Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: aGKJLz7ajC7SaFggA9c8ZJjRBlSL+yFfjuWFIfJ3SGA=
Subject key identifier: AF:34:34:4B:46:53:14:44:95:74:16:A5:D5:C6:FB:FC:FE:CD:E2:01
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019E1EA2E5138E82AA0445AE90B8CCE016D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0855
Signing time: Wed 13 May 2026 00:00:52 +0000
Manifest this update: Wed 13 May 2026 00:00:52 +0000
Manifest next update: Thu 14 May 2026 00:00:52 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: THdIwJfVGQy6kR8b+k1I9al8ZOx6WUu8DI3AnBq6N40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:e5:13:8e:82:aa:04:45:ae:90:b8:cc:e0:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: May 13 00:00:52 2026 GMT
Not After : May 14 00:00:52 2026 GMT
Subject: CN=af34344b46531444957416a5d5c6fbfcfecde201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:51:c5:be:b4:2a:98:85:04:04:df:71:3c:
dc:8d:e0:c3:8e:db:28:1d:74:ca:af:ac:9d:42:47:
bc:8a:2f:54:19:61:f4:1f:be:10:c3:ba:df:57:bd:
7c:a1:07:bf:f3:7d:8a:01:9d:85:58:78:81:61:b4:
fa:69:85:40:07:f2:a0:89:8a:92:9a:20:ac:24:c9:
85:cb:0f:83:b0:39:eb:8b:56:3a:17:87:05:1f:76:
c7:0f:c5:a6:96:96:4e:6f:63:95:79:20:09:3a:88:
39:a4:5e:d0:09:a1:ae:a9:0b:17:18:0a:43:d1:98:
1a:f4:91:52:ae:ec:88:78:63:ce:76:1f:82:f4:ef:
5b:68:c1:eb:46:ca:a9:94:35:43:8c:0a:ce:bf:23:
c9:d4:ec:63:46:16:3e:93:d3:72:a9:31:ba:cd:58:
e0:6e:76:07:e6:b3:65:74:65:40:fe:46:b8:ac:1c:
89:e6:4a:9e:98:73:6d:4d:dc:17:28:04:db:e1:98:
b8:d0:6d:e8:f4:c7:7a:b0:13:d2:ca:0b:ef:a9:43:
5e:29:72:9f:95:fb:5e:2c:3d:26:88:e6:30:b6:49:
94:ef:42:3b:3a:a9:82:5a:8f:ed:6b:7c:20:7d:e2:
81:29:71:7c:0d:fa:a7:b5:b5:31:fe:b9:2e:04:2d:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:34:4B:46:53:14:44:95:74:16:A5:D5:C6:FB:FC:FE:CD:E2:01
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3a:f3:04:59:4b:e0:94:ff:2c:5a:2a:1e:2a:ff:43:00:f5:
5c:be:83:c7:a7:f9:c3:e7:9f:93:53:57:ec:88:87:32:d2:88:
e1:00:5f:50:bd:4e:78:93:65:e3:56:0f:0e:52:d5:31:e3:01:
e0:6f:28:64:ba:7c:2e:ae:82:8e:dc:37:18:e5:0f:ef:bb:a1:
0d:18:83:ac:0a:cb:39:c5:8a:85:7f:8f:32:27:b4:b6:fa:11:
63:6c:cf:fd:de:8a:ba:14:fb:db:2d:bd:cf:f1:9b:ed:4a:33:
d0:14:5c:f9:50:1e:23:cf:2a:18:39:ba:45:b2:0d:d3:4b:c2:
03:0a:de:d9:4b:99:8f:b4:5a:e1:a9:c8:b3:fe:70:c7:76:d2:
ab:dd:e4:65:f3:4b:5a:96:ad:a5:4f:43:45:3b:17:68:ed:30:
1e:49:5d:46:a1:f6:50:66:50:4e:3a:6c:79:8b:28:ef:dd:62:
62:54:44:95:cd:ea:e4:73:e2:fc:35:11:7a:4e:98:4d:de:69:
46:bc:d5:3d:3c:51:71:e8:ac:57:c0:17:24:ea:9d:bd:77:9b:
0f:ea:c1:7e:c6:9b:03:3f:78:6c:23:1e:c4:ae:e7:ff:5d:d3:
e8:a4:4a:d3:00:8c:9e:99:2b:81:c6:cc:f8:b7:07:62:fa:22:
4e:cf:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:26 2026 by rpki-client