e1:49:99:df:26:50:
55:06:b3:72:54:e2:68:c4:29:66:cb:e4:21:6b:52:52:01:f0:
3e:4d:a6:e6:9d:e1:26:ad:e0:74:68:eb:48:43:a9:97:31:a3:
7b:4b:42:5f:ea:c1:46:4c:c8:90:35:09:e8:bc:62:a4:30:82:
ac:0e:6b:3e:89:5c:bb:7c:d7:f7:e7:53:21:d0:09:e4:58:b8:
bf:d4:8a:41:04:32:ad:b3:ad:1c:50:d2:7d:39:b5:ec:a4:b5:
b1:b5:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:32 2026 by rpki-client