Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: JAROBwjk0aSZS/J3yjwt9xtQ89qMBx9XCpxHMln9iBM=
Subject key identifier: 5F:2C:10:7C:9F:CF:6D:9F:7D:22:3F:38:A7:36:81:B6:8C:E7:04:7B
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01A0E73FFB1FA1D67F4B8C622374786E740F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 09C6
Signing time: Mon 28 Sep 2026 09:02:04 +0000
Manifest this update: Mon 28 Sep 2026 09:02:04 +0000
Manifest next update: Tue 29 Sep 2026 09:02:04 +0000
Files and hashes: 1: 9ohQVxC-KoPkbm4r6SUis5fiOY0.roa (hash: kQNZRrcsqnI0k3alY/Q+x1zv2+n5L4SsrUZMO9HGPzQ=)
2: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (hash: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: uU5QPhwzBXXy6ZzHwW1doFXT90lDo1tq+RuHvKKDXy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:fb:1f:a1:d6:7f:4b:8c:62:23:74:78:6e:74:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Sep 28 09:02:04 2026 GMT
Not After : Sep 29 09:02:04 2026 GMT
Subject: CN=5f2c107c9fcf6d9f7d223f38a73681b68ce7047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:a9:cb:49:9b:f7:f7:ad:e0:f0:8f:bc:19:
59:00:e7:31:80:6e:63:6a:57:64:0e:a5:1e:7e:45:
9f:d5:f7:56:86:07:69:9a:bd:ee:05:96:83:4f:8e:
b3:7b:f1:2a:b2:4a:bd:d2:53:a2:44:fd:98:9a:0c:
7b:e3:8d:c3:6c:2a:71:1b:e3:62:db:78:2e:c8:a8:
87:66:b2:99:b0:f4:dc:30:35:d6:48:b3:58:c2:eb:
6c:8a:5a:94:80:f2:6c:1a:55:99:f6:dc:d1:d9:3f:
06:70:3a:74:f9:33:d4:01:ac:20:3a:f2:ae:bb:bc:
86:51:d1:bf:04:be:94:6a:aa:d4:a4:0e:1e:e5:9c:
48:2c:5f:5a:78:fb:2c:02:7f:2c:25:96:70:7d:92:
ec:dd:32:fb:8b:b8:2a:04:25:2b:a4:dd:97:f8:40:
a1:93:7f:41:20:aa:80:3e:04:0e:b7:b4:fa:e6:fb:
22:b0:00:cc:b1:db:ff:27:f5:a0:20:24:cf:63:33:
41:1c:54:4d:06:c4:d3:6f:12:d1:7d:26:ed:20:5a:
92:ce:11:4b:39:a2:a6:66:df:e8:11:ec:d9:4a:33:
e4:36:0c:1c:4e:48:e4:0f:60:e2:6d:b9:46:4c:8e:
f6:f3:38:e1:1f:4d:d8:fc:30:61:f3:42:9c:c0:5c:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:10:7C:9F:CF:6D:9F:7D:22:3F:38:A7:36:81:B6:8C:E7:04:7B
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:2c:80:73:67:51:dd:97:8c:e1:ab:cb:c2:71:be:4a:e9:
fe:f4:51:da:8a:ee:f1:9a:2b:10:da:82:55:43:d2:e9:9c:53:
b7:6f:c7:d9:23:bc:e2:3a:d2:bc:1d:c2:80:44:95:0a:51:f7:
78:a8:2c:ab:3a:d9:c4:5f:0a:40:f4:84:0d:1c:a9:43:9d:d0:
ce:bf:cf:63:be:41:49:07:18:cc:97:1e:23:0c:96:22:85:06:
34:1e:fb:2b:dc:cb:f7:10:a7:4a:bf:c9:89:51:f3:9e:5d:e5:
80:ff:62:ca:4e:93:9c:c0:22:c9:1b:d2:77:23:0e:4d:b2:6f:
0f:ab:e0:33:ec:f3:b9:41:ac:7d:2e:ff:eb:79:91:30:b0:ac:
0f:50:88:0d:fa:62:3b:23:e8:33:80:47:41:af:c9:ff:9b:f9:
44:77:2e:5b:5d:67:41:25:f1:47:60:1c:e8:8f:7c:28:18:39:
b9:e1:2e:e9:85:e1:9f:92:39:0a:02:03:d3:70:31:6f:d4:47:
55:5d:08:cc:6f:83:4a:7f:a4:20:81:5a:d3:5b:21:bc:49:96:
1c:ae:11:21:1a:5a:73:27:dc:5e:de:79:67:5c:3d:b8:09:98:
cd:52:94:66:8a:b9:c1:bb:58:c5:10:2e:f2:cb:b3:05:1d:08:
7d:26:69:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP/sfodZ/S4xiI3R4bnQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjVhYmIzNWZjYTMwNzBkNDgxMjJhMzM5ZWM1Y2JlZmYw
YmU5N2EwHhcNMjYwOTI4MDkwMjA0WhcNMjYwOTI5MDkwMjA0WjAzMTEwLwYDVQQD
Eyg1ZjJjMTA3YzlmY2Y2ZDlmN2QyMjNmMzhhNzM2ODFiNjhjZTcwNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSKpy0mb9/et4PCPvBlZAOcxgG5j
aldkDqUefkWf1fdWhgdpmr3uBZaDT46ze/Eqskq90lOiRP2Ymgx7443DbCpxG+Ni
23guyKiHZrKZsPTcMDXWSLNYwutsilqUgPJsGlWZ9tzR2T8GcDp0+TPUAawgOvKu
u7yGUdG/BL6UaqrUpA4e5ZxILF9aePssAn8sJZZwfZLs3TL7i7gqBCUrpN2X+ECh
k39BIKqAPgQOt7T65vsisADMsdv/J/WgICTPYzNBHFRNBsTTbxLRfSbtIFqSzhFL
OaKmZt/oEezZSjPkNgwcTkjkD2DibblGTI728zjhH03Y/DBh80KcwFzRDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8sEHyfz22ffSI/OKc2gbaM5wR7MB8GA1UdIwQY
MBaAFHW1q7NfyjBw1IEioznsXL7/C+l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAt
MmM2YTJjNjkyMTJiLzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAtMmM2YTJjNjkyMTJi
LzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALk8sgHNn
Ud2XjOGry8Jxvkrp/vRR2oru8ZorENqCVUPS6ZxTt2/H2SO84jrSvB3CgESVClH3
eKgsqzrZxF8KQPSEDRypQ53Qzr/PY75BSQcYzJceIwyWIoUGNB77K9zL9xCnSr/J
iVHznl3lgP9iyk6TnMAiyRvSdyMOTbJvD6vgM+zzuUGsfS7/63mRMLCsD1CIDfpi
OyPoM4BHQa/J/5v5RHcuW11nQSXxR2Ac6I98KBg5ueEu6YXhn5I5CgID03Axb9RH
VV0IzG+DSn+kIIFa01shvEmWHK4RIRpacyfcXt55Z1w9uAmYzVKUZoq5wbtYxRAu
8suzBR0IfSZpEQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:18:05 2026 by rpki-client