Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: oi4Edn1FW2YW/aQHntypLxdJ8QgkQT0AgKmgTvirNfY=
Subject key identifier: 2A:70:FF:98:4C:A4:AA:9D:7E:B6:8F:68:CF:6B:CF:0F:6A:B1:5A:F8
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 01A13FA718D67DE8C862D981B11214DCA305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 13:01:17 +0000
Manifest this update: Thu 15 Oct 2026 13:01:17 +0000
Manifest next update: Fri 16 Oct 2026 13:01:17 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: z44Xo76h+rLZvpe1Ao8KB4mWXT1DKCk3IxK4rR/CS5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:18:d6:7d:e8:c8:62:d9:81:b1:12:14:dc:a3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Oct 15 13:01:17 2026 GMT
Not After : Oct 16 13:01:17 2026 GMT
Subject: CN=2a70ff984ca4aa9d7eb68f68cf6bcf0f6ab15af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:fb:ea:63:de:d1:cf:34:e2:4f:24:62:7b:
46:79:33:22:c4:2f:22:00:de:17:73:ae:04:74:54:
9e:55:f0:86:1e:7b:d9:6b:76:ce:14:c7:e3:b8:53:
12:58:37:80:05:c5:fb:1f:d9:98:2e:88:6a:17:49:
e1:9f:6b:47:43:9c:d5:ab:1a:79:92:e7:f0:bf:58:
2a:0b:41:44:62:1c:29:e5:13:cb:2b:7a:34:b3:ab:
1b:8e:dc:db:0d:de:9a:ff:23:2e:f0:a1:c2:00:d8:
47:67:d0:df:cb:1f:1d:36:c3:28:ed:a7:da:1e:a5:
bd:91:22:cd:e7:c5:ed:cc:2c:3e:d4:ab:64:bf:a1:
f0:54:fc:78:d3:ec:ec:ee:97:26:ed:97:dc:ab:8b:
de:0a:4b:51:aa:76:f6:fd:d6:96:a8:b9:76:71:47:
29:b7:e8:d2:83:93:db:6a:70:03:7c:24:61:9b:c3:
4b:f6:f7:4a:10:b4:18:db:ff:af:c6:69:7e:10:42:
f0:65:25:98:f6:a3:2c:29:a5:ee:f4:e2:62:36:e1:
13:87:9a:ae:23:1c:a0:e6:ea:96:5a:af:e1:43:99:
1c:01:cc:7d:e3:6b:71:c4:b4:df:90:bd:db:fe:cb:
9c:8a:e5:0f:dc:5d:3e:64:e5:16:88:14:50:01:9e:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:FF:98:4C:A4:AA:9D:7E:B6:8F:68:CF:6B:CF:0F:6A:B1:5A:F8
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ad:d8:ec:fd:01:a2:a0:01:97:1c:da:a4:57:1a:6e:aa:d9:
ba:34:4d:b4:50:f0:f4:5d:0b:63:d3:4c:76:0b:98:d6:81:4a:
20:ca:68:74:67:e4:c4:cf:6c:7e:f7:48:86:84:f5:96:d3:93:
26:c4:40:e5:52:37:aa:55:40:98:5c:ec:18:0a:a2:ff:1e:99:
59:3c:4a:ca:22:a5:e1:a7:11:a4:d9:68:b8:14:af:a5:e1:b8:
9e:3b:4f:2c:f5:80:de:46:89:8d:5c:8a:c4:27:2a:64:54:85:
b4:a1:15:09:d8:c2:08:17:6e:4c:c3:7c:aa:11:1f:20:20:75:
27:4c:4b:6c:c2:3e:1d:45:7f:30:26:10:d0:10:5d:02:2c:4b:
84:1d:4b:1f:ca:8c:e9:cd:8e:1f:91:89:5c:b6:35:9d:c4:45:
c3:33:62:28:3d:33:54:a8:a3:b6:92:d5:29:55:67:f2:41:a6:
55:8c:da:55:2c:9c:50:4a:af:c9:93:3c:10:82:4c:46:24:d5:
64:c3:99:f4:c5:a7:b8:ae:ad:d4:94:45:27:b4:f3:f8:56:e7:
f8:a6:72:80:26:30:3a:f0:c2:43:72:05:c1:92:5c:70:1c:af:
3e:ea:1d:f4:4f:71:ab:d8:11:5a:1b:a9:63:28:76:46:db:3c:
5e:6f:71:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/pxjWfejIYtmBsRIU3KMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDFlYmIwZGIwNGNjNGQ2OTE4MmIzOGVjMGRmNGIwODky
MjI3OGQwHhcNMjYxMDE1MTMwMTE3WhcNMjYxMDE2MTMwMTE3WjAzMTEwLwYDVQQD
EygyYTcwZmY5ODRjYTRhYTlkN2ViNjhmNjhjZjZiY2YwZjZhYjE1YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiL76mPe0c804k8kYntGeTMixC8i
AN4Xc64EdFSeVfCGHnvZa3bOFMfjuFMSWDeABcX7H9mYLohqF0nhn2tHQ5zVqxp5
kufwv1gqC0FEYhwp5RPLK3o0s6sbjtzbDd6a/yMu8KHCANhHZ9Dfyx8dNsMo7afa
HqW9kSLN58XtzCw+1Ktkv6HwVPx40+zs7pcm7Zfcq4veCktRqnb2/daWqLl2cUcp
t+jSg5PbanADfCRhm8NL9vdKELQY2/+vxml+EELwZSWY9qMsKaXu9OJiNuETh5qu
Ixyg5uqWWq/hQ5kcAcx942txxLTfkL3b/suciuUP3F0+ZOUWiBRQAZ68XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpw/5hMpKqdfraPaM9rzw9qsVr4MB8GA1UdIwQY
MBaAFAwB67DbBMxNaRgrOOwN9LCJIieNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lOTg2ODQtMzAyYy00YmE4LWFiN2Yt
YTEwMzg3NGU3YzRmLzEvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lOTg2ODQtMzAyYy00YmE4LWFiN2YtYTEwMzg3NGU3YzRm
LzEvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwK3Y7P0B
oqABlxzapFcabqrZujRNtFDw9F0LY9NMdguY1oFKIMpodGfkxM9sfvdIhoT1ltOT
JsRA5VI3qlVAmFzsGAqi/x6ZWTxKyiKl4acRpNlouBSvpeG4njtPLPWA3kaJjVyK
xCcqZFSFtKEVCdjCCBduTMN8qhEfICB1J0xLbMI+HUV/MCYQ0BBdAixLhB1LH8qM
6c2OH5GJXLY1ncRFwzNiKD0zVKijtpLVKVVn8kGmVYzaVSycUEqvyZM8EIJMRiTV
ZMOZ9MWnuK6t1JRFJ7Tz+Fbn+KZygCYwOvDCQ3IFwZJccByvPuod9E9xq9gRWhup
Yyh2Rts8Xm9xPQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:32 2026 by rpki-client