Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: WEO2c+F7A2SUgS97UEI6pjYAkUKaoQxRlA7EM4P/Z5Y=
Subject key identifier: 1C:AC:6C:E6:18:23:C8:79:E0:A2:82:7D:90:95:47:EA:D9:37:AB:E8
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019D2583FE3374B5E1E85BF2636093801B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 07D4
Signing time: Wed 25 Mar 2026 15:01:40 +0000
Manifest this update: Wed 25 Mar 2026 15:01:40 +0000
Manifest next update: Thu 26 Mar 2026 15:01:40 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: vinmTBusDWKy/ngg/plW6JGfEA8lwTZo5J/S4dsTASc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fe:33:74:b5:e1:e8:5b:f2:63:60:93:80:1b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Mar 25 15:01:40 2026 GMT
Not After : Mar 26 15:01:40 2026 GMT
Subject: CN=1cac6ce61823c879e0a2827d909547ead937abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:71:50:ac:28:79:44:2c:5f:f4:96:33:aa:
0b:6c:b3:ec:10:34:c8:45:97:b4:e3:3c:5f:c8:f3:
82:e7:f0:b2:ff:c6:9c:58:1a:c5:e2:00:7d:42:69:
42:da:d3:64:2b:aa:f7:74:d5:a2:46:4e:b9:b5:e7:
43:e6:27:b1:7f:3f:ff:81:72:2c:dd:e5:01:08:c8:
79:af:49:36:b9:2f:9b:47:e9:d1:4c:d4:d3:0a:45:
dd:32:ab:01:26:9e:10:e6:ec:5a:7b:57:2f:e6:6e:
c6:81:c1:bc:a0:ef:f2:1c:a9:0b:4b:30:b4:f0:40:
22:cc:9b:0c:22:1b:39:d9:cc:d1:ab:23:6a:4c:3b:
3b:16:4c:a5:93:3f:ff:47:c2:d5:41:5e:98:6c:78:
71:60:e9:a5:de:4e:78:91:0c:9c:95:ce:58:b3:1b:
48:ed:5e:09:9b:32:92:d0:da:62:f6:0c:c3:43:36:
bd:ac:e7:1c:fd:c0:d5:d8:5b:87:28:7e:2c:a5:ad:
00:ce:0b:b3:07:4d:51:52:a0:ca:6d:c7:5b:16:12:
fc:19:76:40:dd:f1:22:3d:0e:31:01:ca:aa:41:13:
41:32:01:81:bd:23:45:05:dc:47:1b:ca:bb:ec:a6:
45:c9:03:44:d4:7a:fe:cb:a3:1e:08:d8:ee:40:b8:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:6C:E6:18:23:C8:79:E0:A2:82:7D:90:95:47:EA:D9:37:AB:E8
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:36:1c:ae:29:38:e6:91:eb:2f:2f:e8:08:60:69:5b:a2:bf:
4e:a5:0d:f4:e4:13:00:5c:de:a6:46:e1:60:db:c4:b4:3e:f1:
2f:46:be:72:ee:3a:65:ff:b1:19:53:89:2f:ea:7f:66:75:71:
e3:5d:6b:40:31:87:43:b6:fe:45:ed:8e:32:7f:0f:46:89:ab:
2b:42:b9:a6:9e:0f:01:86:45:7e:bd:63:be:11:17:79:cd:cc:
b1:ca:de:87:bc:67:e9:81:f4:dd:db:c4:35:7c:fc:91:c6:66:
d5:f7:50:99:27:f1:92:a3:ac:57:ed:2b:c0:a8:4b:a8:73:ce:
29:08:c3:c8:6b:d6:31:72:d7:0e:6f:2b:0b:69:be:18:c7:92:
56:dd:66:00:33:37:de:37:50:9d:88:df:47:33:60:b8:8e:fc:
1f:0d:b7:cd:14:d7:75:2a:12:55:61:2d:30:62:de:35:94:f5:
2c:08:b0:66:3a:07:98:6a:f4:0f:86:b8:cb:72:5b:2f:e4:ff:
e4:8c:83:a8:c0:48:09:74:3e:cf:5c:95:e3:8b:97:fa:17:7e:
69:76:d0:ab:14:f5:c3:b7:37:6f:38:66:17:bd:ac:36:e8:1b:
b5:91:7e:dd:bd:6d:01:7b:58:aa:09:61:dc:f2:64:7f:cd:de:
9d:19:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:33 2026 by rpki-client