Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: RQyJREEh8lqgtI3eZMpGjhulBfWOCQHH/AxjHLBbwFU=
Subject key identifier: F2:96:1D:9D:19:93:96:8F:36:C6:17:C9:D1:9D:0C:6B:5D:76:0B:A8
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01A11F409BF8FC48119AB3D9D2F00C94888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 09E3
Signing time: Fri 09 Oct 2026 06:01:30 +0000
Manifest this update: Fri 09 Oct 2026 06:01:30 +0000
Manifest next update: Sat 10 Oct 2026 06:01:30 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: DZU2bOCZuccMqwYq4T7hf83VFqMShlByB6dhQp8FpII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:9b:f8:fc:48:11:9a:b3:d9:d2:f0:0c:94:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Oct 9 06:01:30 2026 GMT
Not After : Oct 10 06:01:30 2026 GMT
Subject: CN=f2961d9d1993968f36c617c9d19d0c6b5d760ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:c8:48:e6:0e:e6:fe:89:84:95:31:65:30:
50:fe:5d:5d:15:f5:91:e6:72:84:82:79:5d:7d:01:
47:9b:8a:db:57:e3:f5:68:06:82:72:d8:58:f6:ab:
0a:29:01:80:b9:bc:80:81:64:34:be:fe:fd:73:52:
ed:2e:a1:b0:fb:ff:06:31:01:b5:62:08:e2:80:5f:
4c:e3:ca:08:5f:be:e4:36:a7:49:9c:44:fd:db:fc:
38:34:59:21:52:d3:34:6c:c5:ed:9b:e6:be:28:db:
3f:61:f5:b2:d3:83:da:85:83:28:67:ef:e2:ee:47:
6f:3d:bd:0f:42:ee:97:83:28:d3:fc:e4:96:04:38:
6d:30:8f:0d:74:94:b8:d8:d8:6e:78:1a:6f:4a:ea:
20:82:3c:b1:02:70:44:cd:84:e4:5c:46:84:80:a1:
9e:27:01:8c:42:5a:45:17:c5:bf:45:30:57:84:73:
85:4a:16:b3:5c:5a:e4:94:05:57:3c:df:a7:49:04:
9e:39:c2:ad:3b:dd:99:42:4f:8b:0e:a8:f3:c2:d0:
04:25:e2:67:3e:1a:be:4f:43:a8:75:6c:c8:5b:4c:
50:b6:94:d2:1b:1b:cf:01:3b:5f:9e:0c:6a:00:9b:
f9:a5:13:31:0d:48:1e:97:5e:e1:29:bb:95:86:b7:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:1D:9D:19:93:96:8F:36:C6:17:C9:D1:9D:0C:6B:5D:76:0B:A8
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:52:b8:37:85:5f:4a:9f:cb:ca:76:7f:7e:c1:d2:14:e6:a0:
28:c1:61:08:7b:71:29:0c:73:29:fa:d3:f0:20:f8:93:8f:b8:
23:33:2c:69:47:ec:38:0d:6e:a7:7d:f1:cd:8b:c4:96:3a:b0:
79:20:fc:e9:f0:0b:d9:55:d9:74:66:c0:06:d5:76:17:1d:3d:
80:65:7e:47:11:c9:92:a6:ba:11:5e:3b:76:20:83:8f:db:45:
12:d1:cf:8e:bb:a0:ef:57:f5:be:64:0c:49:b0:a9:7a:00:49:
3a:bf:46:da:c8:ed:a6:78:4b:a8:6f:82:12:4f:6f:40:53:89:
d4:47:e4:5d:21:45:b4:ae:0e:4f:31:2e:40:d0:49:9b:e7:06:
03:6b:42:43:fa:32:98:92:a7:b5:c7:e5:c5:50:04:ef:88:4e:
d0:a4:d1:c3:d4:98:c0:bb:47:0a:27:60:a7:06:73:70:a8:bb:
12:45:0e:37:9a:9b:23:a4:99:17:52:b9:08:8e:c3:c9:ce:47:
9d:65:94:b3:f1:25:e5:f9:bb:8c:aa:d9:da:7a:0a:3c:b5:4a:
1c:7c:2d:7f:40:59:c2:16:7e:2d:de:8e:a4:e3:e3:3c:a6:e8:
a9:17:e2:c5:0c:8c:39:bc:52:3c:6b:90:88:c4:e9:e2:76:79:
f1:12:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:43:40 2026 by rpki-client