Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: xczK2ki9AWrjyg6vclaKQGM7IQXMSvhYKxl89A4y9pE=
Subject key identifier: 9C:BE:CB:FA:9E:C3:66:92:B8:33:3D:AD:A8:00:97:93:8D:08:5E:B9
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01A16F4A05D2363C997D38FADFA6D91DAD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 12F1
Signing time: Sat 24 Oct 2026 19:01:24 +0000
Manifest this update: Sat 24 Oct 2026 19:01:24 +0000
Manifest next update: Sun 25 Oct 2026 19:01:24 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: Po3/Xbx7hFTbfrFvBRYfIbooNYFaW+gnHU1UpLAbIGE=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:4a:05:d2:36:3c:99:7d:38:fa:df:a6:d9:1d:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Oct 24 19:01:24 2026 GMT
Not After : Oct 25 19:01:24 2026 GMT
Subject: CN=9cbecbfa9ec36692b8333dada80097938d085eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:68:0c:95:2e:cb:34:05:76:62:b0:85:4f:
bf:88:c3:fd:22:77:e4:71:7b:d3:60:05:83:ba:24:
10:cf:aa:c7:11:c6:3b:71:f7:46:9a:fb:a3:d5:fc:
1c:eb:44:83:8b:6b:05:f1:a6:fe:9e:01:11:a9:85:
61:45:a4:77:73:87:6b:db:6a:e1:42:f5:7b:89:0d:
23:f0:93:0b:9d:34:ed:7f:23:df:ad:49:b5:19:cc:
b3:45:cd:56:ab:06:64:c8:a6:3d:a9:60:e1:2c:c2:
b2:5f:09:78:2f:1e:2b:1a:62:3b:af:cb:b2:7b:9f:
98:a0:fe:8f:81:a7:19:ec:87:19:6a:2f:dd:0f:d8:
bb:83:f2:4f:f2:10:a2:b0:fa:2c:40:91:60:88:d9:
d9:10:cc:e7:ea:9d:fc:d5:a3:22:0b:83:b1:50:85:
6c:e2:36:c9:d1:20:b3:11:71:15:78:98:80:d7:43:
38:01:77:3f:d2:23:98:dc:4a:89:3a:dd:9f:cb:0b:
cc:a8:41:ea:50:b1:06:b6:de:91:a6:be:07:72:ad:
e5:9d:d9:db:51:5f:39:cb:db:18:cf:bf:c4:6a:13:
d2:88:05:be:22:a8:5c:25:a0:4c:0a:de:52:4a:98:
4b:3f:b1:3c:25:f2:e2:84:a2:73:16:9f:a0:57:ad:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:CB:FA:9E:C3:66:92:B8:33:3D:AD:A8:00:97:93:8D:08:5E:B9
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:33:fe:33:65:7b:9f:a4:72:45:8a:42:a5:ac:a0:9a:b7:
d4:22:f7:b3:b4:bc:9b:8b:0c:77:b7:df:f1:30:99:d2:80:a0:
8d:20:f4:e6:c4:77:d7:5c:4c:d1:0c:06:38:25:71:45:82:2d:
cb:45:d3:91:d2:e2:f4:66:11:ac:90:cb:2b:21:2b:97:f8:10:
e5:e5:10:a9:61:96:68:c7:9b:72:68:28:51:46:6f:b9:ff:ed:
61:6f:bb:38:a6:7a:03:bb:00:b3:7a:03:a5:ca:e6:1d:d0:4c:
e1:0a:d3:33:7f:1e:e7:76:fd:50:f4:fb:f4:e8:71:93:e5:f4:
86:2f:07:d8:78:3d:0c:89:33:67:09:35:08:05:bb:f1:bd:7b:
6e:02:27:eb:6e:4c:64:b6:9f:70:cf:8a:12:79:0f:2f:cd:2b:
76:5e:ad:23:f0:63:51:8b:8d:a2:66:c5:1f:4a:a3:c1:9e:4e:
49:0b:17:8a:ca:ac:f8:40:39:6f:3e:ce:e3:7d:17:10:5a:c1:
f2:90:d4:fe:9b:21:26:48:4a:1e:4b:15:2f:ad:84:f8:43:48:
c2:2d:be:fe:b4:6f:97:fd:2e:28:f4:db:db:f9:e3:d7:71:6d:
30:d8:21:4e:6e:5a:87:09:5a:c0:b6:03:5c:77:b6:cc:16:50:
7c:5b:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:11:15 2026 by rpki-client