Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: BdXIgjhRGSO1rN69Zu/4ixF0BcOSmnCANtnTyfHkhCI=
Subject key identifier: 85:91:7A:D6:85:B8:BA:26:0B:E5:D7:BD:8D:87:A1:FB:65:9E:27:F1
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019EC2C9E0F3F660D8F8651BEF2380ACB566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 08AA
Signing time: Sat 13 Jun 2026 21:01:10 +0000
Manifest this update: Sat 13 Jun 2026 21:01:10 +0000
Manifest next update: Sun 14 Jun 2026 21:01:10 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: jDb+ZVS6Pw2qccQF3zq9wYM1Q/nqEVvl6amnftyKh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:e0:f3:f6:60:d8:f8:65:1b:ef:23:80:ac:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jun 13 21:01:10 2026 GMT
Not After : Jun 14 21:01:10 2026 GMT
Subject: CN=85917ad685b8ba260be5d7bd8d87a1fb659e27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:ca:66:c1:f7:98:6c:b5:4f:57:b6:cd:90:
8d:6b:7c:54:6c:ab:dd:63:90:53:91:47:0a:69:fc:
fb:0d:dc:ba:53:72:cd:db:38:54:33:be:8c:4e:30:
6e:54:ef:19:25:8f:82:88:2d:ee:18:b0:93:3e:1f:
fd:7f:94:22:1b:19:2c:35:db:4e:4f:26:f6:00:3f:
8b:ae:d0:7f:fe:e7:0a:df:dd:0c:d4:69:2a:60:3b:
46:a7:30:cf:5e:81:a7:71:e0:15:1e:3b:af:c0:d4:
23:a2:20:f3:45:f2:4e:f6:65:0a:50:39:ef:73:c8:
7d:b9:b3:f0:5d:ee:19:da:18:ea:be:4b:7a:39:ea:
ad:bd:fa:50:6b:54:b8:13:64:cd:01:78:a4:90:99:
e7:1b:1c:bf:d4:7a:89:82:0d:01:4a:c7:17:73:c5:
bd:cc:38:66:56:91:fc:98:b4:16:41:66:c9:88:ea:
63:c2:45:22:fb:ad:43:e1:ef:db:52:e4:be:ab:b6:
19:49:9c:1f:a5:26:a7:aa:69:27:4e:1e:37:bd:a7:
ba:e0:63:88:25:27:dc:d7:c3:94:bd:e6:a1:da:7d:
c7:f1:41:47:67:af:2b:f8:a5:c6:1d:71:8e:7e:fb:
2f:f5:7d:f9:3c:70:fe:73:54:bb:b4:ad:c3:b4:1d:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:7A:D6:85:B8:BA:26:0B:E5:D7:BD:8D:87:A1:FB:65:9E:27:F1
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:81:ed:21:02:e5:4c:db:98:93:6f:75:16:e1:69:12:92:84:
95:aa:73:90:0f:ce:09:68:95:09:88:2c:27:79:06:df:40:9c:
3a:79:e3:25:5b:78:86:b5:a2:0d:cb:6f:15:4e:f5:f1:63:69:
1e:fe:09:45:2f:55:26:2a:a5:d0:39:33:f6:c6:23:cf:82:e0:
ee:4b:8a:6a:65:2a:19:0f:b0:53:d7:8b:ac:e6:2c:bd:dc:a8:
90:a8:30:a4:9a:dd:78:9d:72:45:8b:0f:4f:02:e2:49:be:27:
af:91:71:70:fb:2e:77:ac:88:e7:81:ce:ca:4d:2a:7d:f0:de:
08:1a:64:8d:05:27:2f:1a:0b:1e:91:33:92:cf:2f:8b:74:14:
59:29:8e:58:36:ed:48:ab:3d:32:8d:57:cb:4e:87:9f:52:59:
5b:11:8d:96:4e:da:1a:16:ff:29:77:5c:e3:2c:0a:b9:65:b7:
00:aa:b2:65:8b:a2:00:a7:6d:46:db:38:cc:2f:de:98:5f:a0:
b4:90:f5:6b:12:c5:e0:e8:6f:5c:7c:7e:d3:2e:13:94:2b:9a:
6a:2c:ab:bb:bc:18:c8:5f:b6:ef:20:eb:e9:28:57:1c:38:f2:
24:d1:1b:32:76:bb:6d:7d:55:73:44:f7:05:aa:d2:35:b3:ed:
d2:00:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:41 2026 by rpki-client