Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
File: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft (raw, json)
Hash identifier: jVkP12CE7kNRypdfXBn3Eqb4MWN0j+SUw1/2WDFC3PI=
Subject key identifier: 2D:8A:27:CF:18:CE:32:3F:6C:0E:09:AB:EC:E0:A2:C2:D4:71:9F:78
Authority key identifier: 0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
Certificate issuer: /CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Certificate serial: 019F916D5568F1A44782A0A7001970BDB4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:29 +0000
Manifest this update: Fri 24 Jul 2026 00:01:29 +0000
Manifest next update: Sat 25 Jul 2026 00:01:29 +0000
Files and hashes: 1: DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl (hash: 3orGMrfQK705HM4/H1q0SgjOVYA1hTtb62PvaEplLJM=)
2: IS7zGgbJXljERfpWTnnom3RCsVg.roa (hash: lR9rh62+xIuO8wjTJ6H1nGDdaEjEGDHxtoAqEHXjahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:55:68:f1:a4:47:82:a0:a7:00:19:70:bd:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da8e74c7219d25fafc62b8ca5361b0781cf1c94
Validity
Not Before: Jul 24 00:01:29 2026 GMT
Not After : Jul 25 00:01:29 2026 GMT
Subject: CN=2d8a27cf18ce323f6c0e09abece0a2c2d4719f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:0a:2e:e1:aa:22:dd:97:f7:ae:f8:e8:c7:
03:b4:d4:19:11:5b:e4:a1:ad:db:bd:ce:88:95:2d:
59:51:90:b8:d3:70:a6:27:33:fa:23:66:df:7a:85:
37:e8:cd:36:b0:6e:06:b8:f1:aa:ca:3f:3e:3c:51:
ed:46:b9:ba:09:b9:8b:19:59:56:20:c8:eb:60:88:
25:e4:cb:30:94:21:e2:75:60:91:df:5e:6d:c6:73:
cc:85:13:54:74:a3:fb:de:fd:b4:1b:a2:53:a7:4c:
bb:01:1e:67:34:d2:e8:5d:7d:65:8f:4b:fc:7e:30:
55:10:fe:f1:d0:02:3a:97:41:72:dd:f0:22:05:22:
8a:25:2b:56:06:3e:af:8e:d1:ba:f7:41:9c:a6:ff:
3d:53:0d:56:b4:aa:68:0e:3f:d0:71:ec:40:a5:93:
6b:57:b1:a6:f7:74:d7:95:d4:a8:df:e6:57:8a:7a:
eb:9b:f0:a3:c6:a5:98:15:60:55:67:e7:9d:6b:e6:
a9:06:87:2a:17:7d:a4:1f:c0:9b:8f:0f:ab:8a:df:
91:9c:cf:7e:ce:ec:11:c6:1f:16:2b:32:e9:11:3e:
93:6c:bc:31:04:c1:fe:81:70:dc:2d:9c:63:6c:3e:
08:39:f9:c7:9a:ca:1d:2b:97:96:71:5b:45:c3:e9:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:27:CF:18:CE:32:3F:6C:0E:09:AB:EC:E0:A2:C2:D4:71:9F:78
X509v3 Authority Key Identifier:
keyid:0D:A8:E7:4C:72:19:D2:5F:AF:C6:2B:8C:A5:36:1B:07:81:CF:1C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/DajnTHIZ0l-vxiuMpTYbB4HPHJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3d:48:fb:4e:c7:c0:6b:28:bc:56:c9:6b:03:92:4a:cb:bb:
5c:85:e8:48:dd:73:3f:85:77:a8:11:6e:b0:b8:19:be:99:c5:
3a:6a:7d:99:c0:f7:eb:2d:67:bb:4f:44:ec:60:1a:6a:19:c7:
a7:a1:b9:58:12:90:06:d8:84:ab:fe:92:11:c9:68:30:a6:8c:
6c:ba:11:e1:8d:d0:62:67:ce:f8:45:be:e2:8c:f1:0a:bd:98:
78:18:93:74:56:1e:7a:c3:aa:0f:bc:04:5c:19:f1:ce:4d:ac:
20:a6:7e:f9:94:03:4d:1d:d9:ea:55:f4:b9:d7:c3:4c:ea:5f:
01:33:58:bd:86:b4:f4:04:ce:72:ef:cb:f6:0d:5f:fe:12:aa:
44:20:d0:06:59:00:35:e2:38:f7:c6:21:27:00:ad:56:1d:97:
0b:1c:e6:21:b0:51:a1:b9:e2:ef:67:7c:f1:f4:e2:d1:b5:33:
1e:67:a9:b3:54:45:18:64:6d:c8:c0:6c:b5:5b:e3:97:7e:03:
97:e6:f4:9e:2a:45:f2:08:7f:8c:20:58:99:c9:9b:b6:01:4e:
c0:29:0c:a9:66:03:e1:c0:92:57:79:c6:bc:43:ef:1e:09:4b:
7b:b8:e6:49:6c:1d:de:01:97:f9:e5:6c:c2:08:52:10:ea:79:
a7:f2:8e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbVVo8aRHgqCnABlwvbTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYThlNzRjNzIxOWQyNWZhZmM2MmI4Y2E1MzYxYjA3ODFj
ZjFjOTQwHhcNMjYwNzI0MDAwMTI5WhcNMjYwNzI1MDAwMTI5WjAzMTEwLwYDVQQD
EygyZDhhMjdjZjE4Y2UzMjNmNmMwZTA5YWJlY2UwYTJjMmQ0NzE5Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFsKLuGqIt2X96746McDtNQZEVvk
oa3bvc6IlS1ZUZC403CmJzP6I2bfeoU36M02sG4GuPGqyj8+PFHtRrm6CbmLGVlW
IMjrYIgl5MswlCHidWCR315txnPMhRNUdKP73v20G6JTp0y7AR5nNNLoXX1lj0v8
fjBVEP7x0AI6l0Fy3fAiBSKKJStWBj6vjtG690Gcpv89Uw1WtKpoDj/QcexApZNr
V7Gm93TXldSo3+ZXinrrm/CjxqWYFWBVZ+eda+apBocqF32kH8Cbjw+rit+RnM9+
zuwRxh8WKzLpET6TbLwxBMH+gXDcLZxjbD4IOfnHmsodK5eWcVtFw+l1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2KJ88YzjI/bA4Jq+zgosLUcZ94MB8GA1UdIwQY
MBaAFA2o50xyGdJfr8YrjKU2GweBzxyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt
MDE1Zjc2NjRiOWQ3LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3
LzEvRGFqblRISVowbC12eGl1TXBUWWJCNEhQSEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT1I+07H
wGsovFbJawOSSsu7XIXoSN1zP4V3qBFusLgZvpnFOmp9mcD36y1nu09E7GAaahnH
p6G5WBKQBtiEq/6SEcloMKaMbLoR4Y3QYmfO+EW+4ozxCr2YeBiTdFYeesOqD7wE
XBnxzk2sIKZ++ZQDTR3Z6lX0udfDTOpfATNYvYa09ATOcu/L9g1f/hKqRCDQBlkA
NeI498YhJwCtVh2XCxzmIbBRobni72d88fTi0bUzHmeps1RFGGRtyMBstVvjl34D
l+b0nipF8gh/jCBYmcmbtgFOwCkMqWYD4cCSV3nGvEPvHglLe7jmSWwd3gGX+eVs
wghSEOp5p/KO+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:35 2026 by rpki-client