Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: ndlHsxznx/wCQ/17v+hRFHM9tqALbj+cYC3/P8fTzo8=
Subject key identifier: AB:20:6B:A0:0D:10:66:DC:04:2F:9F:BE:17:1A:2B:3D:E6:F5:75:CF
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019D99630440793DA118266FC23D7EE993AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0810
Signing time: Fri 17 Apr 2026 03:01:36 +0000
Manifest this update: Fri 17 Apr 2026 03:01:36 +0000
Manifest next update: Sat 18 Apr 2026 03:01:36 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: PPLMJTD45XY+8kTnrDc+lldTv4VYj0MHoyRWIn1ONU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:04:40:79:3d:a1:18:26:6f:c2:3d:7e:e9:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Apr 17 03:01:36 2026 GMT
Not After : Apr 18 03:01:36 2026 GMT
Subject: CN=ab206ba00d1066dc042f9fbe171a2b3de6f575cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:a3:dc:4f:c8:b4:c7:e4:55:91:62:52:55:
53:65:1c:0a:48:6f:d0:fe:64:95:f1:c6:9c:c9:fc:
df:cc:1e:92:0d:de:a0:8e:63:34:45:2b:b0:fe:4b:
71:31:73:7c:49:18:0b:01:78:be:bc:96:f9:b3:bf:
94:93:0b:de:96:7e:22:a9:fd:7b:6c:7a:45:2a:d1:
06:23:1a:a5:2f:9a:b6:d7:e9:64:5d:38:bd:0e:cd:
df:31:ae:dc:00:4a:59:67:6e:9d:45:0f:93:91:f5:
81:d2:9a:51:c0:29:b9:af:6c:1e:26:0c:f3:1d:4a:
14:d1:16:2d:8d:66:03:3b:a1:35:0d:d9:b9:5a:03:
26:28:53:a7:97:a3:54:0a:f1:b9:af:f1:b7:b6:50:
ea:1f:ef:96:08:51:24:b8:d5:1c:eb:b9:d9:eb:3e:
d7:f2:97:dc:16:c5:27:6b:d9:5d:d5:bc:ba:52:84:
8f:24:5a:f5:e4:6b:53:c3:9a:67:ee:97:1a:aa:50:
bb:11:f2:1d:59:3b:b0:f4:08:e8:98:94:e3:ca:08:
ea:eb:33:27:e2:97:80:ee:da:25:a8:9c:59:c6:c4:
64:9d:66:9f:62:f2:83:cf:dc:94:fb:9e:2a:b7:ad:
e9:83:bf:ea:52:6b:e1:71:f0:8d:60:44:37:f3:be:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:6B:A0:0D:10:66:DC:04:2F:9F:BE:17:1A:2B:3D:E6:F5:75:CF
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3f:4a:07:4d:72:b7:cc:fe:14:19:df:2b:98:d0:22:a3:88:
79:49:63:9e:b6:12:d7:f5:81:cf:b2:0f:0c:c4:20:81:3e:c0:
10:a8:02:f8:53:7b:37:e2:9e:9a:d5:28:6d:74:d3:47:5b:e1:
6f:bc:38:d9:86:8a:74:8d:6c:81:e4:7f:fb:0b:a4:12:38:e5:
b7:4c:bf:51:8b:9d:50:fc:07:c2:14:11:5d:f7:15:f1:ff:56:
be:df:62:17:7f:0d:a2:f9:14:8f:f5:2d:41:2a:bd:41:1a:29:
31:04:3f:23:8e:13:ff:bb:d9:e8:97:25:e1:24:63:34:7d:2e:
52:9c:cb:53:79:26:5f:75:2d:c0:d2:d7:eb:e7:a4:6a:cd:25:
be:5d:a7:0d:51:d9:04:99:c1:94:a5:a7:b9:97:e3:9b:75:c0:
53:7b:3b:96:27:3e:2e:72:d4:28:73:15:b8:a6:e3:b7:24:77:
ee:44:3c:27:3f:89:ea:fe:86:55:12:6b:72:b6:31:ad:c8:04:
44:1e:c2:7e:23:a0:65:17:24:97:1b:c7:d8:ef:56:49:99:88:
87:74:c0:25:01:b6:f6:db:ad:98:1e:15:52:2d:b2:2e:c7:47:
fe:c7:37:7b:1b:67:56:a9:05:81:ee:46:ac:54:09:fa:83:54:
a0:7a:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:00 2026 by rpki-client