Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: WiyjCGbRYjtEuDNtd8d4POIszxEjLMgPrRPz8lmfI1I=
Subject key identifier: 60:A0:C3:40:4C:0B:36:AF:CC:CE:05:01:A5:24:54:8F:37:69:4A:94
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019D38D3039C0B1A86E30F91F9094A38BA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 07DE
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: +F6jklisM9QUd0bUe+sSUB5CWjl3TcD6bkltXlnB7YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:9c:0b:1a:86:e3:0f:91:f9:09:4a:38:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=60a0c3404c0b36afccce0501a524548f37694a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:d0:6e:4a:9f:34:6e:c5:16:eb:3b:5c:f3:
52:77:ad:64:7d:98:7c:7a:5f:c5:3f:3c:e4:d8:54:
8e:84:cd:fb:74:7a:d5:00:45:2a:c8:73:25:f8:99:
0c:ea:cc:47:d4:94:ad:2e:7f:cd:10:ac:58:19:c9:
6f:56:6c:60:40:91:04:2b:51:b7:1c:1d:5f:02:de:
04:51:dc:03:a8:fa:23:e3:c5:3c:97:fe:37:e2:3e:
63:73:81:16:dd:14:63:82:61:8b:9f:71:21:f5:f7:
06:a4:67:fc:c8:b7:f2:65:1a:91:39:16:54:d9:27:
69:00:91:81:d6:41:04:17:ee:b1:52:ee:37:d3:04:
ed:29:f8:5e:5e:39:84:70:37:19:c0:52:1e:c6:83:
e2:ea:7d:fc:3a:65:44:2e:e2:c8:de:4a:fa:6d:2b:
7a:13:56:f1:39:4b:d1:c9:3c:51:7e:4f:66:e6:74:
3c:5d:04:32:e2:7d:7a:2f:1a:57:50:af:63:8c:08:
75:6d:55:ca:78:27:20:3a:94:c4:34:41:8a:c3:fb:
53:6a:a4:09:5e:51:e0:06:36:61:7c:02:e3:58:4f:
0c:e2:4d:cc:c0:7e:80:cd:9a:1f:1a:cf:d0:09:87:
77:19:f7:0d:9c:f5:35:a4:3f:60:d7:76:02:b4:91:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:C3:40:4C:0B:36:AF:CC:CE:05:01:A5:24:54:8F:37:69:4A:94
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:c8:af:9e:de:5c:a5:75:d5:91:09:84:3e:25:c9:8c:54:
73:e3:74:49:ca:bc:a5:8b:4a:74:21:68:33:d8:36:47:0d:a8:
79:3e:05:86:ce:b6:7d:ae:54:87:63:7b:9d:32:52:81:94:3d:
45:61:3d:69:eb:6f:7a:e3:3f:a4:0b:9e:65:74:98:8c:14:31:
8f:01:b5:f4:01:67:1f:22:85:5f:8b:0e:a1:89:1a:0b:35:d1:
7e:97:5c:8e:7e:b7:1a:09:4e:b2:4f:38:a9:dd:e0:a5:2d:a4:
09:d3:38:83:3c:7f:4e:96:d3:c1:28:de:2f:d5:d8:c7:5a:d2:
92:5d:d6:50:ce:c1:28:10:db:dc:65:47:5d:42:3c:a5:05:44:
69:4e:70:09:76:52:2b:22:f9:76:66:29:96:9e:38:31:ad:6c:
0f:cf:3e:10:cf:da:30:98:3e:ba:15:e0:3e:a4:b3:1b:00:00:
ec:2b:a3:b6:2c:e4:1d:85:d1:00:50:16:31:1e:22:16:38:44:
4a:d5:85:28:61:fe:7e:eb:71:6b:67:2f:f4:ba:07:6e:1c:47:
67:da:f1:95:71:9c:4a:d6:41:2a:47:21:c2:c1:c2:5c:6c:49:
bd:5f:91:ef:84:31:ac:9c:0f:82:3c:71:30:fd:14:25:1a:b2:
be:58:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:34 2026 by rpki-client