Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: smOq9luLTc3Z0sal3VPt63RIi7OUCv8JFslV2fgKBic=
Subject key identifier: 91:DD:3C:3B:68:10:9F:70:BC:3E:7F:AC:B5:9A:A0:EA:03:5F:21:14
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019DDC8BF8037AD2E9E022BEC91F16E68BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 06FC
Signing time: Thu 30 Apr 2026 04:00:53 +0000
Manifest this update: Thu 30 Apr 2026 04:00:53 +0000
Manifest next update: Fri 01 May 2026 04:00:53 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: tVRxis1z2dC19bu76+5/Bue4trEwRl+s/ZEOMU4Uh+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8b:f8:03:7a:d2:e9:e0:22:be:c9:1f:16:e6:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Apr 30 04:00:53 2026 GMT
Not After : May 1 04:00:53 2026 GMT
Subject: CN=91dd3c3b68109f70bc3e7facb59aa0ea035f2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:ec:c4:01:ad:94:25:b4:3a:e6:3f:ee:bf:
36:e8:26:c0:5b:a4:9c:2a:8c:95:2e:ec:b4:7b:f5:
af:94:90:a8:ae:c1:ae:8f:94:e2:8a:2b:a1:ae:3e:
30:3f:e6:9f:f8:5d:e2:7a:a2:33:da:f2:8e:e2:71:
d8:27:59:38:b9:72:e4:45:9f:35:26:f1:6a:38:c0:
2f:19:70:c5:4e:47:d1:59:6e:7d:7a:99:72:a1:3a:
06:7c:07:7a:09:0f:d9:dc:7f:41:34:7a:fe:68:14:
f3:87:5e:0c:d7:35:3c:e4:f4:0b:a9:32:03:04:01:
9e:29:35:dd:d8:78:05:2d:d7:67:ff:53:2a:03:b4:
05:36:f8:7b:cd:f1:0d:c6:c8:26:54:c7:db:e9:c9:
39:c3:b6:21:53:f6:bd:b5:c8:09:81:42:02:04:aa:
30:3a:63:c9:e0:78:08:1c:65:74:3e:ec:37:dd:df:
13:1e:79:7e:d1:0c:a6:3d:a5:46:30:51:55:15:07:
59:73:29:48:81:59:d2:9c:3a:df:2c:bf:ea:d6:44:
db:9c:78:68:42:a5:c4:2c:08:c0:ea:46:15:75:cc:
50:4e:4c:a6:31:0a:37:82:43:a0:a3:c2:9b:f9:5f:
7f:5a:ce:d5:cf:1d:00:bb:52:0c:fe:68:b8:d9:00:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:3C:3B:68:10:9F:70:BC:3E:7F:AC:B5:9A:A0:EA:03:5F:21:14
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:23:40:92:30:f9:34:64:69:99:9f:0d:31:3f:7f:46:e6:71:
71:e2:8c:d6:bc:12:7f:01:80:72:bb:d4:6c:15:00:72:ad:56:
13:9b:28:45:d4:32:4f:8a:2d:09:37:da:ce:34:17:9d:80:84:
00:86:4e:b4:b8:55:34:1c:e5:66:fc:1d:78:65:b8:ff:67:dd:
1e:1c:44:b5:0c:5f:5f:3e:e4:9e:d1:35:80:dc:b8:de:41:86:
cd:2d:a9:dd:cb:2d:d3:48:ac:4d:ad:97:8c:a4:b1:8f:48:43:
6f:98:25:12:dc:ad:95:c4:1d:a2:66:a8:bd:e7:57:6d:c5:53:
5f:d3:b8:69:63:3a:b6:8e:6b:19:c9:34:c0:57:e7:4f:ab:28:
d6:16:8e:54:69:40:3f:be:ea:09:a1:61:fd:e6:ca:91:2e:c8:
c9:01:3a:38:3f:59:46:c0:c4:7b:94:71:b3:4c:6c:a4:84:45:
d5:68:3b:c2:d7:6b:77:51:6c:f7:d6:f0:cb:02:55:a9:eb:3f:
ce:5b:df:1d:85:e2:12:ef:e7:fd:d2:e5:ca:5f:f7:83:4b:5d:
27:62:c1:ef:a6:b0:41:f1:a6:95:ca:a4:1f:36:e5:78:66:06:
c8:24:08:12:d2:58:d3:3c:74:69:50:28:59:91:fe:59:51:cd:
46:0f:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:44 2026 by rpki-client