Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: LltPu2tNLcLszF9xuoY3C+ZqkPayLNNZv6lWb1vdqYg=
Subject key identifier: 3F:85:33:3D:65:6A:49:C4:D9:9F:81:BA:6C:8D:AA:B4:81:E6:D7:0A
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 01A1DCB8D28BA0EF6773250CF751EF488E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0E1D
Signing time: Sun 15 Nov 2026 01:01:02 +0000
Manifest this update: Sun 15 Nov 2026 01:01:02 +0000
Manifest next update: Mon 16 Nov 2026 01:01:02 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: gqn9/7UD3TjfZVkrx7TArj9vk00iPMw268PswCL1zII=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:d2:8b:a0:ef:67:73:25:0c:f7:51:ef:48:8e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Nov 15 01:01:02 2026 GMT
Not After : Nov 16 01:01:02 2026 GMT
Subject: CN=3f85333d656a49c4d99f81ba6c8daab481e6d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:a4:06:69:a2:ec:ef:c1:52:15:6e:2b:91:
95:4a:af:d9:a6:69:46:50:2f:f5:54:e6:08:a5:bb:
c3:ed:2d:f6:da:d8:bd:a1:82:dc:11:e0:57:b4:8f:
4b:51:9a:60:93:74:7c:83:55:b4:97:ed:b8:59:7a:
5f:25:95:44:55:70:a2:b9:7d:98:ff:9f:bc:b6:10:
65:6d:25:94:b0:63:06:41:6a:7c:f8:74:ea:9d:f0:
e7:5e:eb:d2:48:92:d9:7f:2c:2e:e8:d0:1f:9f:03:
87:1f:47:69:ab:19:41:6a:1c:b7:09:d5:c0:19:ae:
21:79:8f:67:e1:f1:c2:51:1d:62:ed:6b:32:95:92:
33:a5:c4:b3:bb:e3:8d:c1:d7:3d:9b:48:6a:e9:ff:
43:94:bd:fe:5b:d7:0f:52:a1:04:be:5c:bf:d4:6f:
7e:f4:27:3e:2d:0c:d4:45:e6:3e:fc:fd:87:8b:0a:
3f:cb:e7:83:9e:65:43:8d:85:5d:03:ad:80:41:c0:
4e:c9:73:bd:f5:29:d9:6a:a6:01:ee:0d:8b:1d:da:
c1:58:0e:40:eb:bf:20:58:d7:cf:01:48:1d:f0:fd:
3b:94:6c:6d:57:35:fd:43:42:dc:47:57:ee:c9:1a:
02:58:95:36:3d:68:82:33:17:da:aa:5a:6a:32:7a:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:33:3D:65:6A:49:C4:D9:9F:81:BA:6C:8D:AA:B4:81:E6:D7:0A
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2b:7c:49:c5:74:e0:c6:9c:be:54:a8:9d:db:c8:1b:b8:84:
09:b8:91:2f:13:25:1c:8c:38:58:ec:9d:87:c5:c5:c4:98:59:
d8:e6:42:64:2a:62:49:dd:c9:d4:25:9a:77:9d:56:2b:51:e0:
f0:fd:1f:e6:65:9b:d0:7b:23:01:16:92:a3:87:cd:53:25:04:
6f:19:43:7c:6f:73:5e:b6:c7:44:10:33:ab:62:72:e8:31:d3:
92:db:fa:99:b0:b0:b5:e2:04:f7:93:2a:5f:14:36:2f:c9:13:
9a:d2:78:07:58:f4:1a:64:55:e0:32:6e:b7:dd:b2:a1:cc:7e:
9f:63:57:d4:cb:c7:53:56:29:9f:4a:80:f2:bd:92:99:5d:89:
42:fa:e8:43:13:a9:94:a7:60:87:38:5c:01:90:a4:ba:03:33:
81:c7:bd:6b:8e:15:2f:c1:85:e6:b2:73:4b:ef:63:32:5f:17:
9a:3c:c8:1c:53:3d:f1:99:0f:0f:4d:4b:a0:10:fa:41:3b:a5:
ae:cb:bb:36:96:54:c0:a7:87:4b:9d:12:27:97:61:70:ca:ce:
48:b7:e4:c9:5e:db:79:2c:9d:be:66:ec:b6:99:8f:15:a0:47:
e6:6a:39:19:44:84:22:2c:82:d0:9e:aa:0a:2f:9b:59:87:e3:
dc:6c:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:57:03 2026 by rpki-client