Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: fvpvcJ4HdoTbOJXeKtgVqRinMcc+AfJtC5Pcdb09Ioc=
Subject key identifier: A8:78:57:E6:A5:F4:99:15:EC:46:35:A5:55:E2:9A:BF:65:E8:98:4C
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 01A0C40D7E62F5D1E79CFC45B08B09DF9F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 1A60
Signing time: Mon 21 Sep 2026 13:00:13 +0000
Manifest this update: Mon 21 Sep 2026 13:00:13 +0000
Manifest next update: Tue 22 Sep 2026 13:00:13 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: 4tR8R9/snBVFT4sdrsA3kcqiMtUgd7dAQX3PfG21rIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:7e:62:f5:d1:e7:9c:fc:45:b0:8b:09:df:9f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Sep 21 13:00:13 2026 GMT
Not After : Sep 22 13:00:13 2026 GMT
Subject: CN=a87857e6a5f49915ec4635a555e29abf65e8984c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:29:fe:94:e1:ea:6b:59:dc:46:4b:3a:c7:
eb:6f:62:17:f3:6d:da:17:59:4f:1d:fa:3c:d1:89:
17:03:a0:df:68:e4:c9:11:ee:24:fb:9e:8e:5d:81:
0a:16:b2:3c:c4:fe:e2:c5:b9:81:3b:c1:58:f3:72:
53:c0:3f:78:98:db:7d:74:a4:d2:88:df:51:41:6c:
8c:22:2a:e9:31:15:4d:8b:4e:d0:47:11:e2:96:40:
5e:4a:c7:29:df:9a:38:3a:f7:e6:df:9d:0e:af:bd:
c7:da:97:b4:bd:76:28:6c:80:6b:91:59:e7:49:7c:
71:c9:86:b0:bd:b2:d1:e8:c0:ff:0e:ba:e3:01:2d:
9f:e8:71:d5:57:02:2f:ef:81:a6:27:26:9e:fc:2f:
28:99:26:ce:c0:d0:c8:49:d9:2b:92:4a:dc:f4:df:
ee:13:cc:00:8b:f0:ae:39:da:9c:f4:60:7e:03:f6:
d8:9b:32:9b:4d:eb:3a:65:0e:7e:11:4d:98:f7:aa:
f0:61:3c:03:d7:66:c9:68:77:d4:55:e9:0a:24:0f:
d0:aa:44:8e:33:27:a9:76:3b:0c:76:97:5b:31:37:
0f:8a:72:5e:f0:38:69:09:92:82:23:ea:3b:39:34:
52:5b:ea:f4:7a:8e:76:6d:b7:90:fc:97:87:da:1b:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:57:E6:A5:F4:99:15:EC:46:35:A5:55:E2:9A:BF:65:E8:98:4C
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:a2:d4:dd:7f:f0:f2:39:ac:6d:b9:79:b2:44:f8:2e:72:
4b:a1:1f:cf:88:ca:8b:0d:a5:bc:ce:65:59:5f:d7:c8:ff:09:
1f:cb:db:4f:43:69:94:66:b2:b8:fc:42:35:e4:97:63:cb:16:
a2:24:d7:8b:ca:75:a1:15:28:66:c0:47:69:ea:02:6e:3b:f8:
70:1c:c6:42:a7:40:d5:a9:06:80:e4:ce:ec:81:10:66:d3:7b:
8a:e6:f4:2f:65:2e:5c:b4:52:61:23:32:c6:8c:c0:c5:a2:2b:
84:e8:b5:49:02:48:b9:d2:9a:e1:21:f6:cd:82:31:bc:4e:f4:
ed:2c:6a:7b:f5:e3:ca:bd:06:94:01:6b:45:b1:e6:3c:a3:63:
ef:87:36:87:76:89:96:e9:e2:03:12:a7:53:ca:b8:29:00:88:
c8:1c:33:85:8b:a5:ba:e7:2a:5e:5d:55:33:25:7b:52:9b:eb:
1e:de:b3:c2:e4:25:e0:7f:6e:2a:50:7d:dd:b9:49:92:1d:f1:
17:56:68:fe:57:59:5f:c8:04:ac:e5:25:44:64:1f:d6:f2:f8:
bb:d3:c6:6d:f3:61:08:1f:27:2f:43:b1:ca:70:09:31:23:24:
6e:03:1b:c7:f3:8c:1d:73:f4:d2:fa:8b:07:19:d6:60:c5:65:
2e:ff:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:38 2026 by rpki-client