Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: kOx+swd2+VaGG9bL/yJmbtJ3FWUppVnkL8+8yUGzG+4=
Subject key identifier: 1E:96:71:77:0B:4B:08:7E:B4:AB:7C:E7:4D:E5:97:79:63:10:3B:16
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 019FAA1A7EBE56803EC70E09CE34A08E19B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 140B
Signing time: Tue 28 Jul 2026 19:01:30 +0000
Manifest this update: Tue 28 Jul 2026 19:01:30 +0000
Manifest next update: Wed 29 Jul 2026 19:01:30 +0000
Files and hashes: 1: 2e-oYMnwEExlXfmTBVIwJZ2VMZ0.roa (hash: Yi0tTZSvBD+GRSo+ArCVpXm8qZe3LasOoT0HzjZZ9B0=)
2: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: u72Y59z/7/kJZ45WnEhvOwaLIcc0l795XvE4hS3Jv3w=)
3: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (hash: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7e:be:56:80:3e:c7:0e:09:ce:34:a0:8e:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jul 28 19:01:30 2026 GMT
Not After : Jul 29 19:01:30 2026 GMT
Subject: CN=1e9671770b4b087eb4ab7ce74de5977963103b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:f1:c9:0a:18:b0:67:2b:d9:ff:07:2f:5e:
ec:65:c0:db:83:3f:c0:b6:67:6a:0a:c7:10:84:7d:
47:52:01:db:00:5b:79:fb:61:56:2c:08:68:b1:51:
d7:01:2a:06:d7:b6:c6:af:e1:f9:67:b3:80:b8:38:
dc:27:19:23:11:dc:fd:fb:f4:3a:7a:6b:34:48:7d:
70:9b:6f:b8:fe:d7:c9:4b:dc:dd:ab:42:94:14:5c:
64:24:96:dd:94:fb:47:6b:52:f5:d0:70:7a:2c:66:
cd:f6:d7:e1:b6:97:8f:3d:0e:b1:9a:8a:a0:28:3c:
1c:6f:4f:a3:e3:60:71:db:d1:6b:91:4f:47:5c:24:
90:ad:97:84:b7:54:72:9d:8f:e7:41:bc:41:8b:7a:
6f:b2:f9:fd:59:e5:7e:da:b9:ec:c3:b9:31:34:c7:
81:f4:a1:89:e3:dc:a6:f1:2d:21:45:af:78:cc:b9:
cc:cb:dd:78:37:57:3a:c0:6d:05:8b:40:89:4d:3f:
82:bb:ac:51:1d:45:a5:b0:bc:1e:e3:e9:93:12:8d:
85:9f:a1:14:0d:7b:aa:e6:8a:99:5d:00:3e:63:1a:
c4:8f:cb:b2:29:70:e3:f8:9c:32:fc:19:56:5a:38:
cd:6e:9c:83:06:85:fb:a4:f7:3d:f3:03:92:74:5a:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:71:77:0B:4B:08:7E:B4:AB:7C:E7:4D:E5:97:79:63:10:3B:16
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:eb:a0:ab:9b:4d:58:27:87:09:10:e4:2b:b3:69:88:c0:
b7:2e:01:b9:e4:a3:b9:4c:e4:6e:c9:68:c7:0a:81:6f:d1:30:
05:d2:6e:d1:4e:74:32:32:0d:29:7d:eb:48:02:a4:dc:28:79:
da:b9:c9:87:ed:49:2a:83:ae:a9:67:ff:70:ec:f2:44:a5:a9:
b3:ab:45:41:30:ab:7e:4b:1b:8f:1f:e2:2d:f6:63:56:81:fa:
0b:b6:f8:5e:90:b5:5d:53:bb:39:3b:86:5a:cf:b6:f3:2a:56:
76:5b:95:f9:7c:02:36:33:c2:30:49:64:ff:60:8e:74:ee:e0:
22:a6:9f:b4:28:c3:26:3a:56:3e:cc:65:ef:dc:55:e1:e6:d0:
ee:ae:e3:5d:ff:bc:12:59:45:1c:3c:88:8b:d9:95:ab:e7:ed:
0f:1a:c7:57:8d:91:09:db:05:0b:02:00:8a:dc:ed:1b:b8:f2:
55:05:2c:2f:92:bb:84:9b:34:a7:6c:4f:cf:91:e3:2c:d3:49:
d8:2a:82:8d:3d:28:b0:cd:83:4b:42:e6:24:6d:a0:5d:e9:4a:
21:c9:0b:04:b3:a1:74:b1:47:d2:b0:b3:6f:0d:a7:f7:db:df:
59:ae:23:89:5e:38:b4:59:a9:2f:5f:7f:cb:82:1d:95:6e:a1:
45:6a:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:06 2026 by rpki-client