Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: JLuxfYPaoDbr4ZewusZZQYEzdkNEsnXn997t5/neJEg=
Subject key identifier: C8:31:CD:46:94:AB:46:51:E0:85:95:19:AA:83:64:D0:FA:02:C4:99
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019F19B11440A7DAD743C811D573E886DACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 08D7
Signing time: Tue 30 Jun 2026 18:01:03 +0000
Manifest this update: Tue 30 Jun 2026 18:01:03 +0000
Manifest next update: Wed 01 Jul 2026 18:01:03 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: EzKK184u/QBICnmqUbltKNTgcf2q1B+mWmvUunADHy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:14:40:a7:da:d7:43:c8:11:d5:73:e8:86:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jun 30 18:01:03 2026 GMT
Not After : Jul 1 18:01:03 2026 GMT
Subject: CN=c831cd4694ab4651e0859519aa8364d0fa02c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:79:24:6e:3f:5c:3d:8e:53:14:74:38:e6:
68:29:a8:ec:13:17:72:55:28:b6:c0:f2:28:2d:2c:
f3:14:aa:fe:89:04:59:5e:a5:b6:cb:2b:24:f0:44:
b6:ea:f8:b0:dd:36:be:bd:20:4a:2b:89:b5:ab:35:
bf:61:de:72:3b:fe:b5:36:ff:ba:33:64:7d:ae:d4:
b8:1a:77:f8:4a:6f:b0:a0:3e:90:a7:dd:36:10:25:
1f:49:c5:c3:fb:fd:fc:9e:85:68:ca:c7:23:4e:95:
0a:9a:df:da:b8:42:35:bb:ef:bf:46:70:5a:f9:ff:
54:3e:43:bc:ba:37:30:d5:71:7f:4c:2c:30:dc:11:
9d:1f:d0:22:45:fe:1b:0c:e7:a9:69:1e:25:e1:cf:
69:d3:f4:b9:ca:4c:c9:be:17:a8:c1:13:6c:cb:ad:
ec:d8:18:9d:eb:1e:8a:07:51:77:7e:2f:f8:25:aa:
00:3c:db:96:fa:d5:76:8b:94:8d:09:ca:af:dc:a8:
6a:c1:95:61:f9:a1:25:fb:9f:9a:59:f2:09:6d:73:
3d:4b:0f:ed:86:f2:da:b0:0c:d3:06:a3:62:38:7d:
bf:8b:3e:90:b9:9a:42:b7:9f:0f:92:d3:8f:3a:71:
88:85:80:c6:5e:bd:16:89:26:4c:a7:fc:46:55:6e:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:CD:46:94:AB:46:51:E0:85:95:19:AA:83:64:D0:FA:02:C4:99
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:b6:6e:f3:7a:64:57:de:6d:49:fc:7a:04:b5:e3:6d:0c:
c4:40:97:0a:0a:b5:d1:09:7f:09:45:54:3c:b9:75:c4:e5:54:
a2:1b:3a:77:0f:b4:03:f2:dc:d9:33:1c:69:91:96:94:14:fb:
1d:23:03:1f:9b:bf:3e:b4:21:57:5e:9d:55:7e:3e:7d:63:fa:
80:6a:d1:d6:ca:f2:9b:34:aa:e5:5c:59:02:e5:b0:25:76:57:
fc:67:f3:4d:11:16:55:ac:27:07:51:e2:99:5f:4d:82:4b:f4:
27:3a:82:37:e1:53:0e:94:24:16:96:34:ab:0c:2e:c4:0c:84:
1e:15:01:22:1d:af:a1:78:ec:3b:03:9c:89:88:13:76:28:20:
fd:97:eb:5b:9c:67:9a:23:5b:e3:97:2e:5d:60:d3:fe:d5:c5:
58:2a:f9:23:fb:76:0f:04:e1:46:5d:68:fa:84:f1:b9:54:a0:
8b:e8:2d:60:3b:27:66:c8:52:87:a7:82:9d:45:94:6b:46:0d:
f3:00:c7:57:6f:bf:37:92:fc:f9:1e:26:fa:c6:f5:20:62:83:
cb:f5:30:37:de:2b:92:95:3c:52:3d:8f:a3:45:af:de:a4:28:
d0:53:89:2c:35:ee:23:9e:53:3a:0d:a4:32:82:e6:d5:8e:bf:
d9:e0:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:35:08 2026 by rpki-client