Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: FcxcLi7eID+j9YoOVpY2ljqusLygCybzFiJMi+fVeMU=
Subject key identifier: 0E:1A:0B:C7:0B:1F:25:44:24:C3:F8:67:B7:7E:9A:7C:C8:54:DA:CE
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019D107C066406F27893A70710D47C6E91F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0BA1
Signing time: Sat 21 Mar 2026 13:00:56 +0000
Manifest this update: Sat 21 Mar 2026 13:00:56 +0000
Manifest next update: Sun 22 Mar 2026 13:00:56 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: DHsWVJ9Y7yejd1OoWS5K32gyKjcjGc7bIRv9TnzhX7s=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:7c:06:64:06:f2:78:93:a7:07:10:d4:7c:6e:91:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Mar 21 13:00:56 2026 GMT
Not After : Mar 22 13:00:56 2026 GMT
Subject: CN=0e1a0bc70b1f254424c3f867b77e9a7cc854dace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:34:b4:b9:28:1b:96:3d:28:4e:78:05:4f:
f4:68:c4:78:a2:2f:fe:fc:5e:ae:8a:11:e3:8f:7b:
9d:0e:cf:39:60:b9:7b:44:7e:a1:d4:e5:97:fd:bd:
99:2a:d7:14:53:0d:95:9f:fb:94:86:43:ad:67:5c:
9c:a0:e6:ab:d1:4f:2c:3c:b0:2c:e7:d5:1b:a1:f6:
f7:5d:ff:51:f2:9e:c0:3e:f8:ec:c3:c4:14:90:e3:
95:97:05:a2:f4:6a:dd:bf:21:2a:8c:92:20:09:95:
a6:e7:6c:2d:e5:8e:65:90:28:2d:de:50:e6:0c:9a:
29:5b:49:f3:5f:51:33:0c:93:81:34:4a:fd:6e:8a:
66:c9:d4:c2:83:d4:9a:1f:22:41:ab:97:64:4d:92:
f0:6f:2f:7e:05:8f:c3:03:73:15:c4:52:a3:c5:f7:
1d:7f:d3:69:d2:bb:dd:fb:6f:16:27:98:53:39:39:
e2:76:2d:a2:ed:42:62:bb:54:ae:33:94:4e:d0:ea:
da:ee:fe:22:96:d3:72:ed:5a:4a:a0:8b:9a:52:47:
03:a4:20:e2:f4:af:ba:1f:3a:91:a4:97:de:20:20:
3e:d1:b4:ca:6a:8a:2c:88:14:e4:45:d3:9a:40:1a:
d2:4d:8e:fc:c2:7e:7b:83:93:02:19:b9:b4:92:e8:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:0B:C7:0B:1F:25:44:24:C3:F8:67:B7:7E:9A:7C:C8:54:DA:CE
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:96:f4:40:7c:a0:05:18:76:ea:4b:e9:4d:8e:e7:8d:12:
e0:98:7c:99:fd:b1:43:65:97:4f:2f:66:f9:9b:d7:bb:76:ea:
0a:66:be:75:16:5d:f4:17:39:ba:15:37:1a:ae:0c:18:0c:ec:
27:89:44:ce:a5:9b:ad:67:df:5d:b1:78:a8:26:f8:be:fa:fb:
e9:c5:d4:c0:0e:e5:22:23:dd:81:bb:71:75:7a:e7:ee:3f:0d:
74:21:12:6d:9b:cd:5c:a0:27:a2:41:0c:f5:50:95:71:db:48:
d9:54:43:cb:b7:f6:eb:68:f6:8f:7d:ad:c5:dc:7f:65:67:bf:
d1:13:f9:51:3f:61:f8:c8:3e:60:79:dd:f4:7e:7a:35:0b:4e:
8e:e0:3d:cd:b0:66:83:a1:e1:1f:e1:d3:4c:0d:c6:17:f5:42:
6c:a6:d5:e5:b5:99:40:a7:d3:70:f6:9d:0b:e8:f8:06:07:91:
72:a0:4d:8f:3d:f2:76:d6:aa:0f:8a:f9:6a:6e:2d:cd:81:ea:
98:41:ec:69:6e:f6:d5:4f:b7:6a:33:07:46:91:15:bc:ce:30:
ed:98:c9:89:ff:18:52:b6:ee:49:a0:24:cf:5a:43:65:b0:5f:
86:72:56:72:08:24:99:b9:b7:9d:e5:b6:16:95:c4:5d:3d:56:
bd:f6:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:07:36 2026 by rpki-client