Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: XEZVp97gcNvWRC+MQKcFM1GHD6y3auqHKgVxUNiwJo4=
Subject key identifier: 6E:1C:DC:4F:81:82:4D:5E:0D:FF:AA:EC:63:A5:24:0E:93:28:CB:D9
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01A0C557B2234308391605C7111702E341C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 1299
Signing time: Mon 21 Sep 2026 19:00:53 +0000
Manifest this update: Mon 21 Sep 2026 19:00:53 +0000
Manifest next update: Tue 22 Sep 2026 19:00:53 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: KtEE2QcOJBagovYzhTyDnTePWZc7+YK3mKJnqfmRJc8=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:b2:23:43:08:39:16:05:c7:11:17:02:e3:41:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Sep 21 19:00:53 2026 GMT
Not After : Sep 22 19:00:53 2026 GMT
Subject: CN=6e1cdc4f81824d5e0dffaaec63a5240e9328cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:26:60:d8:f1:20:54:18:d4:67:1d:cb:49:
6f:b1:cb:78:4b:4a:20:c3:84:8b:41:c4:4b:d0:8b:
c7:16:b9:db:3a:eb:54:9b:d1:c7:7e:cb:68:05:15:
b7:ac:d4:50:e7:f5:ce:29:4f:e0:c1:35:b9:d1:d5:
53:53:73:64:63:b1:f8:47:a9:26:7b:75:cc:2f:44:
a9:02:ec:6e:86:02:5e:5f:c6:47:77:cf:91:83:1c:
fe:df:c5:41:e2:00:35:2a:fb:cf:30:b4:b4:84:72:
25:8d:72:81:cb:43:80:5d:d7:b4:3c:40:c3:27:71:
1d:b3:41:45:7e:d5:64:65:fa:23:f9:17:55:7a:8a:
97:06:06:e5:c5:4b:6b:01:08:7f:6a:8a:1d:4a:5b:
3e:16:3d:7a:6a:3d:9d:ce:29:55:a3:bf:94:3b:1e:
e1:77:2d:57:1f:f2:68:86:77:fd:fc:32:40:5d:cd:
d2:58:ac:1b:d0:a5:04:2e:2a:98:e0:6b:ad:8b:a1:
04:58:39:a3:b8:d9:a3:3e:5a:e5:5c:80:48:9e:bb:
9f:32:e7:eb:d0:d7:2f:11:ee:c1:66:49:6e:1f:72:
5d:9b:1e:19:7e:e9:c9:9e:ab:2b:ab:59:d6:e7:52:
65:32:89:7d:65:82:95:f2:44:a5:a4:fd:67:7f:c9:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1C:DC:4F:81:82:4D:5E:0D:FF:AA:EC:63:A5:24:0E:93:28:CB:D9
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c8:aa:f0:14:f9:8c:fc:4a:36:ce:68:96:4e:7a:bb:9e:86:
01:f5:db:aa:16:d9:10:a4:e0:e2:8b:4f:62:f8:33:2c:2d:d8:
f3:30:fb:03:1a:09:9b:c3:75:e6:43:ba:7d:8a:3f:85:37:74:
8d:26:9d:e7:e4:4e:d6:20:b0:89:c0:39:af:68:41:1b:97:a1:
ab:09:86:6e:9c:9b:2c:3e:54:2a:f9:d3:de:66:52:b4:5d:18:
5b:e1:13:ea:9d:d7:5e:31:a8:5a:dd:05:68:b8:ea:2c:eb:05:
68:5c:f4:f6:47:0f:87:45:8f:b6:f4:89:da:c1:e0:ff:d8:73:
35:54:f6:7d:fa:48:58:9c:63:03:d5:3d:87:31:cd:41:c3:97:
2d:ef:75:7f:d6:d1:35:09:eb:19:08:d6:fe:49:22:8f:8a:b4:
fe:81:34:8b:fa:9d:fe:94:20:86:b8:13:4b:49:3f:d8:79:67:
41:21:57:10:f7:6b:52:3c:66:8a:e8:f8:1e:cf:19:2f:60:77:
a3:aa:c5:7e:14:09:71:07:dc:b6:26:aa:0b:0b:03:77:9c:3f:
eb:88:f1:a9:5d:da:ad:7e:fe:69:b2:4f:6f:be:d0:5a:36:e9:
2e:e2:5f:0f:b7:d4:66:9f:39:ba:df:21:09:64:90:5f:6c:44:
e1:fe:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:53:15 2026 by rpki-client