Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: Z23i8v7f3ctanQFe0DPCU934TO/cr+pyL38aE9d+5AA=
Subject key identifier: C6:5E:68:25:CD:1C:E3:55:2B:E1:0F:CF:94:12:FD:C9:0E:7F:55:7C
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01A1697DFE5CBA29F99235DACD64E18C0110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 12EE
Signing time: Fri 23 Oct 2026 16:00:27 +0000
Manifest this update: Fri 23 Oct 2026 16:00:27 +0000
Manifest next update: Sat 24 Oct 2026 16:00:27 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: cu0lTeAcWq1lFJKjmIPpkfwMZi+7GO4FS9fyuF2EwK0=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:7d:fe:5c:ba:29:f9:92:35:da:cd:64:e1:8c:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Oct 23 16:00:27 2026 GMT
Not After : Oct 24 16:00:27 2026 GMT
Subject: CN=c65e6825cd1ce3552be10fcf9412fdc90e7f557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:77:11:f1:11:ea:e1:a7:60:ee:c9:60:0c:
e0:52:f9:b4:1c:c5:b0:64:39:e4:a2:53:07:45:a8:
88:29:84:52:44:fb:83:9d:d7:e5:30:5a:05:71:b0:
64:c1:a3:cc:8c:20:46:3b:94:95:64:a3:d5:9b:e8:
5a:a0:10:08:cb:8f:7e:e7:2a:39:41:2e:78:43:f4:
e2:f0:ac:b4:96:1d:9f:1a:bc:cd:99:a0:e2:22:79:
4f:21:15:52:99:2f:14:86:08:2d:d4:b2:f4:d0:b3:
5d:b7:33:24:7b:5e:bc:97:c5:24:59:87:14:fe:d8:
68:6e:f7:69:ab:89:d1:36:65:2e:95:ba:2e:48:d2:
4a:57:f8:af:37:d2:fe:d7:0a:cd:d2:b7:3f:07:41:
cc:41:29:03:2f:20:4d:1e:73:b3:0c:c5:50:f3:58:
18:5c:f0:ec:82:1c:d8:71:3c:7f:02:56:94:dc:24:
d0:6e:4d:9c:09:fc:bf:c2:12:99:a2:8a:ef:98:ff:
23:15:70:3c:ad:06:be:68:ce:00:93:2d:c7:21:1d:
ae:6d:af:45:01:93:20:30:06:c8:57:a8:04:87:5b:
cc:fd:c7:4c:7c:e0:d4:1f:12:9d:80:89:48:cb:fb:
07:7f:cd:12:55:5d:3b:ce:88:2b:5d:58:03:63:58:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:68:25:CD:1C:E3:55:2B:E1:0F:CF:94:12:FD:C9:0E:7F:55:7C
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:98:36:bf:62:92:2d:f2:2e:45:7a:75:a8:a9:93:82:47:
ec:39:6b:4a:c8:7b:fa:07:9e:bf:5e:a0:35:9a:d9:c2:71:46:
2b:8a:46:65:db:13:45:ae:b1:41:46:5f:93:ac:34:a8:ef:15:
44:4b:27:e6:16:4d:7b:ab:c7:45:a5:77:9a:d6:32:c2:5d:e1:
7a:59:cd:4e:9d:dc:f6:31:d6:f3:7f:cd:48:2b:f9:77:9e:14:
c8:81:dc:ef:bd:ce:96:a1:91:60:e0:35:c8:86:b9:20:2d:20:
7c:fd:fe:1a:66:3f:77:e8:47:4c:f2:82:f2:21:fb:ba:ed:47:
5d:92:b4:6e:6a:02:b1:26:7f:8c:68:34:42:d3:5b:0b:66:ea:
63:c2:fc:ec:4d:d6:1a:0b:c0:12:ec:86:ac:cc:9b:34:6b:c9:
62:95:f7:9b:79:2b:2c:e1:65:78:0a:88:95:43:14:a9:fc:21:
cc:af:1a:ad:60:b5:41:d9:0c:9b:5a:20:bc:e3:40:d1:9a:16:
93:33:49:03:d6:42:0d:48:31:3c:06:5c:42:77:d2:e8:be:ab:
17:6a:63:30:43:90:fb:f2:81:bf:3c:d8:05:11:84:88:b7:82:
7f:0a:e6:7c:97:1b:24:09:ce:8d:2c:47:ef:e2:a5:da:d7:ce:
9b:c5:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:34:01 2026 by rpki-client