Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: mMcf1UqjgedWoWAreNKCN/WiX2bhFgX7GvFmME4xjDU=
Subject key identifier: 8E:B9:5C:31:91:37:0B:98:A0:F1:94:5F:88:C9:13:9F:60:18:05:CC
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 01A0BB0A578372486ECC614A6F27B661C9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0D87
Signing time: Sat 19 Sep 2026 19:00:12 +0000
Manifest this update: Sat 19 Sep 2026 19:00:12 +0000
Manifest next update: Sun 20 Sep 2026 19:00:12 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: xUtAppFMy9Km8ftHkywC3YaRQfL7L2gZ3l9PTJa9VEw=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 15:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:0a:57:83:72:48:6e:cc:61:4a:6f:27:b6:61:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Sep 19 19:00:12 2026 GMT
Not After : Sep 20 19:00:12 2026 GMT
Subject: CN=8eb95c3191370b98a0f1945f88c9139f601805cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:26:e9:ad:f1:93:9f:0f:e4:44:7f:e3:cb:
b3:4b:33:ff:87:80:d9:94:bb:6c:12:ed:55:03:79:
ec:d2:39:17:18:d1:43:15:26:a0:57:15:9a:34:1f:
61:66:f1:20:2f:d1:4e:60:89:3d:6e:ac:98:fb:47:
1b:80:08:5d:86:62:af:9d:a4:ae:5c:7d:ff:0d:68:
8a:73:eb:86:0e:1a:f1:fa:b3:00:cc:34:e9:79:f6:
d3:a2:58:c6:4e:5a:84:37:77:9d:da:8b:97:36:56:
83:d1:46:1d:d3:43:57:2e:7b:ce:ec:f4:76:e1:44:
f1:cf:c4:bc:fb:f0:b7:8e:73:2c:7a:8b:95:c7:58:
a6:1c:0c:4f:36:b9:09:d1:58:c1:15:b6:a1:81:65:
f6:5c:51:16:3e:bd:96:ed:7e:3f:c8:1f:b1:a5:ee:
63:f1:02:55:00:e2:82:41:91:05:77:01:e9:c7:c6:
69:d8:98:c0:9f:1f:44:0d:5c:ff:45:ad:3c:86:32:
8f:d6:4d:5c:d2:00:dd:b6:f4:2f:a6:b8:68:03:d4:
0a:1e:61:b2:95:2d:4c:1d:d9:48:7b:d4:57:17:51:
f2:9e:c2:d6:8b:ba:99:4c:4d:00:16:89:1c:5d:e3:
69:6f:86:22:9a:6d:57:51:37:d8:9d:4f:92:cb:8b:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:5C:31:91:37:0B:98:A0:F1:94:5F:88:C9:13:9F:60:18:05:CC
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:38:a3:13:55:10:3e:40:80:62:96:1a:5d:df:59:bd:37:
94:09:e5:d7:fc:11:15:73:ca:9d:dc:91:02:3f:e2:4d:87:a8:
42:02:05:de:dc:ab:a5:97:4e:ce:77:4a:ec:61:b7:7b:5a:64:
d6:e3:3c:2e:12:4b:4f:a4:92:fd:c4:1d:e1:24:59:3d:42:a5:
06:98:ed:71:19:2b:23:9c:ad:24:ea:6e:0b:e2:b9:2f:39:9f:
1a:27:c7:ea:f7:e4:7d:93:81:82:96:7c:38:2c:7f:91:fd:7a:
a8:86:a0:db:01:35:8d:b9:91:a5:94:c4:43:49:8c:69:c6:99:
25:e6:23:c0:87:d6:62:e3:b7:3a:b6:a8:01:3b:04:23:23:c6:
7c:55:59:6e:06:46:a8:0b:4a:65:76:1d:e5:4f:6c:92:70:67:
92:a1:58:61:53:a4:f7:eb:be:98:c1:cd:f4:fc:be:46:08:d5:
86:55:25:ed:6e:87:3f:93:7a:ee:e8:f1:8d:e1:57:f5:63:b2:
29:f2:29:99:2b:be:c0:98:7d:1a:ea:15:91:37:8f:06:fc:a2:
9c:f2:89:d3:02:9e:77:7b:f2:71:73:63:f3:ae:f5:ef:01:83:
3e:7b:7c:a2:ea:c8:e6:d2:34:12:0d:2b:eb:01:7c:f3:45:d9:
f8:29:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:24:01 2026 by rpki-client