Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
File: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft (raw, json)
Hash identifier: jGzPSjj/epWo5ITjnhYrT3rUtdRn+uSRYH0WOuMSyrw=
Subject key identifier: 48:6C:46:15:41:B4:CB:70:3E:14:41:AB:91:4E:1F:2E:8D:B1:52:F2
Authority key identifier: 0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
Certificate issuer: /CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Certificate serial: 01A0CE2345F91A9CA6C16E630C6C4BC0F9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:13 +0000
Manifest this update: Wed 23 Sep 2026 12:00:13 +0000
Manifest next update: Thu 24 Sep 2026 12:00:13 +0000
Files and hashes: 1: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl (hash: tHYOkQr5tfdPZJtPMRJyn+q8JBUT1+aSrxpbQh6mU3c=)
2: IS7zGgbJXljERfpWTnnom3RCsVg.roa (hash: lR9rh62+xIuO8wjTJ6H1nGDdaEjEGDHxtoAqEHXjahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:45:f9:1a:9c:a6:c1:6e:63:0c:6c:4b:c0:f9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Validity
Not Before: Sep 23 12:00:13 2026 GMT
Not After : Sep 24 12:00:13 2026 GMT
Subject: CN=486c461541b4cb703e1441ab914e1f2e8db152f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:cc:cc:c2:7c:bf:a5:24:d1:2d:1f:fe:1a:
3c:83:e7:11:a3:a7:f0:94:ab:54:4e:34:4e:fa:02:
9b:e5:52:af:cb:16:a9:ef:20:11:e1:8b:2b:6f:78:
b5:92:be:a6:bc:2b:9f:de:a3:59:69:7f:41:6d:7b:
9a:eb:6e:a7:45:a3:d0:2d:38:c5:93:f0:3e:3e:f3:
d9:36:cc:87:18:90:db:8b:a3:b7:0d:ca:32:b9:b4:
87:58:48:09:b2:2e:9d:36:1d:b7:c3:73:0f:8e:33:
cb:ae:94:6a:b7:76:87:b8:89:07:5f:36:02:43:53:
91:3a:68:a5:8c:68:8f:6e:75:b9:5a:66:69:ae:22:
7f:ae:ad:67:e3:06:53:f6:0a:22:d7:3b:0e:71:83:
26:15:ca:58:b6:57:6b:13:e1:d5:a2:3d:30:3b:eb:
a5:e5:2c:36:d0:0b:63:a8:1b:59:08:b7:37:24:91:
51:9c:9c:01:7b:38:7c:29:8b:9a:32:10:11:13:41:
bb:a9:25:b2:c4:ae:c7:72:aa:d8:fa:d0:76:51:cb:
ef:8a:19:b9:80:7c:61:ea:ba:34:0b:67:57:bc:2d:
4a:3f:8c:01:38:a1:91:23:f1:94:8f:d6:88:53:20:
7b:af:e5:a2:c3:db:15:06:d7:e9:cb:6a:72:25:c3:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6C:46:15:41:B4:CB:70:3E:14:41:AB:91:4E:1F:2E:8D:B1:52:F2
X509v3 Authority Key Identifier:
keyid:0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:a1:82:c8:8b:5a:2a:bc:f1:0e:5d:c3:39:ea:6b:f1:67:
d1:97:f8:ec:a8:20:c4:b2:16:46:e0:7e:65:73:35:92:2b:15:
ac:9e:0e:c9:61:b4:71:52:27:9e:73:35:a8:10:68:63:d7:07:
0b:7e:03:50:7d:60:86:64:59:eb:ff:18:dc:d3:5c:ca:d8:e5:
b5:bc:f9:43:c6:9c:00:33:a2:a1:0f:d0:2c:bc:c3:2a:27:31:
d9:91:2f:9d:ce:7d:3a:25:a5:0b:04:54:69:aa:00:a3:fe:bd:
36:86:4f:8d:95:d6:ee:14:d9:b7:ae:a7:3d:be:a0:b9:af:7d:
ff:0d:19:96:60:e4:24:6e:2b:23:10:78:42:c2:ee:f5:02:9e:
42:05:47:37:07:be:c1:66:a0:d8:40:1f:b4:d3:23:62:0c:da:
ee:17:ba:da:bc:4c:f3:c1:8d:40:cd:60:e3:49:a1:fd:fd:6e:
2f:58:62:c8:33:b5:39:32:29:e7:b7:9e:b3:45:fa:15:e5:bf:
99:46:0e:ee:db:59:b4:43:b8:44:d1:c1:65:32:f9:c5:3c:2c:
da:c2:6c:d6:15:4f:79:31:0b:22:a4:b4:14:96:b6:55:75:22:
45:42:94:86:e1:2a:ed:7c:a3:ec:55:08:77:31:92:ce:ec:83:
fd:b6:43:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI0X5GpymwW5jDGxLwPnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYThlNzRjNzIxOWQyNWZhZmM2MmI4Y2E1MzYxYjA3ODFj
ZjFjOTQwHhcNMjYwOTIzMTIwMDEzWhcNMjYwOTI0MTIwMDEzWjAzMTEwLwYDVQQD
Eyg0ODZjNDYxNTQxYjRjYjcwM2UxNDQxYWI5MTRlMWYyZThkYjE1MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLMzMJ8v6Uk0S0f/ho8g+cRo6fw
lKtUTjRO+gKb5VKvyxap7yAR4Ysrb3i1kr6mvCuf3qNZaX9BbXua626nRaPQLTjF
k/A+PvPZNsyHGJDbi6O3DcoyubSHWEgJsi6dNh23w3MPjjPLrpRqt3aHuIkHXzYC
Q1OROmiljGiPbnW5WmZpriJ/rq1n4wZT9goi1zsOcYMmFcpYtldrE+HVoj0wO+ul
5Sw20AtjqBtZCLc3JJFRnJwBezh8KYuaMhARE0G7qSWyxK7HcqrY+tB2Ucvvihm5
gHxh6ro0C2dXvC1KP4wBOKGRI/GUj9aIUyB7r+Wiw9sVBtfpy2pyJcPNIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhsRhVBtMtwPhRBq5FOHy6NsVLyMB8GA1UdIwQY
MBaAFA2o50xyGdJfr8YrjKU2GweBzxyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt
MDE1Zjc2NjRiOWQ3LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3
LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkChgsiL
Wiq88Q5dwznqa/Fn0Zf47KggxLIWRuB+ZXM1kisVrJ4OyWG0cVInnnM1qBBoY9cH
C34DUH1ghmRZ6/8Y3NNcytjltbz5Q8acADOioQ/QLLzDKicx2ZEvnc59OiWlCwRU
aaoAo/69NoZPjZXW7hTZt66nPb6gua99/w0ZlmDkJG4rIxB4QsLu9QKeQgVHNwe+
wWag2EAftNMjYgza7he62rxM88GNQM1g40mh/f1uL1hiyDO1OTIp57ees0X6FeW/
mUYO7ttZtEO4RNHBZTL5xTws2sJs1hVPeTELIqS0FJa2VXUiRUKUhuEq7Xyj7FUI
dzGSzuyD/bZDPA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:56 2026 by rpki-client