Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: KR842sagSLoD35G3NGZ/UqBx+m6ZfmvX1UcCRaUUGds=
Subject key identifier: 45:94:5F:D3:46:52:3B:41:D0:BF:C4:A3:CB:31:AB:C5:9B:40:D1:A3
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 019CAAC6B35E27FFD7ED54103FCFD830FEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 1079
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: /pWVBqysdDYgCwijKwQJaXugZpO/gDhQi7IG5R8mVq8=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b3:5e:27:ff:d7:ed:54:10:3f:cf:d8:30:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=45945fd346523b41d0bfc4a3cb31abc59b40d1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:a0:e4:18:97:9f:b3:9d:43:bb:43:89:fc:
3e:4c:a2:63:0c:88:04:2c:c2:02:06:9e:c2:e7:51:
e9:1a:64:00:be:30:c0:b3:10:67:79:eb:42:a0:c2:
47:11:51:dd:7f:db:bb:2e:f6:11:ba:15:5d:f5:d3:
a6:8a:ae:0d:1a:c5:8f:85:d4:ff:c7:fb:ac:cc:3b:
9b:37:ed:64:c8:8d:01:7f:c0:8c:bc:5b:5d:5f:75:
56:8d:fe:be:be:66:e1:39:ec:4a:da:87:eb:35:66:
c2:f1:09:1b:06:43:12:f4:01:ea:13:e2:d8:bd:5d:
27:94:74:cb:11:f3:9f:1d:d0:1d:38:4d:92:17:a6:
a6:90:eb:c9:bb:fc:d5:41:89:55:22:45:f1:ed:70:
c4:98:38:78:6d:88:0d:a5:ea:94:34:44:08:56:46:
f0:34:12:c3:df:9b:13:f3:e5:23:7e:10:4d:b4:e4:
93:14:2a:e3:1c:44:2e:94:09:7c:12:62:f7:36:14:
b1:24:2c:7d:a9:73:e2:7d:da:16:ac:4d:65:07:18:
ee:90:fa:e3:a8:79:f5:8f:3c:41:60:96:af:d7:00:
e9:5d:fa:68:36:e4:59:18:f1:a7:44:39:1b:29:9c:
18:3d:36:a8:21:75:a9:62:27:3f:d6:0a:33:b8:d5:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:5F:D3:46:52:3B:41:D0:BF:C4:A3:CB:31:AB:C5:9B:40:D1:A3
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:5a:d5:40:b1:f7:f4:8d:ed:06:2b:7a:b8:52:f9:54:61:
fd:bc:38:09:c9:a9:b4:36:2c:56:42:f6:98:6c:dd:f2:45:ea:
a8:35:29:0f:09:5e:57:f2:43:c6:3b:ba:cd:63:9a:60:68:a8:
05:16:68:aa:73:5b:67:b2:3f:8d:19:5c:0b:7b:35:47:c9:2c:
8c:ff:76:62:e8:19:66:df:3e:f5:97:a8:00:75:59:7d:ad:9d:
3c:41:4a:99:72:4f:1c:a5:0d:80:14:d4:50:36:0e:97:42:af:
12:c1:95:e6:38:30:91:c2:a4:7e:bf:11:45:72:96:13:7e:f5:
a6:f6:86:78:d6:f3:b0:f4:2d:02:04:c0:2d:5b:cd:c9:c6:3f:
aa:56:70:a6:88:25:52:4e:59:72:9c:1b:7e:6c:9d:c5:14:51:
8c:67:e0:d0:f2:bd:e3:2a:3c:7c:61:ce:b8:5b:48:a2:71:d7:
36:59:09:24:ab:a0:6d:77:3c:94:e5:2f:80:63:a0:44:a2:c1:
31:4f:b5:6c:c5:a2:b6:4e:b0:bf:47:da:22:47:f9:a6:ea:4b:
dd:11:02:25:9c:41:4c:91:fb:9e:84:1e:95:f8:50:ae:e4:09:
2e:34:63:6c:24:16:2a:3d:f3:64:c1:f2:7b:90:8f:60:fe:ec:
dd:74:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:23 2026 by rpki-client