Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: BJZjM6AROykQQK6PVXcYz7g7ah+93e5E9wG9sw64OEM=
Subject key identifier: 81:83:9E:8A:65:83:75:A9:D7:CB:A6:A2:9B:4E:BF:71:0B:2D:F4:7B
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019FAA88EC5DE0EE1C39554AC60C08377E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0922
Signing time: Tue 28 Jul 2026 21:02:07 +0000
Manifest this update: Tue 28 Jul 2026 21:02:07 +0000
Manifest next update: Wed 29 Jul 2026 21:02:07 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: 6ANn5wlEV1vRPJeLsP5h9nyq/kBK56lidgw7CEgI3W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:ec:5d:e0:ee:1c:39:55:4a:c6:0c:08:37:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jul 28 21:02:07 2026 GMT
Not After : Jul 29 21:02:07 2026 GMT
Subject: CN=81839e8a658375a9d7cba6a29b4ebf710b2df47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:b8:7c:23:18:2f:3d:1a:69:74:c1:9a:47:
86:23:ab:29:70:3a:ec:f6:5c:c7:9e:ae:00:6b:2e:
c9:27:f1:ca:d0:be:20:d7:4d:7b:7f:52:3e:b0:3c:
88:64:56:86:2f:58:97:3f:b3:80:13:10:bb:1d:ac:
af:12:19:45:20:bb:83:de:21:29:8a:e5:0c:e7:bc:
93:b7:72:bf:ba:90:dc:87:8a:b9:5e:2d:6a:5a:fc:
c9:b6:a1:20:ad:cc:a3:39:bc:16:9d:2e:39:45:51:
a7:e5:bd:9e:a9:34:47:eb:01:7d:85:bd:9f:cd:2e:
95:ee:54:5e:14:12:bc:cb:ba:38:7f:5e:a1:eb:21:
fd:cd:3a:f9:54:7f:f7:4a:bd:a0:92:89:62:ff:fa:
ae:73:2a:e6:e8:76:22:06:44:bf:25:a9:21:00:aa:
96:4f:f5:7d:5f:2c:74:62:7a:14:25:b7:5b:d7:9c:
50:ba:c8:f0:67:83:88:17:5a:a3:76:6d:36:8a:5d:
8c:a9:bf:cd:c8:99:ac:5d:d4:55:e2:c6:69:0d:30:
8e:98:a6:b2:94:db:64:a6:63:a5:ae:a9:a3:cc:7f:
87:a6:c8:80:97:56:77:d7:c7:8c:44:60:65:67:cc:
bc:ce:ac:47:b1:67:4b:f5:28:7c:ef:00:ac:6b:9b:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:9E:8A:65:83:75:A9:D7:CB:A6:A2:9B:4E:BF:71:0B:2D:F4:7B
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:75:47:f7:77:55:08:d2:bf:91:ee:fc:dd:eb:22:02:f0:
e8:99:9b:e0:93:4e:6e:cc:c2:f9:13:c4:9c:a9:49:b0:91:33:
d0:33:df:d5:36:73:9e:af:8d:4b:23:e9:82:04:e3:54:7f:34:
20:33:91:a6:8c:7f:d4:59:92:26:27:2a:21:fd:b9:e7:84:12:
d8:1d:6f:f5:33:02:a3:22:04:1a:4e:58:b8:e8:38:a8:ea:ba:
f1:a0:dd:f3:67:d8:71:6b:d7:75:5c:1e:f7:cc:74:71:2a:29:
ff:2f:57:a0:c6:ad:96:9b:35:d2:3c:4e:44:00:e9:87:9e:21:
84:77:19:5a:ee:f3:7b:d6:02:74:27:6e:05:3b:bd:f5:78:b9:
a3:b3:e5:dc:20:36:95:96:30:5a:54:5f:54:49:9a:e0:b3:c6:
30:c1:76:5b:18:8f:07:22:5a:51:ea:51:92:17:1b:57:65:ff:
5a:0d:41:a8:5e:78:0f:6d:3a:cb:73:20:36:8e:11:5e:59:9f:
72:43:49:cf:db:88:63:40:29:17:3c:1d:5d:b3:9f:00:c5:d1:
55:3b:e8:ed:03:1d:4f:88:3e:d6:25:f4:8b:86:34:3c:61:6c:
4c:68:29:e9:f6:d9:91:22:1e:76:c4:15:9e:93:7e:9f:43:16:
21:a3:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:55 2026 by rpki-client