Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: L/svv3qkH3XHKBQTCdG5Bysq0dfdtVp14W7d+oIvXDE=
Subject key identifier: 1D:7D:2B:28:06:D1:FF:41:E2:C9:7E:A6:E4:32:27:54:64:B6:8F:8A
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019F916C653B25EB163FDFE34B7560ECC79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0915
Signing time: Fri 24 Jul 2026 00:00:27 +0000
Manifest this update: Fri 24 Jul 2026 00:00:27 +0000
Manifest next update: Sat 25 Jul 2026 00:00:27 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: HcIQM7lUaUHYWmVPVnWGsXgvW6TSPSdtVhqfKjFcUw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:65:3b:25:eb:16:3f:df:e3:4b:75:60:ec:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jul 24 00:00:27 2026 GMT
Not After : Jul 25 00:00:27 2026 GMT
Subject: CN=1d7d2b2806d1ff41e2c97ea6e432275464b68f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:41:c7:fa:7b:5d:13:f9:c7:91:02:b3:e2:
52:96:19:d2:52:6e:5c:38:a3:cb:dd:1e:ef:d0:28:
28:1a:26:05:92:11:42:44:ec:e2:85:94:69:a0:14:
d7:2d:4e:2f:2b:f0:88:b5:c2:46:b8:bd:ff:fa:69:
b7:c8:93:a7:d2:e5:ba:ca:f9:05:95:5c:b9:e7:54:
6c:3a:15:f1:d5:bb:61:49:f6:a1:82:d6:ac:8d:6c:
9d:c8:5e:2e:d9:89:66:68:e7:ce:d6:11:eb:34:eb:
ef:c5:49:e9:a3:42:e0:8e:5e:0f:0c:ee:1f:b8:de:
21:a7:e3:14:20:1c:cc:c7:34:4b:2c:89:95:be:d1:
36:95:2b:61:a1:e9:c4:35:f3:01:e9:e6:a0:cd:27:
68:5b:6e:69:24:12:03:68:46:fc:40:ad:0a:7a:29:
99:b8:ad:56:09:0b:8f:71:30:9c:74:cc:91:d9:31:
f1:63:3c:56:b2:26:b8:25:9f:bb:33:46:53:19:1a:
8a:59:5f:53:39:7b:95:24:c8:7d:e9:a6:5c:41:61:
da:15:b4:e4:0d:14:79:25:0d:c8:5a:db:05:74:90:
37:81:a0:bb:68:89:79:3e:cb:6a:89:9a:97:48:2c:
8b:7e:57:58:5c:2e:59:88:f3:5e:f9:42:2d:1e:64:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7D:2B:28:06:D1:FF:41:E2:C9:7E:A6:E4:32:27:54:64:B6:8F:8A
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:c7:36:37:a0:15:d3:7b:78:1b:3b:7e:32:55:70:1d:1d:
95:bd:50:b9:75:f5:28:5b:1c:be:61:5e:22:4d:8b:46:dd:b5:
71:dd:3e:68:79:f4:cc:05:bc:7a:8c:8b:55:5c:9b:bf:f8:76:
af:be:5c:5f:f3:a7:43:fd:ab:59:21:c5:e3:3b:c1:4e:01:8a:
ab:e9:fe:af:f3:76:11:3f:f4:88:32:27:4f:ca:54:03:57:04:
ec:60:b9:98:37:07:c1:0d:04:aa:6c:a5:ea:e5:e3:55:de:9f:
3e:6a:31:cc:69:c2:25:1e:9a:93:d6:92:c9:80:61:b6:4d:00:
3c:ac:61:39:1d:1d:73:0b:07:c1:1d:5b:73:93:b2:08:76:2f:
db:21:85:10:26:33:d0:23:b9:6e:d1:06:d7:19:37:b5:3e:4e:
59:32:86:6b:55:f3:40:2e:2a:8c:60:2e:d7:8c:0a:ea:15:4b:
9a:d2:34:92:a5:14:bf:c9:90:09:50:b3:ad:9f:34:f4:8a:b4:
e2:9a:06:f0:8b:62:07:42:42:96:47:f4:b8:7f:46:16:4e:69:
f9:ea:9e:16:6b:62:76:93:04:a9:cb:cd:b8:3a:bd:16:c4:75:
15:d1:50:da:29:ac:e8:74:c9:ac:94:f6:20:c1:01:81:36:3d:
2a:4c:8a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbGU7JesWP9/jS3Vg7MebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjVhYmIzNWZjYTMwNzBkNDgxMjJhMzM5ZWM1Y2JlZmYw
YmU5N2EwHhcNMjYwNzI0MDAwMDI3WhcNMjYwNzI1MDAwMDI3WjAzMTEwLwYDVQQD
EygxZDdkMmIyODA2ZDFmZjQxZTJjOTdlYTZlNDMyMjc1NDY0YjY4ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3lBx/p7XRP5x5ECs+JSlhnSUm5c
OKPL3R7v0CgoGiYFkhFCROzihZRpoBTXLU4vK/CItcJGuL3/+mm3yJOn0uW6yvkF
lVy551RsOhXx1bthSfahgtasjWydyF4u2YlmaOfO1hHrNOvvxUnpo0Lgjl4PDO4f
uN4hp+MUIBzMxzRLLImVvtE2lSthoenENfMB6eagzSdoW25pJBIDaEb8QK0KeimZ
uK1WCQuPcTCcdMyR2THxYzxWsia4JZ+7M0ZTGRqKWV9TOXuVJMh96aZcQWHaFbTk
DRR5JQ3IWtsFdJA3gaC7aIl5PstqiZqXSCyLfldYXC5ZiPNe+UItHmS1JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB19KygG0f9B4sl+puQyJ1Rkto+KMB8GA1UdIwQY
MBaAFHW1q7NfyjBw1IEioznsXL7/C+l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAt
MmM2YTJjNjkyMTJiLzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAtMmM2YTJjNjkyMTJi
LzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNXHNjeg
FdN7eBs7fjJVcB0dlb1QuXX1KFscvmFeIk2LRt21cd0+aHn0zAW8eoyLVVybv/h2
r75cX/OnQ/2rWSHF4zvBTgGKq+n+r/N2ET/0iDInT8pUA1cE7GC5mDcHwQ0Eqmyl
6uXjVd6fPmoxzGnCJR6ak9aSyYBhtk0APKxhOR0dcwsHwR1bc5OyCHYv2yGFECYz
0CO5btEG1xk3tT5OWTKGa1XzQC4qjGAu14wK6hVLmtI0kqUUv8mQCVCzrZ809Iq0
4poG8ItiB0JClkf0uH9GFk5p+eqeFmtidpMEqcvNuDq9FsR1FdFQ2ims6HTJrJT2
IMEBgTY9KkyKLg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:17 2026 by rpki-client