Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: q/zZsH+koufNtVPgkcGOiRxaH+yZPNbRZk2Q1yt6Hy4=
Subject key identifier: 4B:69:A0:81:E0:F8:6F:FB:E6:D9:03:BD:0A:2C:4D:3A:CB:60:AA:26
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 01A0CA7DF4328F54CFE3D269D19C8A7A0117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0D8F
Signing time: Tue 22 Sep 2026 19:00:47 +0000
Manifest this update: Tue 22 Sep 2026 19:00:47 +0000
Manifest next update: Wed 23 Sep 2026 19:00:47 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: q4bRvl5eqXop9ZJIVYPBtPlvV9U00y53UvopuKzKx0w=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:f4:32:8f:54:cf:e3:d2:69:d1:9c:8a:7a:01:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Sep 22 19:00:47 2026 GMT
Not After : Sep 23 19:00:47 2026 GMT
Subject: CN=4b69a081e0f86ffbe6d903bd0a2c4d3acb60aa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:a5:84:2d:ba:51:e6:f7:7b:6d:4f:d9:40:
18:b1:46:6c:0e:05:3e:a6:d0:24:9b:d4:d7:ec:9e:
16:40:a2:82:be:67:44:df:a4:b4:79:d1:82:6c:05:
02:b1:4f:2c:02:85:94:d1:69:6d:01:dd:2f:7e:f4:
ae:c3:6d:10:1d:f3:73:4a:29:c7:8c:0f:54:6f:17:
5b:00:42:bd:95:eb:1a:0d:00:3c:12:28:a6:2c:dc:
74:e6:e2:0e:21:be:23:d4:fd:b0:c7:de:01:31:e2:
3b:76:94:08:a5:87:bc:b1:ff:b3:54:c3:88:77:07:
85:7e:3a:b7:8a:41:8b:4e:2e:2c:7f:15:d9:9c:b4:
4a:5a:78:48:4e:df:10:4c:41:ed:2d:9b:d5:17:bc:
b9:aa:c0:ba:61:e8:30:51:dc:fd:3e:a0:12:9c:be:
b4:32:1c:e6:06:a2:45:a7:a6:56:10:f9:a1:41:d2:
a0:88:b7:c9:98:75:15:5a:d2:b7:34:05:2c:00:05:
83:a0:9c:f4:fa:c7:e2:ee:b1:a1:4a:f8:bf:93:fb:
d7:f8:cb:7a:27:6d:93:64:2b:66:2f:86:b3:8b:36:
ae:0c:e2:21:27:19:29:2e:2e:69:72:fd:a3:7a:39:
47:38:06:cd:04:8c:b9:08:a9:d8:99:be:48:69:8c:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:A0:81:E0:F8:6F:FB:E6:D9:03:BD:0A:2C:4D:3A:CB:60:AA:26
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e6:0d:9d:ee:01:2a:e4:a2:a9:be:25:48:70:f3:18:18:68:
a0:15:51:ee:22:ba:31:1d:2c:da:95:13:4f:6b:7c:93:87:1b:
d1:36:88:83:61:33:5e:25:ee:a4:2b:99:fd:87:40:34:ab:4f:
d7:73:55:7a:ac:1f:f7:5b:05:95:80:37:c3:25:ea:a5:e8:c6:
93:f1:68:69:b7:21:d4:fd:f8:b6:2a:b2:bd:3f:b2:b0:e5:51:
3a:7d:93:55:b5:aa:25:78:49:4e:4e:cf:11:b7:cb:4f:0d:c4:
2e:d9:85:1f:06:33:fe:0d:df:bd:ea:9f:d1:ab:58:d9:00:e9:
85:d1:25:60:cf:5c:23:2d:c8:45:6d:4b:73:65:6e:52:cd:bf:
c6:d2:c6:4e:31:f5:82:51:8c:e9:1a:40:67:a6:fc:27:93:44:
4f:7a:aa:6c:c8:4c:87:df:05:32:42:cc:b4:fa:c5:e5:b0:3f:
79:d4:89:32:50:f0:90:be:ee:02:ce:47:a3:77:0f:5c:62:c5:
40:7e:f5:48:e0:e3:ef:59:a1:96:a3:bf:05:26:12:a2:1a:9e:
7a:fd:64:5a:18:7b:f4:47:4c:00:5c:41:f8:27:a8:c3:fd:47:
cf:5b:4a:ec:64:d0:c7:f1:44:d7:64:41:43:39:68:28:11:7c:
d8:d7:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:11 2026 by rpki-client