Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: cI8dAg2IPViovfSF0MavxYoYpfn/yjtyuWc4wxOoUtc=
Subject key identifier: CE:57:BF:E3:A9:41:D4:46:B2:FC:31:D3:CD:F0:91:D3:9F:4D:A6:20
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019D98F41F3291C5524F89833B39AAC55361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 12F9
Signing time: Fri 17 Apr 2026 01:00:28 +0000
Manifest this update: Fri 17 Apr 2026 01:00:28 +0000
Manifest next update: Sat 18 Apr 2026 01:00:28 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: AxE3K+4TcuZXfC+DuVX9aUCONUBzISNkERpwBmSGZN0=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1f:32:91:c5:52:4f:89:83:3b:39:aa:c5:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Apr 17 01:00:28 2026 GMT
Not After : Apr 18 01:00:28 2026 GMT
Subject: CN=ce57bfe3a941d446b2fc31d3cdf091d39f4da620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:ae:cc:d7:6b:55:f6:05:d6:ac:b5:6f:cc:
74:2b:ba:29:9b:90:92:2e:fd:34:7e:86:39:1b:e5:
51:ab:85:ee:f7:67:a8:32:e6:40:ee:7a:26:c0:2a:
37:2f:8a:ea:89:e4:a2:af:06:be:79:6e:3a:d1:56:
24:31:a5:3c:e1:f2:02:c2:82:f4:b7:ff:c2:ae:eb:
e6:26:f1:ad:3f:e1:f1:de:b3:c4:91:97:11:4e:29:
da:b0:72:86:46:71:5c:cb:2b:c7:0a:db:6e:15:9f:
86:0d:7e:ab:d7:3f:ee:fc:7f:0a:af:b9:eb:30:8b:
c4:6b:38:9b:6f:ce:e3:fa:41:af:b5:e7:92:a3:e8:
40:8a:ce:83:28:05:7e:59:2d:f9:88:36:2f:35:af:
c8:1b:8d:aa:7b:91:80:d8:e9:85:30:e6:72:b6:08:
1d:48:37:3e:b9:57:c9:fc:d2:43:a4:70:53:1c:1f:
5a:a5:a3:1e:07:0e:44:a7:0d:ba:02:52:80:81:7e:
12:a8:12:88:67:e1:82:6c:c2:66:fc:1b:dc:fe:ed:
34:6b:34:4f:1f:bd:a7:b8:d7:6f:02:3b:93:57:12:
bc:76:a4:8a:17:21:b4:f7:f3:ce:fe:99:8e:74:18:
0c:24:cb:97:2f:f1:07:24:ec:53:4d:4a:91:eb:cd:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:BF:E3:A9:41:D4:46:B2:FC:31:D3:CD:F0:91:D3:9F:4D:A6:20
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:54:0b:9b:75:7a:4d:89:5a:c1:db:8f:c0:65:9e:60:5d:8d:
9a:1d:56:2f:0b:c6:62:2a:9c:ac:05:e3:91:f8:79:67:24:74:
5a:d8:83:1b:47:9b:fd:61:11:11:f1:1d:69:32:79:69:90:76:
a4:47:97:fb:f1:dc:bf:0b:85:0c:8b:8c:55:76:b3:dd:e7:9f:
72:dc:44:a7:9f:e4:0f:40:ad:1a:15:3b:37:bb:07:7c:a1:a7:
43:67:ff:a0:91:4c:e8:ec:63:82:e7:0e:54:96:93:25:f3:eb:
9b:f2:a1:a1:3f:1b:47:67:fd:af:82:a3:d1:76:15:6e:0d:5f:
02:dd:85:ae:a1:89:da:b9:09:fc:73:9c:70:23:be:2e:ca:dc:
90:31:5f:27:71:c1:ee:4c:33:0f:37:77:a0:a1:30:6b:e5:d6:
ea:f6:61:3e:54:1b:61:c8:86:a7:e3:65:d0:5f:87:87:ac:43:
84:5f:c8:d9:e6:48:5a:ae:4a:a9:46:87:f4:2b:5d:7b:b8:bf:
be:3f:c3:74:a3:75:aa:ec:c1:72:29:65:91:f0:39:ce:66:0e:
87:22:f8:41:d4:62:cc:5a:b8:17:93:45:f2:a8:1b:35:19:84:
3f:42:3c:95:40:9b:05:cc:7a:c9:8c:46:7b:76:58:b0:54:8f:
7a:6e:12:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9B8ykcVST4mDOzmqxVNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjYwNDE3MDEwMDI4WhcNMjYwNDE4MDEwMDI4WjAzMTEwLwYDVQQD
EyhjZTU3YmZlM2E5NDFkNDQ2YjJmYzMxZDNjZGYwOTFkMzlmNGRhNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokOuzNdrVfYF1qy1b8x0K7opm5CS
Lv00foY5G+VRq4Xu92eoMuZA7nomwCo3L4rqieSirwa+eW460VYkMaU84fICwoL0
t//CruvmJvGtP+Hx3rPEkZcRTinasHKGRnFcyyvHCttuFZ+GDX6r1z/u/H8Kr7nr
MIvEazibb87j+kGvteeSo+hAis6DKAV+WS35iDYvNa/IG42qe5GA2OmFMOZytggd
SDc+uVfJ/NJDpHBTHB9apaMeBw5Epw26AlKAgX4SqBKIZ+GCbMJm/Bvc/u00azRP
H72nuNdvAjuTVxK8dqSKFyG09/PO/pmOdBgMJMuXL/EHJOxTTUqR682ghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5Xv+OpQdRGsvwx083wkdOfTaYgMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlQLm3V6
TYlawduPwGWeYF2Nmh1WLwvGYiqcrAXjkfh5ZyR0WtiDG0eb/WEREfEdaTJ5aZB2
pEeX+/HcvwuFDIuMVXaz3eefctxEp5/kD0CtGhU7N7sHfKGnQ2f/oJFM6OxjgucO
VJaTJfPrm/KhoT8bR2f9r4Kj0XYVbg1fAt2FrqGJ2rkJ/HOccCO+LsrckDFfJ3HB
7kwzDzd3oKEwa+XW6vZhPlQbYciGp+Nl0F+Hh6xDhF/I2eZIWq5KqUaH9Ctde7i/
vj/DdKN1quzBcillkfA5zmYOhyL4QdRizFq4F5NF8qgbNRmEP0I8lUCbBcx6yYxG
e3ZYsFSPem4SKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:05 2026 by rpki-client