Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: tiNqVi+fMCAi2MVHnBN7IMEHb8PsD8vCUuxdKCaJySQ=
Subject key identifier: 1E:D4:BD:B3:51:E4:F2:C5:92:97:3C:44:CC:21:5A:C5:C3:82:93:4E
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01A0E92E4503382D30846E333D35A73004D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 09C7
Signing time: Mon 28 Sep 2026 18:01:58 +0000
Manifest this update: Mon 28 Sep 2026 18:01:58 +0000
Manifest next update: Tue 29 Sep 2026 18:01:58 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: HErdh9gT4g/Qj/sM4PyS9cEwRz10QwfjMFvDXAG8EwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:45:03:38:2d:30:84:6e:33:3d:35:a7:30:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Sep 28 18:01:58 2026 GMT
Not After : Sep 29 18:01:58 2026 GMT
Subject: CN=1ed4bdb351e4f2c592973c44cc215ac5c382934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:e8:1d:c5:76:2b:78:65:02:f9:be:c9:41:
8a:e3:d2:23:9e:8c:8a:2f:17:66:cb:96:21:a0:17:
fc:71:96:ce:8e:16:f6:08:f1:7e:d4:0d:ea:cb:f5:
60:62:ca:5a:ca:da:4c:ee:50:66:cf:55:80:83:ea:
45:5c:63:68:36:8a:62:c1:d7:3e:fb:6f:62:22:5a:
82:d7:5b:4e:d9:fc:61:07:52:b2:c7:48:04:37:f2:
65:c3:17:eb:83:fb:62:38:78:e3:dc:33:62:f6:06:
37:7b:c2:3e:99:00:00:dd:dd:a9:86:f3:8a:6a:2f:
d2:39:47:93:30:ef:1f:4b:73:7e:6b:64:ce:2b:95:
3a:cb:d3:f4:a1:b8:d9:f1:0d:f1:67:3e:8c:cc:b3:
d3:2a:fa:ef:34:72:fc:69:26:b6:aa:98:a7:63:c9:
d0:32:d1:a6:29:11:ae:76:20:f2:3c:43:a8:d5:2d:
bb:38:4d:b7:61:fe:21:de:a4:22:1b:61:11:3e:9c:
90:61:b1:92:45:2b:00:50:d6:4a:cb:41:4c:52:8e:
00:88:25:9b:95:d2:1a:72:06:e3:98:ea:e2:dc:52:
60:1f:7a:7c:9b:de:5a:51:93:7e:6f:91:2e:d4:06:
13:b7:0c:2b:35:9b:61:a2:de:f2:29:4f:df:49:d9:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:BD:B3:51:E4:F2:C5:92:97:3C:44:CC:21:5A:C5:C3:82:93:4E
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:c6:df:0d:4c:c6:02:8a:da:2c:e4:16:5d:a7:a7:68:37:
af:52:2f:4c:5d:8b:bc:c1:5a:36:09:7b:c1:ed:03:c4:a3:dc:
1a:5a:96:4c:5d:60:36:9a:18:24:52:47:f7:d6:80:a6:8d:db:
53:e5:9e:7b:ad:25:22:61:fe:a0:89:74:88:a4:b8:45:38:5b:
fd:61:fd:30:28:08:f2:e6:e0:50:a8:8a:0a:64:4a:49:61:9d:
41:9f:ba:7c:be:eb:ae:07:bc:d2:73:5c:fa:b4:e7:12:64:53:
27:a2:dc:07:20:4e:23:0a:0e:aa:96:a5:9f:73:a5:eb:8e:f5:
84:9c:cc:df:18:d3:2a:46:72:92:77:00:f2:a3:79:ee:a3:05:
ba:74:0e:cc:d9:d7:0b:82:1f:3d:5a:8b:f1:65:5a:95:8f:6d:
89:b6:51:64:b2:37:92:5a:51:ff:43:52:c9:1b:dd:e9:d7:4c:
ae:e8:fc:04:60:a6:5c:e0:c2:70:6b:e6:46:44:16:07:f8:de:
e3:65:61:39:94:7b:72:87:0d:ec:21:93:9c:d2:28:44:a1:56:
35:c6:e3:57:c1:5f:09:4d:01:62:7c:f3:ff:f5:88:cb:c0:ba:
e9:d5:9d:33:a6:f0:7d:e9:52:18:17:a9:e4:47:ef:d4:de:aa:
c4:aa:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:10:58 2026 by rpki-client