Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: 7OiqfZ9pbxm/COxSfrNdkjEPnolzX52WFn/K3OFBMak=
Subject key identifier: 0D:81:24:53:D8:B4:62:8D:C3:C4:25:C1:62:3D:68:6A:6A:0A:55:37
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01A0035D92F0CCE78D017079411B303FE9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0950
Signing time: Sat 15 Aug 2026 03:00:59 +0000
Manifest this update: Sat 15 Aug 2026 03:00:59 +0000
Manifest next update: Sun 16 Aug 2026 03:00:59 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: kiiTgvgg8T4E603TEiIo8ewfBByKPmOAT4tsNFOzHgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:92:f0:cc:e7:8d:01:70:79:41:1b:30:3f:e9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Aug 15 03:00:59 2026 GMT
Not After : Aug 16 03:00:59 2026 GMT
Subject: CN=0d812453d8b4628dc3c425c1623d686a6a0a5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:2a:64:6f:cf:11:e3:ef:1c:06:de:f6:ee:
47:fb:88:b7:27:e0:c8:23:eb:65:2e:a7:02:98:bc:
a2:07:67:f2:7e:f4:5f:8d:80:e3:3d:ef:0a:80:bc:
14:f3:f2:b9:66:e0:bc:44:a1:32:10:64:da:99:20:
fb:10:ab:a0:ec:4f:74:1c:5b:eb:5d:72:8f:b5:d1:
08:22:2b:ec:c8:21:34:16:8f:40:cb:81:95:cb:40:
1b:5c:a1:71:d1:98:d0:da:28:c5:67:63:1e:73:f0:
b7:69:f6:96:a7:bb:f8:4e:e7:5d:04:2e:41:ef:1c:
65:00:17:48:0c:ff:2e:3d:84:b7:99:c1:e7:99:74:
92:10:48:5e:2e:19:9f:a6:82:2c:4d:3d:1b:69:87:
11:43:28:f6:d9:ce:a8:59:3c:f1:3b:25:b0:98:9a:
0e:76:8d:5d:be:e4:3d:8d:55:35:8f:c0:6b:0c:8b:
9a:c9:15:94:a9:d7:ea:b0:b8:97:c8:48:80:47:9d:
d5:62:13:36:ae:5d:ab:f3:0d:47:f0:0d:96:23:6a:
90:02:94:d1:7c:25:ee:57:7f:1e:82:93:d0:c6:a1:
28:09:e7:c2:7d:1d:64:21:6a:bf:e1:6a:85:f7:c1:
cf:7f:98:f7:d8:2e:8a:b9:9d:2d:24:08:f4:12:0f:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:24:53:D8:B4:62:8D:C3:C4:25:C1:62:3D:68:6A:6A:0A:55:37
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9f:2f:b6:bc:05:43:5f:68:51:24:aa:c1:0c:02:bc:17:e9:
b8:72:e8:6f:97:51:10:2d:fe:8f:0e:b9:fb:3a:3a:82:4f:e1:
fb:96:18:a8:9e:bb:84:1c:c2:ad:ce:55:e6:a9:73:f2:4b:5a:
51:3f:cb:a9:62:24:2a:a6:f2:1c:95:24:45:12:12:0e:ee:87:
26:2b:14:95:ac:c1:2b:74:05:72:bc:c0:ef:94:fa:82:1f:4c:
28:b1:66:2b:fb:53:14:4e:59:96:d4:48:5e:43:93:9f:7d:9d:
5e:82:ad:9a:11:96:ce:fa:ab:76:8c:ad:8d:fb:d3:87:89:5d:
1c:ee:a5:05:23:4d:1c:a8:30:4f:bd:0b:b1:63:4b:7a:7f:7e:
04:c8:98:16:77:b2:0e:ac:29:d2:09:aa:61:ac:cb:9d:31:67:
96:20:d8:6b:30:50:40:10:8d:b2:88:fd:04:f6:3b:76:79:44:
12:59:bb:96:93:65:6f:9c:5b:cf:90:7a:62:ac:51:07:16:00:
a1:45:cb:db:d2:39:44:5d:6b:dc:70:8e:ac:47:a5:49:c6:70:
12:fb:1f:ff:94:e4:c4:92:56:e5:e0:0c:4d:58:f2:97:76:a9:
c5:35:3a:51:32:19:d9:e7:24:df:13:61:01:62:7a:3c:74:9e:
8f:8a:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:43:47 2026 by rpki-client