Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: ah8LMduU47PWtTpL6DD8EsYSZitFRcNs4TSU1I8OgwQ=
Subject key identifier: ED:9A:19:60:07:CF:C7:64:E8:4F:45:41:25:39:2A:67:9F:79:43:D8
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01A15A0BEE65336DD7DAE8A354E1F3789438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 12E6
Signing time: Tue 20 Oct 2026 16:01:33 +0000
Manifest this update: Tue 20 Oct 2026 16:01:33 +0000
Manifest next update: Wed 21 Oct 2026 16:01:33 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: ScTPU87B61+K2lnkanN4jWQYXhwjHUB6fsOJDH1aB0o=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:ee:65:33:6d:d7:da:e8:a3:54:e1:f3:78:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Oct 20 16:01:33 2026 GMT
Not After : Oct 21 16:01:33 2026 GMT
Subject: CN=ed9a196007cfc764e84f454125392a679f7943d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:5d:1e:fd:ca:0c:72:ef:98:9d:35:a0:e2:
50:dd:9e:6f:90:5d:f3:ea:44:79:de:03:d2:ca:de:
01:c6:41:7b:4a:8d:4a:55:06:8c:50:8e:22:b4:22:
44:50:97:e4:e3:1e:b0:05:0f:4f:31:9f:d2:a3:d7:
58:73:f2:38:d7:73:be:e0:62:5b:6e:42:52:67:36:
cf:25:da:50:11:ac:7d:85:fc:50:b3:1e:1e:46:18:
ff:e9:cc:bc:24:6c:cc:cb:b3:f9:96:d9:d7:9d:a8:
b7:86:8e:f1:ff:3d:33:d5:72:d8:46:bb:05:49:08:
b2:57:66:6a:fe:06:c1:f1:4c:fb:a2:ab:9e:7c:af:
40:e2:47:4b:5b:20:77:61:d6:b2:45:61:ac:d4:4e:
29:c9:04:1d:00:5e:dd:88:2d:6d:7c:56:6f:6e:6e:
50:8b:01:86:6c:a2:a7:2a:10:b7:9b:e7:6b:0f:ac:
b7:2c:84:ec:cd:45:de:15:a9:7f:8b:a4:65:32:dd:
ab:c3:75:20:ac:74:19:9c:d7:14:63:70:82:90:bb:
a9:c0:24:f3:ed:fd:62:07:b6:41:0f:d0:f2:ef:91:
c8:1f:80:0f:29:6b:fa:e0:2b:8a:ed:a4:ac:15:63:
d3:0d:62:c5:77:2b:7f:7c:85:d1:7e:f6:ab:ae:9a:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9A:19:60:07:CF:C7:64:E8:4F:45:41:25:39:2A:67:9F:79:43:D8
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:db:fd:a7:11:cd:05:f7:16:84:91:df:e3:2b:55:1d:a5:
8a:81:bf:f1:5c:6b:ee:61:f7:b8:fc:44:07:a1:74:bb:0a:fe:
bc:5d:68:37:39:46:0b:7e:cb:7e:66:5f:c1:0f:b7:88:2e:75:
98:48:34:35:92:86:fc:01:a4:90:91:dd:d0:0f:55:57:1f:31:
93:f0:41:a8:ef:c8:4a:9a:70:80:d5:74:10:47:6e:7b:d2:98:
89:99:5d:8d:14:42:47:6c:86:79:90:36:b5:00:93:cb:6c:23:
41:7e:58:75:2b:5d:5d:19:e9:cc:9d:01:fc:9a:9e:19:f7:57:
d2:08:14:4a:a7:f5:e3:cb:7b:0b:ae:f3:a8:10:a7:db:d7:6b:
62:40:bc:e1:7f:0e:75:2e:22:20:f7:71:f0:94:22:60:97:36:
e9:e1:d5:df:4c:b1:c2:c7:93:ed:37:e0:bc:7f:ab:75:d1:ab:
a6:14:19:86:a3:d9:c7:f0:b9:33:84:bf:cd:2d:ec:eb:2f:77:
d8:97:70:6c:13:6f:79:1d:92:e6:25:45:d9:9c:09:f0:44:c2:
5e:fb:26:da:21:25:64:6b:bb:22:c4:ab:1d:d1:c8:99:92:7b:
e7:79:f3:e1:0c:ce:f2:3e:95:33:1c:45:f6:26:d3:ab:9d:51:
1f:b0:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:39:17 2026 by rpki-client