Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: BxsrDsJhBa/4FYQ2ZzipBUL2Es3PVg1qvoMapO4DOy4=
Subject key identifier: 02:9C:68:36:8E:3F:7B:6B:50:33:BA:F9:D0:61:FD:B0:06:FC:26:19
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019E31F2F037B034492C2B3B1547E3794729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 085F
Signing time: Sat 16 May 2026 18:01:05 +0000
Manifest this update: Sat 16 May 2026 18:01:05 +0000
Manifest next update: Sun 17 May 2026 18:01:05 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: b9DyjsKJ5jFLvfK+6iSLzFUSrc8XXXPwHnXEl5xKphk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:f0:37:b0:34:49:2c:2b:3b:15:47:e3:79:47:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: May 16 18:01:05 2026 GMT
Not After : May 17 18:01:05 2026 GMT
Subject: CN=029c68368e3f7b6b5033baf9d061fdb006fc2619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:4d:7c:c5:ba:9e:6a:5b:a3:40:00:7e:97:
a4:76:2b:2c:4f:01:d0:84:41:db:e3:15:c4:84:c2:
f8:1e:ef:cd:4c:5f:ab:3a:cb:b8:22:6e:52:15:49:
62:6f:d4:9d:23:83:1a:27:ad:90:54:07:f2:f2:df:
14:23:fe:9b:f0:dc:2a:fc:db:00:0a:dc:57:db:20:
78:8e:81:ca:f8:ba:4a:22:2f:b6:ff:da:22:88:e6:
65:84:fe:0f:2b:0b:e4:8c:0f:39:0e:01:05:b8:c8:
8f:a0:50:50:9e:b6:e7:76:47:10:ff:7e:24:a6:e0:
b4:db:ab:45:98:54:ea:cb:e1:25:73:5f:b9:f1:47:
81:07:bf:a5:66:f3:4e:a2:cf:36:7e:84:7d:e6:6d:
6f:81:63:b7:6c:1b:1c:db:56:39:90:61:b9:99:8f:
76:06:08:ca:e0:7d:67:e1:00:0c:f4:e4:94:ba:f8:
66:47:44:cf:9a:3b:53:90:5e:9c:01:4c:ab:08:9f:
4f:ca:31:ff:8c:17:40:24:5f:30:18:10:9c:46:f6:
65:63:f8:cd:69:27:26:cc:2a:34:67:25:82:7b:89:
c4:6f:e4:4d:b7:e8:0e:db:f3:16:bf:4a:dc:bc:aa:
da:20:5e:62:74:f8:34:c7:ec:f8:ab:1a:74:71:bd:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:68:36:8E:3F:7B:6B:50:33:BA:F9:D0:61:FD:B0:06:FC:26:19
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ee:b6:84:c3:40:01:79:4d:88:41:f9:fb:b6:5d:7a:f7:3e:
a2:09:b1:a4:e5:68:60:6d:e6:5c:e5:36:29:52:24:40:ed:dd:
a9:05:fb:3e:da:3e:de:ba:9d:38:97:b2:cc:ff:2e:09:e4:c4:
a1:43:41:12:e6:ca:38:e2:dc:ef:3b:b2:71:14:a1:e4:ad:45:
21:72:ff:ee:f6:0f:60:3f:36:2c:d5:76:71:aa:83:74:1c:f9:
e5:d6:cf:0e:b3:df:c0:88:1f:5d:9b:62:ae:f6:63:9d:14:8e:
b7:e0:2e:48:e4:0f:5a:aa:09:de:ff:73:cc:23:77:4e:81:53:
ca:0a:d7:d5:5f:ac:43:1a:9b:69:3d:bf:a6:1c:d9:f1:ec:91:
b5:ab:0d:ff:b7:ce:50:69:d8:0b:9e:8b:bd:69:34:b7:73:24:
de:be:22:15:05:52:ea:c9:74:a0:c8:d1:4a:5b:62:82:dc:71:
48:c6:dc:68:7a:a5:39:8c:14:82:60:17:20:cc:d9:b3:66:57:
de:e5:b8:8b:35:8d:82:f7:f2:f7:7a:47:48:33:9e:7a:84:e5:
87:00:25:36:79:47:3f:40:ae:7a:40:0e:a9:52:f8:21:fa:26:
de:b7:13:c6:23:b2:ee:db:22:c4:36:b5:88:83:19:c4:d0:f7:
5d:65:1f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8vA3sDRJLCs7FUfjeUcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjVhYmIzNWZjYTMwNzBkNDgxMjJhMzM5ZWM1Y2JlZmYw
YmU5N2EwHhcNMjYwNTE2MTgwMTA1WhcNMjYwNTE3MTgwMTA1WjAzMTEwLwYDVQQD
EygwMjljNjgzNjhlM2Y3YjZiNTAzM2JhZjlkMDYxZmRiMDA2ZmMyNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QJNfMW6nmpbo0AAfpekdissTwHQ
hEHb4xXEhML4Hu/NTF+rOsu4Im5SFUlib9SdI4MaJ62QVAfy8t8UI/6b8Nwq/NsA
CtxX2yB4joHK+LpKIi+2/9oiiOZlhP4PKwvkjA85DgEFuMiPoFBQnrbndkcQ/34k
puC026tFmFTqy+Elc1+58UeBB7+lZvNOos82foR95m1vgWO3bBsc21Y5kGG5mY92
BgjK4H1n4QAM9OSUuvhmR0TPmjtTkF6cAUyrCJ9PyjH/jBdAJF8wGBCcRvZlY/jN
aScmzCo0ZyWCe4nEb+RNt+gO2/MWv0rcvKraIF5idPg0x+z4qxp0cb2t1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKcaDaOP3trUDO6+dBh/bAG/CYZMB8GA1UdIwQY
MBaAFHW1q7NfyjBw1IEioznsXL7/C+l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAt
MmM2YTJjNjkyMTJiLzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAtMmM2YTJjNjkyMTJi
LzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae62hMNA
AXlNiEH5+7Zdevc+ogmxpOVoYG3mXOU2KVIkQO3dqQX7Pto+3rqdOJeyzP8uCeTE
oUNBEubKOOLc7zuycRSh5K1FIXL/7vYPYD82LNV2caqDdBz55dbPDrPfwIgfXZti
rvZjnRSOt+AuSOQPWqoJ3v9zzCN3ToFTygrX1V+sQxqbaT2/phzZ8eyRtasN/7fO
UGnYC56LvWk0t3Mk3r4iFQVS6sl0oMjRSltigtxxSMbcaHqlOYwUgmAXIMzZs2ZX
3uW4izWNgvfy93pHSDOeeoTlhwAlNnlHP0CuekAOqVL4Ifom3rcTxiOy7tsixDa1
iIMZxND3XWUfeQ==
-----END CERTIFICATE-----
Generated at Sun May 17 02:06:46 2026 by rpki-client