Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: bte7ZewtYWNtrkljg69Wu6HLA6OHv00vBzIWiYpoHCA=
Subject key identifier: 93:C1:38:32:38:D8:23:68:05:C4:B6:4E:4F:A0:4C:97:8F:32:0A:CF
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 019D31F4C55A5A4522803EC185CA396369CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 10BF
Signing time: Sat 28 Mar 2026 01:00:17 +0000
Manifest this update: Sat 28 Mar 2026 01:00:17 +0000
Manifest next update: Sun 29 Mar 2026 01:00:17 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: PkSQ5En3PUSQE2OUnVAEHc8qeUYS3nEb8Trgpfym8Mo=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:c5:5a:5a:45:22:80:3e:c1:85:ca:39:63:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Mar 28 01:00:17 2026 GMT
Not After : Mar 29 01:00:17 2026 GMT
Subject: CN=93c1383238d8236805c4b64e4fa04c978f320acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:0a:e3:cf:d2:7a:43:39:ba:bd:68:ba:c4:
18:06:82:cc:e4:35:67:a5:79:f8:f7:c3:fd:b7:bd:
14:2f:96:72:bd:2d:a2:de:be:39:fc:cc:4d:ff:69:
9e:84:8c:c7:e3:4b:df:4f:fb:88:cc:d4:1d:6e:a9:
a3:68:5e:bc:37:5f:09:6a:80:90:aa:91:78:4f:f5:
4c:c2:41:27:be:e9:53:b4:1c:34:da:f2:6e:1e:34:
fc:ad:9b:b6:8f:81:8c:b6:36:9d:85:e2:44:23:e8:
a9:1b:1f:ca:34:9d:70:bc:f4:88:4d:ff:2e:bd:2d:
03:d2:aa:e2:e9:10:61:a7:41:83:57:35:4e:4a:de:
c2:9b:96:6a:7a:79:f1:5a:3f:4a:f6:19:df:a7:18:
8e:09:ca:df:79:f9:45:57:89:cd:7b:0a:08:d8:f0:
59:59:32:32:66:8d:6a:7c:e3:88:a6:73:8a:af:17:
4b:6b:ce:cd:00:d0:92:86:ff:e9:30:fa:80:96:cf:
55:3d:38:bb:95:6a:a0:c4:9a:cd:92:0c:e0:3e:43:
99:57:2f:56:a5:26:f6:6a:ce:23:cf:0f:8a:a4:11:
93:20:87:fd:55:4b:29:09:78:28:4e:1d:08:9e:d1:
a4:99:a3:8c:75:11:3c:1d:6c:68:02:51:6c:99:ac:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:38:32:38:D8:23:68:05:C4:B6:4E:4F:A0:4C:97:8F:32:0A:CF
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:0d:97:ac:15:32:61:bf:63:a8:ad:55:28:36:00:68:2c:
41:92:f3:1c:9b:a7:75:24:3c:0c:ec:f9:98:db:52:e3:9b:7b:
4e:80:e8:68:32:e1:3b:b0:ae:6a:47:33:7d:fc:63:e6:a5:cc:
22:dd:76:61:0a:26:fc:68:8c:d9:55:69:19:d1:e9:fc:10:64:
ea:4b:56:c1:bc:0d:cf:b0:e5:8b:3b:5c:93:d8:a1:ad:6b:40:
e9:46:5b:9a:d9:61:b1:ca:98:9a:5f:e4:69:dc:93:62:46:e6:
9a:51:d2:53:7c:db:c0:51:60:33:3b:f6:35:47:09:9f:e8:04:
97:06:f3:6c:d8:72:01:12:dd:6d:1b:2b:d0:83:91:51:48:d3:
43:f7:bc:d0:14:cf:14:b9:cb:16:b6:74:64:67:c4:ce:b0:a9:
72:2e:48:85:b6:95:2f:ff:5e:35:47:de:48:a7:e7:87:8e:84:
58:b0:7d:3e:4a:fd:68:2b:ef:b9:dd:04:61:36:70:a0:94:30:
d4:e8:80:f1:7d:5a:3d:75:cc:34:af:f1:97:f1:14:c0:90:fd:
4d:9d:07:b4:98:41:61:25:0f:cb:23:b2:a8:c0:2d:fb:58:b4:
3f:90:58:2d:5f:e5:74:50:3b:1e:d1:09:28:23:d3:cc:26:36:
19:12:db:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9MVaWkUigD7Bhco5Y2nLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx
NTVkODkwHhcNMjYwMzI4MDEwMDE3WhcNMjYwMzI5MDEwMDE3WjAzMTEwLwYDVQQD
Eyg5M2MxMzgzMjM4ZDgyMzY4MDVjNGI2NGU0ZmEwNGM5NzhmMzIwYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhMK48/SekM5ur1ousQYBoLM5DVn
pXn498P9t70UL5ZyvS2i3r45/MxN/2mehIzH40vfT/uIzNQdbqmjaF68N18JaoCQ
qpF4T/VMwkEnvulTtBw02vJuHjT8rZu2j4GMtjadheJEI+ipGx/KNJ1wvPSITf8u
vS0D0qri6RBhp0GDVzVOSt7Cm5ZqennxWj9K9hnfpxiOCcrfeflFV4nNewoI2PBZ
WTIyZo1qfOOIpnOKrxdLa87NANCShv/pMPqAls9VPTi7lWqgxJrNkgzgPkOZVy9W
pSb2as4jzw+KpBGTIIf9VUspCXgoTh0IntGkmaOMdRE8HWxoAlFsmazIoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPBODI42CNoBcS2Tk+gTJePMgrPMB8GA1UdIwQY
MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt
YTViYzBjNzBjNTEzLzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz
LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUsNl6wV
MmG/Y6itVSg2AGgsQZLzHJundSQ8DOz5mNtS45t7ToDoaDLhO7Cuakczffxj5qXM
It12YQom/GiM2VVpGdHp/BBk6ktWwbwNz7Dliztck9ihrWtA6UZbmtlhscqYml/k
adyTYkbmmlHSU3zbwFFgMzv2NUcJn+gElwbzbNhyARLdbRsr0IORUUjTQ/e80BTP
FLnLFrZ0ZGfEzrCpci5IhbaVL/9eNUfeSKfnh46EWLB9Pkr9aCvvud0EYTZwoJQw
1OiA8X1aPXXMNK/xl/EUwJD9TZ0HtJhBYSUPyyOyqMAt+1i0P5BYLV/ldFA7HtEJ
KCPTzCY2GRLbUg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:24:00 2026 by rpki-client