Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: N8G0N0SZ5wT9DW3RomPgFZ6AIUCBhAlBGnn+CMSXse0=
Subject key identifier: 75:DD:88:3D:AD:D2:D6:73:BE:37:25:8D:DB:0A:48:92:19:F8:FD:E1
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019D98F43695111DDA4BF71B85425F7B3935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 06D9
Signing time: Fri 17 Apr 2026 01:00:34 +0000
Manifest this update: Fri 17 Apr 2026 01:00:34 +0000
Manifest next update: Sat 18 Apr 2026 01:00:34 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: Q0iUf+8qMzrZDHhv2ud2DTFDL/tFXmmK6y4ijvBozrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:36:95:11:1d:da:4b:f7:1b:85:42:5f:7b:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Apr 17 01:00:34 2026 GMT
Not After : Apr 18 01:00:34 2026 GMT
Subject: CN=75dd883dadd2d673be37258ddb0a489219f8fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:d6:5c:c1:1e:1a:bd:0c:25:dd:94:3f:be:
9e:d7:79:4a:4d:5d:fd:15:5e:ad:6b:25:9f:09:11:
3b:54:af:d4:9a:14:36:11:f7:ae:e6:01:b9:ad:b9:
23:c1:75:a0:ec:24:9c:47:02:0a:62:78:3c:6e:61:
9f:db:d6:da:23:1c:ea:69:e1:fa:5d:8f:ea:df:e8:
78:c8:87:36:fb:7d:1c:0f:dc:22:16:93:54:64:13:
dc:74:f6:80:31:67:4c:46:65:82:65:82:81:ba:29:
07:b8:6c:82:3b:77:83:28:0b:f3:e6:bc:f7:ce:f9:
f5:b1:cc:fd:15:89:97:74:5b:2d:ba:97:1d:ff:39:
7c:75:14:ed:c3:5a:c2:e9:01:e3:c1:ff:75:0d:5a:
23:22:0a:fd:d2:94:b8:47:cc:3a:60:9b:7d:a8:d7:
f6:93:f9:af:e7:31:49:ce:d7:18:7a:33:af:03:6e:
98:b4:b2:5a:35:20:49:b7:f8:4d:44:a6:ed:d9:2a:
09:aa:22:ed:18:c7:65:12:0b:93:29:61:c8:91:98:
57:13:87:dc:70:7e:12:66:a8:df:df:f8:1e:20:a1:
e6:85:6b:6a:62:60:33:dc:2d:76:29:2b:a1:b9:28:
7e:ca:c4:65:98:9c:66:9e:87:98:6d:fb:2b:af:26:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:88:3D:AD:D2:D6:73:BE:37:25:8D:DB:0A:48:92:19:F8:FD:E1
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:4d:a5:8c:08:d4:84:f0:fb:34:20:f5:a8:07:3c:cf:dc:1d:
1b:98:f6:bc:e5:33:98:00:7b:90:2c:8a:b7:02:5a:e3:3f:21:
f8:df:33:c0:e9:c8:06:6d:cf:34:18:7b:2e:38:10:92:d7:70:
57:1f:37:d1:80:38:45:eb:c9:b5:f2:b1:c5:aa:32:14:37:4f:
db:a9:1c:ff:b9:41:05:63:3e:86:c0:75:0c:75:fb:3c:5a:98:
49:d7:24:00:29:6a:98:6b:87:92:dc:0a:88:30:2e:ae:a2:38:
1e:37:f5:93:72:ec:59:3a:1c:87:3d:dd:8d:e4:b0:7f:e1:e1:
a8:6b:86:bb:93:5f:e6:1a:ff:90:92:09:26:e5:e8:db:b7:5e:
c2:92:bd:03:7b:25:16:1e:5f:9a:53:92:cf:1b:a9:d6:ca:a3:
34:50:0d:2b:0c:17:e0:3c:67:99:0f:a9:d6:ed:76:1e:7a:e1:
20:18:14:be:c4:6c:18:0e:f4:03:d3:e2:c2:b5:2c:79:40:19:
9e:46:60:27:c1:bd:1b:a7:91:54:86:27:4d:74:86:b9:3c:3d:
28:b7:d9:8b:4d:c0:11:ba:6a:6b:36:9b:5d:c6:36:15:91:13:
f2:6d:7b:99:8b:f8:a2:ad:14:fd:9f:e4:f6:32:0c:e5:15:33:
ad:ff:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:14 2026 by rpki-client