Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: wiZnSE1jloOAfICtOjMhD8ZmeMBTVC7iaDHPl0fnM/4=
Subject key identifier: 78:C0:8E:BA:1D:A2:C8:5E:8F:AF:CE:AF:82:C0:B1:59:C3:1E:03:9E
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019DFC17A95BAB38622DFC16A8F6CF4B999D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0C1B
Signing time: Wed 06 May 2026 07:01:42 +0000
Manifest this update: Wed 06 May 2026 07:01:42 +0000
Manifest next update: Thu 07 May 2026 07:01:42 +0000
Files and hashes: 1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: rqRtdUs0rXRtquwSJfr2baM9B05voaxwzHLTdl7X+N4=)
2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:17:a9:5b:ab:38:62:2d:fc:16:a8:f6:cf:4b:99:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: May 6 07:01:42 2026 GMT
Not After : May 7 07:01:42 2026 GMT
Subject: CN=78c08eba1da2c85e8fafceaf82c0b159c31e039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:33:b6:35:11:79:c3:a4:d3:d0:49:cd:3c:
a0:44:ac:73:a1:dd:eb:40:8a:26:ab:1c:c6:3a:3d:
54:2e:35:8a:6b:ef:fd:f9:d0:f2:da:9b:36:80:85:
4e:58:ea:29:37:35:ee:0b:09:22:bc:6c:31:4b:f9:
1e:6c:1a:e2:d8:17:e2:6e:14:33:65:f7:d3:ca:36:
0e:71:8e:f3:37:61:8d:73:eb:38:04:1f:80:51:9a:
dc:b6:10:b5:f1:36:c7:e2:82:e8:5b:2b:a0:18:54:
77:b7:20:bb:af:0f:03:a2:8b:87:01:e3:91:fd:d7:
bd:59:93:cb:32:37:df:5a:72:5f:c1:fe:ad:a5:92:
0a:4f:09:4d:03:30:3c:c3:8f:ce:50:37:c9:ba:04:
d4:5d:f4:b9:2f:2a:5e:28:d2:b6:f4:d6:1a:4d:d5:
ec:72:4b:aa:ed:a2:86:37:52:94:68:d2:67:6e:1d:
fc:8a:f9:21:7f:8b:01:c6:7b:d9:7c:d5:b2:b1:76:
b7:f8:2e:ee:5d:24:7a:12:53:04:47:1b:68:54:0a:
84:e7:97:55:6d:f5:54:12:63:47:62:f3:83:f8:bb:
22:dd:ae:3c:65:c3:7e:31:30:f9:5d:11:78:bf:60:
bf:c5:b9:d6:b5:e3:58:ff:c0:21:fd:05:14:92:37:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:8E:BA:1D:A2:C8:5E:8F:AF:CE:AF:82:C0:B1:59:C3:1E:03:9E
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:ef:03:ae:c2:e5:83:91:84:5c:c0:c0:13:b7:56:65:13:
c9:10:66:bd:f8:36:75:20:d6:9b:c2:b3:ce:47:94:67:48:9c:
b9:8b:73:dc:2c:9b:e1:fc:60:8f:fc:6a:6b:7d:56:39:8b:e2:
44:dd:9c:9d:c2:89:e8:7a:40:36:7b:3a:47:4d:19:f1:78:12:
08:3c:9f:3a:e7:73:ab:b3:de:38:ac:39:54:22:f1:0c:bf:03:
e1:51:cf:c7:a8:96:45:22:9a:16:fe:fa:40:2b:48:40:8e:92:
26:97:8b:d0:a9:44:f8:7d:72:ba:02:bd:99:c3:b8:a6:c1:ab:
c9:ba:f0:18:20:53:5c:59:a5:c3:6a:53:3b:8b:ca:9e:40:ca:
35:92:a7:eb:b5:c0:dd:e9:30:da:ba:35:81:ae:3c:e7:e0:f7:
57:8b:bb:ab:9a:f5:e9:24:40:bf:9b:20:30:90:a8:71:9c:8f:
55:29:39:76:60:69:9b:b5:ee:dd:00:96:f4:fd:ed:b5:aa:89:
b9:1c:d1:fe:61:d3:e4:c5:e1:12:71:50:87:23:d4:9b:54:5c:
1d:f7:9b:e9:cc:54:00:b2:8a:54:58:fc:64:48:65:b3:62:37:
db:f7:23:d7:35:56:13:4d:89:11:cf:c8:48:44:f2:32:20:05:
50:c0:26:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ38F6lbqzhiLfwWqPbPS5mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw
OWY3N2UwHhcNMjYwNTA2MDcwMTQyWhcNMjYwNTA3MDcwMTQyWjAzMTEwLwYDVQQD
Eyg3OGMwOGViYTFkYTJjODVlOGZhZmNlYWY4MmMwYjE1OWMzMWUwMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXwztjURecOk09BJzTygRKxzod3r
QIomqxzGOj1ULjWKa+/9+dDy2ps2gIVOWOopNzXuCwkivGwxS/kebBri2BfibhQz
ZffTyjYOcY7zN2GNc+s4BB+AUZrcthC18TbH4oLoWyugGFR3tyC7rw8DoouHAeOR
/de9WZPLMjffWnJfwf6tpZIKTwlNAzA8w4/OUDfJugTUXfS5LypeKNK29NYaTdXs
ckuq7aKGN1KUaNJnbh38ivkhf4sBxnvZfNWysXa3+C7uXSR6ElMERxtoVAqE55dV
bfVUEmNHYvOD+Lsi3a48ZcN+MTD5XRF4v2C/xbnWteNY/8Ah/QUUkjcnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjAjrodoshej6/Or4LAsVnDHgOeMB8GA1UdIwQY
MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt
YzNjODBlNDcwNGU0LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0
LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGnvA67C
5YORhFzAwBO3VmUTyRBmvfg2dSDWm8KzzkeUZ0icuYtz3Cyb4fxgj/xqa31WOYvi
RN2cncKJ6HpANns6R00Z8XgSCDyfOudzq7PeOKw5VCLxDL8D4VHPx6iWRSKaFv76
QCtIQI6SJpeL0KlE+H1yugK9mcO4psGrybrwGCBTXFmlw2pTO4vKnkDKNZKn67XA
3ekw2ro1ga485+D3V4u7q5r16SRAv5sgMJCocZyPVSk5dmBpm7Xu3QCW9P3ttaqJ
uRzR/mHT5MXhEnFQhyPUm1RcHfeb6cxUALKKVFj8ZEhls2I32/cj1zVWE02JEc/I
SETyMiAFUMAmQw==
-----END CERTIFICATE-----
Generated at Wed May 6 10:02:36 2026 by rpki-client