Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: 9Snnyhkp03pyLCOpmiiFEltDxXRywVcuHXQ4eQbiYng=
Subject key identifier: 55:51:D0:9C:E8:F4:E8:DB:1B:5D:C0:4A:B9:25:EF:C3:9F:A8:60:F5
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019D333E997A559ED62E3A5F538153350FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0BB3
Signing time: Sat 28 Mar 2026 07:00:33 +0000
Manifest this update: Sat 28 Mar 2026 07:00:33 +0000
Manifest next update: Sun 29 Mar 2026 07:00:33 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: bT1ENL5QAXsTbyfUSQ3ApMWua93FkT3n/CxCPKMshu0=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:99:7a:55:9e:d6:2e:3a:5f:53:81:53:35:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Mar 28 07:00:33 2026 GMT
Not After : Mar 29 07:00:33 2026 GMT
Subject: CN=5551d09ce8f4e8db1b5dc04ab925efc39fa860f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:00:a8:14:7e:c4:de:fb:95:a0:78:83:a3:
96:03:d6:8e:8b:cb:8b:cb:35:35:4c:92:86:14:b3:
bd:24:56:51:f7:40:22:93:7e:cf:32:3b:55:de:ab:
4b:6a:10:54:a1:ef:13:78:38:c3:b1:30:78:3f:b9:
2d:1e:3d:2f:da:1c:8d:ea:c0:94:05:f7:75:3a:28:
3d:30:da:35:30:95:24:7e:9c:e9:75:69:26:45:d8:
1e:21:42:de:6e:66:b2:7c:16:4f:de:de:d4:f2:c4:
67:c8:53:be:06:06:07:7e:1a:47:1d:7d:4d:03:40:
2f:dd:78:90:24:46:ea:3f:00:37:4a:be:8c:a8:de:
4f:6e:e8:bc:ed:55:65:56:96:23:85:e4:cb:b9:ed:
7e:45:0e:06:2a:9a:07:4c:96:33:c6:89:8e:81:df:
54:86:35:1a:f0:9a:ea:a7:3c:ce:df:a5:a0:fa:48:
f3:f0:48:9d:ad:63:12:1d:6e:73:83:aa:21:90:cf:
43:95:9d:4a:fd:44:0a:74:95:5f:a7:8f:9a:10:83:
1d:b7:4e:f6:44:86:57:1e:b3:6b:7b:73:e9:06:c8:
6c:64:1b:0c:71:2f:96:3b:bb:f7:56:6a:fe:aa:2d:
16:f0:ad:88:a9:90:8a:48:6f:75:68:0c:2f:6e:64:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:D0:9C:E8:F4:E8:DB:1B:5D:C0:4A:B9:25:EF:C3:9F:A8:60:F5
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6e:e9:45:55:d1:b1:fc:67:e6:6b:8d:c0:a8:f1:e8:2d:4f:
e0:d4:2d:b4:61:63:52:47:ba:63:fe:3c:09:d8:f2:82:c0:8c:
84:51:e9:93:d2:60:d2:3f:f9:e4:af:fe:13:e6:ea:8b:d4:6e:
a7:0b:3c:d6:dd:a2:c6:2b:c8:4a:25:47:99:a8:8b:71:0d:cb:
27:f4:94:43:c0:8a:dd:78:96:d6:51:df:79:78:ae:0c:e9:5f:
43:21:f5:42:b2:01:e8:36:07:09:fd:68:31:ba:37:e1:e9:f4:
70:37:66:af:19:4b:6d:cc:33:b6:ad:47:67:f9:f3:8e:ec:e5:
38:02:3b:f9:16:dc:ed:26:11:8a:b1:e5:01:c3:c5:51:84:e1:
8d:0d:76:b3:3d:ef:24:d1:e2:ce:70:7b:81:af:ff:9d:5d:3f:
54:5b:5d:53:1c:18:9b:bf:ec:37:f1:5a:66:25:23:ee:a3:5d:
3c:24:8b:bd:20:d9:a0:91:01:95:d4:95:7d:72:68:57:5f:75:
81:fc:d9:c9:04:fa:36:e2:dd:c2:7f:8d:0c:0b:18:cd:f1:bb:
f4:4c:c7:94:6f:a9:48:82:e5:cf:21:c1:1a:ce:05:a0:24:85:
5c:ed:58:03:61:c8:b7:b9:b2:e8:7c:56:53:62:85:27:ca:19:
a6:23:a4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPpl6VZ7WLjpfU4FTNQ/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw
OWY3N2UwHhcNMjYwMzI4MDcwMDMzWhcNMjYwMzI5MDcwMDMzWjAzMTEwLwYDVQQD
Eyg1NTUxZDA5Y2U4ZjRlOGRiMWI1ZGMwNGFiOTI1ZWZjMzlmYTg2MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryoAqBR+xN77laB4g6OWA9aOi8uL
yzU1TJKGFLO9JFZR90Aik37PMjtV3qtLahBUoe8TeDjDsTB4P7ktHj0v2hyN6sCU
Bfd1Oig9MNo1MJUkfpzpdWkmRdgeIULebmayfBZP3t7U8sRnyFO+BgYHfhpHHX1N
A0Av3XiQJEbqPwA3Sr6MqN5Pbui87VVlVpYjheTLue1+RQ4GKpoHTJYzxomOgd9U
hjUa8JrqpzzO36Wg+kjz8EidrWMSHW5zg6ohkM9DlZ1K/UQKdJVfp4+aEIMdt072
RIZXHrNre3PpBshsZBsMcS+WO7v3Vmr+qi0W8K2IqZCKSG91aAwvbmS2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVR0Jzo9OjbG13ASrkl78OfqGD1MB8GA1UdIwQY
MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt
YzNjODBlNDcwNGU0LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0
LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm27pRVXR
sfxn5muNwKjx6C1P4NQttGFjUke6Y/48CdjygsCMhFHpk9Jg0j/55K/+E+bqi9Ru
pws81t2ixivISiVHmaiLcQ3LJ/SUQ8CK3XiW1lHfeXiuDOlfQyH1QrIB6DYHCf1o
Mbo34en0cDdmrxlLbcwztq1HZ/nzjuzlOAI7+Rbc7SYRirHlAcPFUYThjQ12sz3v
JNHiznB7ga//nV0/VFtdUxwYm7/sN/FaZiUj7qNdPCSLvSDZoJEBldSVfXJoV191
gfzZyQT6NuLdwn+NDAsYzfG79EzHlG+pSILlzyHBGs4FoCSFXO1YA2HIt7my6HxW
U2KFJ8oZpiOk6g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:50 2026 by rpki-client