Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: y/D0WbQ1D7wCokPWZiLOAr3gxeF0IK3pZwQ66vBuh6o=
Subject key identifier: 38:63:E8:E3:E2:E1:D5:FF:F9:64:68:B9:FE:2A:13:E7:BC:14:91:7D
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 01A0E2F44F349595A9F96F6CC34DA2D8D0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 088D
Signing time: Sun 27 Sep 2026 13:00:56 +0000
Manifest this update: Sun 27 Sep 2026 13:00:56 +0000
Manifest next update: Mon 28 Sep 2026 13:00:56 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: 4KRwgOkgzMjmr+thkhSbDOyOqVeLyEgh997IHSeM5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:4f:34:95:95:a9:f9:6f:6c:c3:4d:a2:d8:d0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Sep 27 13:00:56 2026 GMT
Not After : Sep 28 13:00:56 2026 GMT
Subject: CN=3863e8e3e2e1d5fff96468b9fe2a13e7bc14917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:74:9e:b8:51:8f:6e:74:d5:15:c8:f7:74:
9c:a5:a4:bf:1c:ff:08:01:44:d2:81:ff:7a:8c:73:
fe:58:d2:86:fe:93:83:2a:29:a1:7d:f2:87:fd:81:
67:01:1a:1f:6f:8f:0b:f8:86:0b:e1:25:c9:06:62:
01:c3:fd:1b:91:a2:74:f2:85:10:db:8b:64:f3:f2:
5a:bc:27:a3:d9:72:c5:ed:ae:78:3d:ee:4e:a2:92:
8b:57:b9:53:bc:e2:db:25:4a:98:0b:f0:ca:42:02:
2b:ed:fa:fe:01:e5:d7:9a:76:25:2d:20:6e:0c:9d:
e5:65:6f:21:41:c2:7b:59:4d:b4:71:11:77:41:7e:
40:31:87:a7:5f:de:40:74:bb:f9:74:09:8b:0e:09:
4c:7d:19:d6:17:2a:d8:48:22:ec:57:0a:96:1d:31:
ef:69:e0:d0:38:56:89:60:60:c1:de:12:f1:e4:b8:
36:31:65:18:96:28:7a:23:b6:b6:1b:52:9c:7b:58:
02:8c:50:5b:10:f4:ea:fd:8a:a2:c9:9d:59:ed:f5:
9a:4a:12:9f:f0:30:66:5d:1d:bb:18:bd:eb:c2:ef:
ca:fe:cf:c7:43:c5:bd:d6:4f:c9:3a:b4:d6:9c:b2:
91:a8:58:84:02:9c:42:cd:6e:bd:7d:f4:e8:0f:4c:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:E8:E3:E2:E1:D5:FF:F9:64:68:B9:FE:2A:13:E7:BC:14:91:7D
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f2:de:7a:31:fa:78:bd:bd:e0:31:fb:2f:1c:c5:a0:41:2f:
c8:55:d5:08:27:8e:9b:11:e1:e9:f0:cb:ef:d4:33:da:13:58:
97:7a:81:e3:b0:ef:5e:a3:05:ae:fe:41:98:ac:f1:57:42:b9:
3f:77:1a:c5:41:96:35:99:de:8f:da:a6:ec:51:a2:69:b3:8e:
0e:97:89:9d:c5:8d:ef:35:64:23:c8:ae:67:55:f4:b6:1d:6f:
a0:cb:e8:c1:0e:8e:2a:71:7b:a7:71:50:70:3d:df:98:07:29:
22:e9:9f:fc:36:77:d2:60:22:f8:33:1d:4c:e9:3f:90:7d:f9:
05:a5:97:63:3d:1c:b8:6a:7a:89:d2:91:a8:ee:14:1c:31:48:
c4:7d:aa:c2:20:65:d5:eb:d2:0c:13:d4:ec:36:c2:00:54:48:
f6:43:86:0b:7f:04:ef:9f:a3:37:70:75:cf:52:88:23:f8:56:
89:7e:59:50:e3:67:82:58:5e:20:dd:6e:b7:37:c6:51:21:2d:
59:cc:a7:09:e4:a4:4a:be:a2:72:38:f2:9f:f7:5b:d2:f5:d3:
72:94:55:bb:4f:49:e0:ea:1e:93:f0:a6:65:d0:ad:af:fc:b2:
e0:f4:1f:0f:87:02:a0:11:0b:c9:67:08:41:24:a3:95:39:72:
c3:3b:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:06:20 2026 by rpki-client