Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: 4zBHNRRY8X6nm0XT7ofT+w2HPI3e0MEsqtaDNPN1Ezc=
Subject key identifier: 7E:03:BB:97:53:6A:05:3A:37:D3:02:21:45:74:52:E4:25:9B:F8:E4
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019F1B9F7AFC74293489C9DA349401352E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 08D8
Signing time: Wed 01 Jul 2026 03:01:04 +0000
Manifest this update: Wed 01 Jul 2026 03:01:04 +0000
Manifest next update: Thu 02 Jul 2026 03:01:04 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: E9v1jKvf6MZOR5loAE2npD2G163wKigjQgPSXt0ADXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:9f:7a:fc:74:29:34:89:c9:da:34:94:01:35:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jul 1 03:01:04 2026 GMT
Not After : Jul 2 03:01:04 2026 GMT
Subject: CN=7e03bb97536a053a37d30221457452e4259bf8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:30:1a:17:64:0b:1c:66:cb:ae:33:2d:f4:
30:a1:08:0f:ff:4a:1b:cb:b7:85:06:bb:aa:a6:27:
64:6b:eb:a5:07:1b:5f:67:36:35:49:ee:47:ed:7c:
31:eb:ac:53:01:10:ca:55:1f:d1:16:e3:8c:5a:6e:
be:7f:66:ce:ff:18:94:d7:d9:ec:d1:be:f9:8c:88:
38:e2:c7:ca:c8:2f:8f:09:c8:6e:c3:a1:5b:a4:fd:
f9:3a:66:8e:8f:31:a3:dc:1f:07:06:ba:92:9b:c1:
44:77:30:0e:06:32:7c:2a:4e:6d:2a:e2:e9:15:d8:
b2:7c:73:38:0e:ae:16:05:76:1c:57:89:c8:50:cc:
cd:9f:d9:d3:73:67:a5:81:cf:53:ef:5a:97:87:57:
7a:d4:4c:2c:57:81:6b:52:aa:57:e3:d9:fc:fc:71:
0d:0e:97:d9:71:cf:69:8a:46:37:0b:01:bd:8f:b3:
56:ab:d4:3f:1e:dd:d1:07:81:0c:8d:bf:30:f0:3c:
a1:65:77:8f:82:d2:0b:0c:22:2e:dc:5f:c4:fa:53:
00:78:b8:64:c1:b4:fe:fb:fc:06:9d:1d:42:13:7e:
c2:9a:1d:b8:34:0b:86:4d:3c:12:49:7a:78:05:47:
d4:d0:db:fb:6e:0d:a5:77:d7:6d:c0:31:11:70:7c:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:BB:97:53:6A:05:3A:37:D3:02:21:45:74:52:E4:25:9B:F8:E4
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:47:e3:84:97:90:5f:d5:96:62:42:f3:30:53:25:df:4c:
7b:ee:ef:cf:bc:a6:85:39:d2:78:25:00:49:b8:72:01:31:1d:
26:62:63:2b:24:cb:e3:15:b2:e8:7f:94:7d:8b:11:30:20:be:
98:90:14:3f:5c:ab:cd:f7:09:34:30:fa:be:4a:42:16:26:44:
33:bc:74:9c:9c:3b:72:1f:b8:2c:4b:f7:fe:55:dd:d5:f4:30:
7f:b6:88:94:df:9e:e5:3d:60:16:c9:b9:8e:87:46:df:9a:64:
14:78:fa:e5:ac:b8:89:ad:23:85:28:8f:3c:fc:fc:b0:ae:27:
38:af:01:d1:26:bc:7d:1e:17:cd:a2:a4:e6:90:29:4b:9a:2f:
65:e4:45:34:5f:ba:2b:64:c0:15:1c:cd:95:90:63:0c:fb:3a:
c1:3f:ef:90:07:d0:f4:67:b1:b8:63:0b:ac:5e:83:83:35:86:
f0:39:86:e5:2d:11:e2:45:7c:27:28:5e:05:7e:41:14:53:d2:
19:28:0a:8a:17:de:ca:37:90:0d:3d:16:c1:3d:b9:52:9a:e7:
5f:41:58:5b:84:a8:32:b4:04:93:c7:f7:51:5c:10:6b:af:31:
c6:50:96:c8:a7:86:91:38:32:4c:65:ad:2e:d9:02:a2:11:be:
25:92:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:38:14 2026 by rpki-client