Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: HYuEP1HADnbG7nLMjBcQdjG4/GjV6Sv3M2tsBqKAxTw=
Subject key identifier: FE:7F:42:75:B3:13:63:D8:11:14:CE:82:CC:F3:D3:E1:1C:09:95:6C
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019F8FB4F254CDA4D7C56CA9AA75A3E55B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0CEC
Signing time: Thu 23 Jul 2026 16:00:28 +0000
Manifest this update: Thu 23 Jul 2026 16:00:28 +0000
Manifest next update: Fri 24 Jul 2026 16:00:28 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: RnckKumbQU6CB76j424XbEXUSo6c82+iDBINS1ldIzI=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:f2:54:cd:a4:d7:c5:6c:a9:aa:75:a3:e5:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Jul 23 16:00:28 2026 GMT
Not After : Jul 24 16:00:28 2026 GMT
Subject: CN=fe7f4275b31363d81114ce82ccf3d3e11c09956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:30:60:eb:a4:e3:9e:8a:44:d9:d6:e3:26:
85:bd:d2:f3:5e:ae:2f:c6:e2:0a:81:67:5a:0a:bf:
4b:c8:1b:2d:4b:bc:fc:4e:41:e0:84:6c:5d:77:bf:
d1:db:88:4b:bb:64:93:d4:0a:7e:37:c6:68:52:12:
9a:4a:91:76:4a:8b:66:86:9a:41:74:08:71:5e:f4:
aa:26:38:19:fe:99:73:03:25:08:e3:80:de:f7:99:
54:49:2e:99:9b:97:29:cf:03:71:f6:3c:20:e0:51:
bc:1c:7c:17:18:76:93:07:87:85:b6:c6:aa:68:dd:
ae:c9:d1:2b:2f:d2:26:65:bf:99:6e:94:9d:86:cf:
de:11:d8:bf:c1:2b:77:5b:44:0a:84:ac:1c:1c:88:
eb:7a:bd:5d:eb:4d:7c:c0:96:40:39:05:8a:07:08:
ca:b4:5b:5d:ba:a3:f1:03:58:66:36:8e:db:a5:66:
86:f6:ec:bc:d5:40:79:cd:49:4c:6d:96:e0:6f:15:
6e:5f:07:3c:88:b3:1e:df:ef:ec:5e:7a:87:b9:bc:
0e:dc:73:45:62:92:76:46:7e:3b:3e:49:a5:ff:47:
e6:17:a9:a6:94:bc:be:45:7c:3a:95:a1:0d:a8:43:
3a:3b:3e:d1:47:02:57:64:46:9d:38:ac:6f:06:1c:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:42:75:B3:13:63:D8:11:14:CE:82:CC:F3:D3:E1:1C:09:95:6C
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fd:29:94:13:50:0b:51:9d:8e:8a:56:e6:cb:0a:fc:3f:fa:
e6:e0:65:b8:8c:5e:0a:42:0d:32:8d:d4:29:d6:f2:70:81:72:
fb:20:8c:cc:d5:5f:b7:77:18:4e:4e:34:cc:44:6f:2f:52:09:
c6:b2:c7:40:18:be:68:25:20:b0:10:26:4b:bb:b8:3e:cf:ba:
53:a2:1a:a3:95:e2:56:24:59:ef:e9:01:7c:a7:30:49:87:2f:
f3:77:70:3d:5a:fe:49:7e:ee:be:81:0e:4b:9f:b8:83:2c:0b:
9c:0a:ba:7b:ed:15:69:99:97:67:c7:8c:68:59:43:a3:1f:f3:
b5:a8:ce:c5:44:bd:42:fe:4b:e7:38:ad:c0:48:0b:f6:22:7c:
10:c1:07:32:31:2e:d5:83:5e:7b:81:90:06:88:de:10:94:4c:
15:1c:c3:a9:23:be:af:ac:a8:92:d0:be:b9:c9:f0:16:28:5c:
31:62:53:70:2b:20:f9:16:d0:a7:85:88:17:80:34:99:f6:be:
0e:c0:bd:18:51:b0:18:9e:c6:97:a4:13:cb:17:c7:ff:c0:1f:
f8:3f:c1:a7:16:e5:d4:3a:75:cb:fd:d1:60:a4:dc:ff:97:a5:
0a:93:e2:a3:b6:4a:85:62:5d:75:2f:68:84:4e:45:3d:8b:4e:
0f:e6:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:30 2026 by rpki-client