Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: 7FAafKn+XvERLdyUGA9maapwLH9cDhS0F66iuimYdYQ=
Subject key identifier: 54:92:A1:FD:22:94:28:6C:62:A2:5C:DF:F7:32:78:47:00:9C:05:F1
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019FA82B1499C302AA6955C91A8F65E1A2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 07EA
Signing time: Tue 28 Jul 2026 10:00:23 +0000
Manifest this update: Tue 28 Jul 2026 10:00:23 +0000
Manifest next update: Wed 29 Jul 2026 10:00:23 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: 0cn9yxT3vb0gAfCRZyjFPRaMA6HWAHjSfn2dFIKSK9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:14:99:c3:02:aa:69:55:c9:1a:8f:65:e1:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Jul 28 10:00:23 2026 GMT
Not After : Jul 29 10:00:23 2026 GMT
Subject: CN=5492a1fd2294286c62a25cdff7327847009c05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:15:f2:cf:d7:39:29:b5:a9:69:14:45:b1:
63:d4:c6:20:d5:f6:62:7f:3b:16:2b:95:59:9d:b6:
d1:df:46:ef:6a:dd:72:7e:11:47:66:22:f0:81:62:
b6:b4:e5:09:6f:3d:04:75:c1:38:e8:42:dc:7d:51:
97:1a:7a:46:02:70:cc:12:58:92:81:7b:0c:81:3d:
05:d4:12:e1:02:1c:02:77:0c:05:27:10:a6:b1:c3:
07:ed:50:93:d6:a0:74:1c:7b:72:29:37:69:09:42:
b6:6f:ef:bd:0b:2a:09:ad:69:12:f4:3f:88:1d:93:
ba:ce:3e:48:08:d5:d1:d2:3e:2c:c7:cf:c2:de:9f:
58:9a:7b:f3:55:2d:e3:c9:8c:25:ef:2f:ab:b3:c7:
dd:79:72:1d:26:2d:84:17:55:29:7c:6f:eb:57:ab:
07:e8:b4:1c:a0:25:af:c9:0d:72:2f:7a:47:66:42:
23:36:43:01:b8:16:6d:2c:b4:c3:2e:9e:5f:5a:56:
24:0f:1d:8c:13:e0:c3:4e:3f:4f:0d:59:30:4e:ed:
b5:15:7a:a5:75:ef:fb:24:3c:9b:d1:77:29:da:ff:
8d:e7:d2:de:e2:83:b2:d2:cf:08:b4:54:7e:88:a0:
ee:d1:28:09:9b:85:80:bb:f4:d6:b7:25:bf:1d:cb:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:A1:FD:22:94:28:6C:62:A2:5C:DF:F7:32:78:47:00:9C:05:F1
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:75:c8:94:7a:54:7d:b9:55:69:07:71:c8:3c:39:f2:f0:2a:
1d:a4:49:5c:7d:27:c6:22:5f:e5:7c:12:02:c0:c7:85:c9:98:
0e:a0:0e:bf:cb:12:12:50:25:2b:79:dd:7e:a9:4d:f4:7c:3a:
c0:57:ac:81:fa:69:cc:10:b2:58:62:d2:3b:62:4a:3c:b6:ef:
4f:38:f0:c6:de:f8:60:61:68:36:06:0f:8f:04:a9:a1:22:49:
6e:01:81:f4:8b:d3:3e:a5:a5:f4:43:af:67:b4:a4:4f:43:78:
9c:1e:77:08:06:e6:b6:45:51:cf:64:ae:9e:11:89:2a:55:82:
8e:f1:99:f7:5f:a8:6e:14:3b:b8:bb:0c:7c:88:47:87:dc:5c:
50:d3:44:40:81:70:20:57:18:26:91:50:ba:79:b2:3f:c9:fd:
f4:b2:79:5d:ef:28:e9:df:64:71:cf:2c:7d:f2:4f:6e:59:6b:
cf:3e:29:85:0e:50:6e:2a:cf:fe:80:5a:17:a9:2e:39:ea:2e:
46:06:cc:26:ca:74:37:e7:ff:00:0f:54:28:49:6c:9f:a4:3d:
7d:11:6c:95:dd:dd:27:58:7a:38:73:4d:ac:ca:94:cf:83:cd:
6c:f1:1e:a9:cf:6f:42:64:4e:a2:e3:12:fb:09:a8:43:0f:86:
08:65:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:09 2026 by rpki-client