Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: 17T0SsLpY1HTqavDP0Fu89IKSSkeY3HEgVv/oE1b4p8=
Subject key identifier: B5:0F:70:E4:3F:91:07:D5:64:E7:8B:2E:66:C6:27:81:75:A5:17:FC
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01A1DB6FA1E110DC3D2C581B73628F35CAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 1329
Signing time: Sat 14 Nov 2026 19:01:28 +0000
Manifest this update: Sat 14 Nov 2026 19:01:28 +0000
Manifest next update: Sun 15 Nov 2026 19:01:28 +0000
Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: 9rVS11rAHI2RWbe4fY2FnesaWjF3G5WYpAPUzfDPvBY=)
2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:a1:e1:10:dc:3d:2c:58:1b:73:62:8f:35:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Nov 14 19:01:28 2026 GMT
Not After : Nov 15 19:01:28 2026 GMT
Subject: CN=b50f70e43f9107d564e78b2e66c6278175a517fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:70:08:70:d5:8d:b7:a0:21:f4:2f:1b:99:
3f:0c:8d:2a:d8:28:2f:35:8c:da:6c:9c:69:64:68:
67:f5:01:9b:7c:51:ec:a4:af:92:1f:64:fd:ad:4a:
bf:72:9d:ae:94:4e:f8:6b:41:69:a2:7e:e6:d9:67:
49:c9:b4:08:96:4d:40:29:46:b3:d5:5c:cd:20:05:
28:30:c9:57:85:23:c4:d4:16:28:c1:da:f9:e1:aa:
5d:81:db:39:bc:cc:bc:68:1b:47:67:ce:20:c1:4c:
9a:90:dc:70:6a:49:36:61:b4:67:ef:ab:a0:d7:64:
e4:fb:37:85:3b:8e:06:bc:83:76:2f:24:90:2a:49:
80:96:bc:f0:89:5a:cc:cb:53:e0:46:c6:a6:52:e9:
02:f6:f4:e7:b0:c8:4f:8c:9e:e6:67:db:11:1f:8e:
1a:0f:87:1b:e4:80:77:93:ad:55:fd:00:c0:73:2c:
f8:e7:e7:71:97:55:21:53:e9:c7:3e:2d:7f:1b:8b:
06:8b:d5:92:92:59:58:a7:e6:b9:32:98:1d:0c:52:
ac:78:77:e7:3a:c3:5c:3d:78:f2:e0:4e:88:73:96:
cc:9f:cb:ee:bd:38:a5:d7:41:13:8d:4d:fa:bb:cc:
9a:3d:5e:4c:a5:b7:c5:d4:b8:38:34:25:a7:d4:4e:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:70:E4:3F:91:07:D5:64:E7:8B:2E:66:C6:27:81:75:A5:17:FC
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:46:be:cb:14:cf:4e:b1:48:c5:20:56:87:92:77:64:17:67:
47:8d:0d:12:99:d7:6e:8c:f1:af:59:4a:94:84:54:05:ec:01:
b5:92:5d:0f:b9:8b:67:83:28:19:82:9f:7e:49:af:a1:39:16:
f9:de:e6:52:4b:5a:36:4a:88:12:49:3f:ed:93:eb:eb:36:18:
6a:7e:0b:7a:ed:2c:7c:b8:a2:4c:67:71:6e:a0:1b:2d:c9:61:
9e:b5:4a:dc:da:be:0d:f5:36:38:91:6b:c2:15:95:4f:53:d2:
be:23:03:66:6e:65:3f:18:74:bb:94:66:b3:76:5d:24:57:e6:
ce:3b:94:fd:a1:02:82:3e:6e:89:7c:d4:59:a4:50:4d:13:93:
d8:ff:2d:1a:b4:91:6a:e7:56:42:86:ef:3f:35:f6:6b:6d:78:
41:c9:39:5a:bd:6f:92:a7:bf:13:fc:3b:ba:83:24:66:07:20:
4a:02:9e:fe:7b:80:b7:9e:e7:11:bc:81:08:43:78:17:92:c4:
c1:e4:dc:d2:3e:62:5a:e4:bb:05:13:b7:45:38:da:c5:19:ca:
1c:22:ac:08:bc:a1:45:38:d9:21:83:9b:3e:e4:97:94:99:b9:
9e:66:9b:6b:8e:94:40:17:42:93:bf:b3:3c:85:5f:b7:15:c2:
b5:1a:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:53:04 2026 by rpki-client