Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: TMyIxwmdCFPAnz9ebqj90297KdJh/7bSaIjH2tNdKpc=
Subject key identifier: BA:E5:44:61:D4:3E:0F:92:F0:DB:B6:A7:64:3F:52:D1:D6:0A:BF:51
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019D25156559D73521061C339A984B786426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 069D
Signing time: Wed 25 Mar 2026 13:00:52 +0000
Manifest this update: Wed 25 Mar 2026 13:00:52 +0000
Manifest next update: Thu 26 Mar 2026 13:00:52 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: AGy/wIjENiTveWsbG692qbbu5YZN/25mQFHh5RgBxGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:65:59:d7:35:21:06:1c:33:9a:98:4b:78:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Mar 25 13:00:52 2026 GMT
Not After : Mar 26 13:00:52 2026 GMT
Subject: CN=bae54461d43e0f92f0dbb6a7643f52d1d60abf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:bf:6d:59:fd:b6:39:88:a6:ee:dc:e5:c2:
da:50:12:a7:9c:5d:af:2b:d7:a2:1f:f2:1a:f0:ef:
d2:d6:3d:d6:c4:f1:44:aa:89:53:d1:f1:a9:39:7e:
3b:97:61:a3:6e:2a:20:f6:61:c0:7e:61:52:a7:df:
dd:85:78:26:77:ce:ee:9f:b2:ac:bd:c4:7b:a1:77:
1f:4d:62:12:ce:ca:60:1c:7b:54:3d:e5:fd:fe:f9:
e2:5c:99:45:fe:74:6a:3d:a9:a2:79:5b:b2:77:47:
d0:b9:d2:ab:57:4e:82:57:5a:90:f1:0d:a5:31:b6:
5f:3d:10:6d:33:30:80:b6:67:11:29:ba:1d:cd:c5:
61:17:3e:6a:cb:34:13:08:cd:4d:1a:1f:6b:88:02:
c4:0e:b7:08:58:86:d3:52:95:bd:1b:f9:d7:dc:12:
b5:5c:66:86:b8:9b:2f:e5:2b:4b:00:7e:bf:71:c6:
43:ba:58:60:77:2f:bf:60:9f:2b:b8:33:7e:8d:0d:
e2:39:5e:1d:da:1a:ae:31:0b:5f:6f:e5:1a:d9:dc:
c0:c6:44:40:21:12:b6:c2:42:67:84:4d:6c:b8:37:
66:bc:3d:36:29:cc:5c:bc:24:ea:2a:3c:55:0e:4e:
2b:eb:6d:c2:ae:88:f7:41:ee:2e:39:1f:b5:2e:82:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:44:61:D4:3E:0F:92:F0:DB:B6:A7:64:3F:52:D1:D6:0A:BF:51
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:e7:96:0f:a3:92:a0:db:76:80:37:a0:80:ac:01:88:9c:
4a:66:8c:a1:7d:f1:b6:4d:40:ee:43:23:10:06:2b:79:8e:55:
a0:a6:36:b8:b0:49:72:e8:45:7d:84:37:3c:77:c2:87:de:74:
a2:d9:f3:86:65:73:d3:0d:f1:52:d9:bb:50:80:a6:de:eb:9e:
56:db:6e:e4:50:a3:67:1f:62:c7:43:b0:33:9a:6b:ad:bc:14:
46:de:8c:fa:51:9e:5b:88:fb:bc:a3:83:ce:15:a7:2a:f0:9f:
81:ac:24:fc:4d:5a:17:29:e4:56:01:ac:02:5f:d7:de:27:d7:
4a:31:9a:fa:5d:8c:45:c7:b8:04:b0:42:44:07:14:04:36:68:
57:d3:4a:ed:f1:25:07:e3:a0:eb:a1:c7:50:01:69:54:21:2d:
0d:97:94:46:b3:19:6a:71:2a:58:24:aa:ff:c8:6b:66:a5:bb:
07:98:08:48:2f:c2:97:f1:d3:ab:65:6c:cf:ec:57:be:ae:17:
09:64:55:9a:93:53:17:75:d8:6e:e7:f6:5c:a4:c6:2a:4b:07:
9b:c1:64:71:07:84:fb:c1:28:e1:36:9f:5a:87:73:f7:14:35:
c4:7d:78:7e:6c:2b:fb:0e:28:14:76:7c:c1:a1:56:43:f3:6b:
e5:1c:4c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFWVZ1zUhBhwzmphLeGQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1
ZmMxNTcwHhcNMjYwMzI1MTMwMDUyWhcNMjYwMzI2MTMwMDUyWjAzMTEwLwYDVQQD
EyhiYWU1NDQ2MWQ0M2UwZjkyZjBkYmI2YTc2NDNmNTJkMWQ2MGFiZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i2/bVn9tjmIpu7c5cLaUBKnnF2v
K9eiH/Ia8O/S1j3WxPFEqolT0fGpOX47l2Gjbiog9mHAfmFSp9/dhXgmd87un7Ks
vcR7oXcfTWISzspgHHtUPeX9/vniXJlF/nRqPamieVuyd0fQudKrV06CV1qQ8Q2l
MbZfPRBtMzCAtmcRKbodzcVhFz5qyzQTCM1NGh9riALEDrcIWIbTUpW9G/nX3BK1
XGaGuJsv5StLAH6/ccZDulhgdy+/YJ8ruDN+jQ3iOV4d2hquMQtfb+Ua2dzAxkRA
IRK2wkJnhE1suDdmvD02KcxcvCTqKjxVDk4r623Croj3Qe4uOR+1LoK3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrlRGHUPg+S8Nu2p2Q/UtHWCr9RMB8GA1UdIwQY
MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt
MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx
LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzPnlg+j
kqDbdoA3oICsAYicSmaMoX3xtk1A7kMjEAYreY5VoKY2uLBJcuhFfYQ3PHfCh950
otnzhmVz0w3xUtm7UICm3uueVttu5FCjZx9ix0OwM5prrbwURt6M+lGeW4j7vKOD
zhWnKvCfgawk/E1aFynkVgGsAl/X3ifXSjGa+l2MRce4BLBCRAcUBDZoV9NK7fEl
B+Og66HHUAFpVCEtDZeURrMZanEqWCSq/8hrZqW7B5gISC/Cl/HTq2Vsz+xXvq4X
CWRVmpNTF3XYbuf2XKTGKksHm8FkcQeE+8Eo4TafWodz9xQ1xH14fmwr+w4oFHZ8
waFWQ/Nr5RxMYA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:18 2026 by rpki-client