Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
File: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft (raw, json)
Hash identifier: WahgguIlwRL8x2zyYbmpnCR/FiAWYjfK5v69yOM0VwQ=
Subject key identifier: 3B:A0:79:7A:C5:0F:27:79:FE:0D:32:CE:1E:EB:D2:C7:DF:FB:B2:18
Authority key identifier: 0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
Certificate issuer: /CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Certificate serial: 01A0412A96BE5E79F51E45146010B5057D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:45 +0000
Manifest this update: Thu 27 Aug 2026 03:01:45 +0000
Manifest next update: Fri 28 Aug 2026 03:01:45 +0000
Files and hashes: 1: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl (hash: hDoqHbJUNVDXuqcfCP485VeInaSSAAZoTRfrJhiELIs=)
2: IS7zGgbJXljERfpWTnnom3RCsVg.roa (hash: lR9rh62+xIuO8wjTJ6H1nGDdaEjEGDHxtoAqEHXjahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:96:be:5e:79:f5:1e:45:14:60:10:b5:05:7d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Validity
Not Before: Aug 27 03:01:45 2026 GMT
Not After : Aug 28 03:01:45 2026 GMT
Subject: CN=3ba0797ac50f2779fe0d32ce1eebd2c7dffbb218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:bd:4e:f7:9e:f7:41:1e:98:bf:35:e2:bf:
d6:9a:56:db:96:31:f8:05:c3:f5:35:78:16:48:f3:
60:51:af:84:44:8f:9f:67:38:14:ed:0b:14:90:a6:
59:e9:27:6b:2a:94:a3:6a:12:ac:ce:e2:c2:b4:15:
31:be:2b:30:18:cb:42:c0:b0:77:64:78:8d:b7:95:
32:a9:12:9d:a9:b6:3f:2d:e3:5c:68:b8:34:3b:5b:
7e:f0:f8:3b:47:0a:59:07:62:17:d4:26:e3:0e:39:
3e:4f:f1:51:94:f0:c8:12:23:19:52:8c:d1:d1:3e:
72:86:a4:b2:a2:b3:b4:47:d1:49:37:b9:f9:b9:27:
a5:d7:e9:dc:29:97:10:8f:7d:d2:50:d8:02:99:b1:
75:ba:71:28:bd:1c:06:d9:9d:48:99:b9:05:39:40:
e7:24:fa:7b:d0:44:65:d2:72:eb:df:3f:dc:d0:13:
f6:8f:a3:8d:f4:45:e3:73:f5:e0:66:fa:7c:35:7b:
7c:48:38:77:a8:1c:40:75:e5:dd:87:8e:32:4a:69:
45:31:49:b1:d3:bd:96:dc:32:00:9b:eb:43:85:56:
b1:e2:3b:26:7b:bf:08:76:fa:ab:32:91:0d:45:19:
21:e6:05:d2:b2:3b:6b:3b:97:db:08:eb:26:18:dd:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:79:7A:C5:0F:27:79:FE:0D:32:CE:1E:EB:D2:C7:DF:FB:B2:18
X509v3 Authority Key Identifier:
keyid:0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:9a:aa:7a:d2:77:b2:e2:71:b9:a5:2f:55:b9:ea:da:b7:
b5:d4:6e:9e:de:19:08:5a:02:cd:de:1e:f5:fe:c1:9b:2a:23:
31:d8:95:5d:b0:c4:07:fa:cb:c9:1b:70:71:ac:ce:9a:16:cd:
ee:46:f1:df:ff:d2:f5:e6:17:6b:2f:5e:49:9a:ca:57:c3:0a:
d1:08:6b:d5:e0:19:4d:f1:cd:fc:d0:7e:84:1a:1e:b4:df:69:
94:e9:24:0d:6a:1b:66:30:92:ef:86:9b:02:f5:0d:a5:87:fe:
b9:48:fe:0f:4f:9c:1d:ad:60:f7:b6:ca:fe:1c:de:93:94:d8:
fc:56:00:5d:f4:65:21:08:0a:de:01:a1:01:e9:69:dc:1c:ba:
c7:0d:30:66:01:11:c2:d5:b0:b5:00:d1:5b:79:f2:d7:69:25:
4c:c4:bf:e2:73:bf:ed:7c:8f:d0:4f:1e:5d:f8:ce:3f:70:87:
25:d7:da:0f:4e:f0:da:8b:c3:87:79:f5:36:69:64:87:32:45:
38:e3:bd:0e:f5:f6:8a:d9:53:3f:53:c6:18:57:eb:61:89:bc:
3f:d9:4a:ac:7f:2d:ba:7c:3c:73:77:69:cd:0c:90:6c:95:4d:
2e:30:94:69:52:11:0f:37:c1:ef:e5:16:85:72:79:b8:54:78:
aa:a5:d0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKpa+Xnn1HkUUYBC1BX2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYThlNzRjNzIxOWQyNWZhZmM2MmI4Y2E1MzYxYjA3ODFj
ZjFjOTQwHhcNMjYwODI3MDMwMTQ1WhcNMjYwODI4MDMwMTQ1WjAzMTEwLwYDVQQD
EygzYmEwNzk3YWM1MGYyNzc5ZmUwZDMyY2UxZWViZDJjN2RmZmJiMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt569Tvee90EemL814r/WmlbbljH4
BcP1NXgWSPNgUa+ERI+fZzgU7QsUkKZZ6SdrKpSjahKszuLCtBUxviswGMtCwLB3
ZHiNt5UyqRKdqbY/LeNcaLg0O1t+8Pg7RwpZB2IX1CbjDjk+T/FRlPDIEiMZUozR
0T5yhqSyorO0R9FJN7n5uSel1+ncKZcQj33SUNgCmbF1unEovRwG2Z1ImbkFOUDn
JPp70ERl0nLr3z/c0BP2j6ON9EXjc/XgZvp8NXt8SDh3qBxAdeXdh44ySmlFMUmx
072W3DIAm+tDhVax4jsme78IdvqrMpENRRkh5gXSsjtrO5fbCOsmGN0ezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDugeXrFDyd5/g0yzh7r0sff+7IYMB8GA1UdIwQY
MBaAFA2o50xyGdJfr8YrjKU2GweBzxyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt
MDE1Zjc2NjRiOWQ3LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3
LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqyaqnrS
d7LicbmlL1W56tq3tdRunt4ZCFoCzd4e9f7BmyojMdiVXbDEB/rLyRtwcazOmhbN
7kbx3//S9eYXay9eSZrKV8MK0Qhr1eAZTfHN/NB+hBoetN9plOkkDWobZjCS74ab
AvUNpYf+uUj+D0+cHa1g97bK/hzek5TY/FYAXfRlIQgK3gGhAelp3By6xw0wZgER
wtWwtQDRW3ny12klTMS/4nO/7XyP0E8eXfjOP3CHJdfaD07w2ovDh3n1NmlkhzJF
OOO9DvX2itlTP1PGGFfrYYm8P9lKrH8tunw8c3dpzQyQbJVNLjCUaVIRDzfB7+UW
hXJ5uFR4qqXQIQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:44:26 2026 by rpki-client