Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: d8tMoBlAOoWs1EXnsm7MRbUBADe9gnGU8gctMJswauk=
Subject key identifier: 3D:6A:A0:E3:FB:D0:8D:2B:81:8B:B3:3D:50:D7:B9:6A:3C:DF:5C:FE
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019CE55AC0791B47C9D92ECEEAEFB62D3B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 129C
Signing time: Fri 13 Mar 2026 04:00:55 +0000
Manifest this update: Fri 13 Mar 2026 04:00:55 +0000
Manifest next update: Sat 14 Mar 2026 04:00:55 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: xrWEYNfh9bCr3dZuG/GDjmChSYQgDaIy6finP6H/C3Q=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:c0:79:1b:47:c9:d9:2e:ce:ea:ef:b6:2d:3b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Mar 13 04:00:55 2026 GMT
Not After : Mar 14 04:00:55 2026 GMT
Subject: CN=3d6aa0e3fbd08d2b818bb33d50d7b96a3cdf5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:7a:52:93:3e:64:27:ab:68:9b:d2:7e:1a:
9f:d9:c4:c6:36:a9:db:38:35:31:f6:7a:e9:32:57:
4e:53:37:d7:0b:a4:28:ab:9d:8a:7f:3b:ce:55:e6:
b5:c9:cf:0c:07:4e:51:40:87:be:15:78:b6:50:a8:
48:e4:a5:5a:1a:5b:99:f9:e9:9d:be:33:8e:08:bb:
fd:7c:45:85:74:08:5e:3c:07:0f:58:80:35:64:81:
ce:a1:2d:95:91:50:5b:59:8f:76:c2:55:bc:e2:04:
71:80:a8:24:49:64:c8:e0:62:d0:42:fa:fc:c2:e1:
58:88:ad:73:6b:11:c3:90:e5:2e:69:9f:18:f6:26:
ff:38:8a:7f:56:ae:dd:4f:8e:c5:8f:b5:30:85:8b:
a3:fa:e3:8a:99:f9:f1:80:d4:0b:6b:94:af:5a:fa:
c6:ca:c5:8b:7f:5f:58:de:e3:92:da:6b:33:62:5d:
1c:a8:b9:47:77:90:11:1d:1a:e2:c3:aa:93:27:a0:
df:f7:3c:6c:71:85:36:39:5e:c2:40:b4:dc:65:d2:
33:8b:f3:51:b4:df:4a:cf:fe:1d:c9:f3:e9:87:60:
53:a6:25:cc:0f:38:75:24:44:75:dd:ac:8f:93:b6:
16:c2:bb:3c:44:ed:50:b7:af:0a:7d:8a:0c:00:1c:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:A0:E3:FB:D0:8D:2B:81:8B:B3:3D:50:D7:B9:6A:3C:DF:5C:FE
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:44:42:75:53:31:a2:91:9b:72:5c:34:f0:0c:04:2f:d6:
fe:16:39:65:83:2d:fe:a2:8f:5a:26:b7:40:90:7d:56:9d:2e:
8e:a1:f8:5e:12:cb:3f:b1:95:f2:6f:24:83:c6:ae:8d:df:8e:
d5:73:07:b5:34:90:eb:60:5f:3f:4b:d8:0e:5c:12:08:f4:ed:
53:e0:da:1c:e6:99:84:4b:4c:ad:41:ac:9a:49:7a:3b:7e:9a:
1f:a1:80:e4:6b:d2:e6:0f:c1:a5:20:37:61:a1:c1:26:d6:ef:
03:8c:47:bc:f7:db:90:00:51:f8:9e:b4:19:a1:46:97:a2:2b:
d4:07:1f:85:08:97:26:dd:a4:44:49:ea:39:21:92:6c:93:4a:
65:3b:3e:c1:a0:ae:56:a9:67:f2:da:11:f4:22:84:1d:8d:38:
af:1f:6f:68:54:0f:76:86:d3:88:33:5c:3f:a8:46:18:14:9a:
5b:3e:6b:a6:07:c4:34:59:7f:83:6e:c9:4a:73:d7:74:e0:90:
11:e8:ca:38:9e:d1:ad:97:ce:15:f2:ac:29:a9:82:5d:bb:64:
46:6f:9f:00:14:b1:a6:05:8a:7f:ef:b3:f9:c5:3c:43:ca:80:
e9:1c:f6:03:71:eb:85:b6:c2:0f:28:b5:9a:82:40:48:50:38:
74:2e:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:11 2026 by rpki-client