Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: fwM+Akix+7gGG+3+LTdGN2aRZdbdKNtoUvdQFagwuzM=
Subject key identifier: 1D:DA:E9:2B:08:6A:BE:81:1F:11:58:B6:76:8F:EC:E8:89:D3:2A:50
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 01A0BE426B64ECCF5B26C43BB8B258E0FB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 087A
Signing time: Sun 20 Sep 2026 10:00:18 +0000
Manifest this update: Sun 20 Sep 2026 10:00:18 +0000
Manifest next update: Mon 21 Sep 2026 10:00:18 +0000
Files and hashes: 1: LvA-DXvOTCK8Orqt4VzeNg8BUK4.roa (hash: YdFNI2QGP+MM9vnMfnGnTiV+Xb9h8j22WQZABhAwhgw=)
2: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (hash: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=)
3: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: zAE97a675sY2DJnOpLQClOmPcLAW+Mz9ab6pwzIdPvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:6b:64:ec:cf:5b:26:c4:3b:b8:b2:58:e0:fb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Sep 20 10:00:18 2026 GMT
Not After : Sep 21 10:00:18 2026 GMT
Subject: CN=1ddae92b086abe811f1158b6768fece889d32a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:d3:e2:03:bd:85:3f:a7:00:5f:cb:e8:7e:
f7:df:58:78:81:3f:27:7d:cb:6d:de:05:9d:0b:6d:
56:59:6b:37:32:0b:7d:1a:2f:73:6c:9b:1a:21:60:
1b:68:39:a7:4b:7a:4a:3b:74:cf:e8:25:7c:31:bc:
ee:a7:43:71:ce:23:61:38:26:cc:bd:f5:0b:58:94:
b5:ac:c7:e6:e8:aa:20:40:b9:ec:24:b8:df:12:9f:
8c:d9:3d:5c:6f:02:df:02:62:6a:ee:64:b7:f8:92:
a7:17:80:cc:28:52:35:aa:88:01:6d:6f:16:87:af:
35:c4:f2:79:a2:cd:fa:c6:21:e6:c6:21:0a:82:7d:
73:72:36:6f:8c:1a:be:c7:3c:f0:5f:35:e0:13:c6:
2c:13:09:49:2d:d7:ac:26:3a:19:84:22:5d:0a:f6:
16:55:a3:52:f0:22:d1:ca:b2:b3:16:38:e2:1b:c6:
34:5f:b3:8d:29:50:5a:0a:9b:e7:5c:a8:ea:21:f8:
45:5b:5a:b3:61:7e:e6:ce:57:a0:3c:9b:46:ac:73:
99:ef:0a:9b:72:ea:1b:81:4e:7a:10:6c:0e:9a:ce:
ee:2b:a7:31:0b:1b:59:8f:30:d8:fe:b1:7b:b8:ba:
96:89:4e:6c:b5:ee:3c:a7:67:f7:73:0d:d4:d4:b1:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:E9:2B:08:6A:BE:81:1F:11:58:B6:76:8F:EC:E8:89:D3:2A:50
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f9:33:42:37:ee:bc:3f:0c:09:5f:43:7d:4c:d6:05:ab:39:
4d:e3:6a:c5:9b:ff:12:05:91:e0:ed:f3:c4:c2:ef:62:b9:44:
1c:ba:cd:92:0f:d5:48:af:c3:dd:64:5d:53:5c:9f:ad:9c:f9:
ef:50:e6:ef:3c:44:e3:9c:41:39:a6:86:19:82:f1:91:fb:35:
fa:b7:94:a1:a8:36:03:bd:bd:4d:75:07:3e:29:84:23:65:eb:
5b:c9:6d:b5:38:08:c2:19:07:bd:2e:5c:ee:06:c5:37:72:16:
9b:28:54:d3:af:3c:9e:3a:4d:e7:60:13:b1:86:92:ee:6d:b5:
b0:89:c7:07:c9:d3:7f:c2:87:d9:3f:1e:24:6c:79:56:ab:ea:
99:95:a1:ff:99:fc:77:1e:1e:30:19:38:e1:f5:8e:c9:5e:6c:
64:90:32:1c:7f:61:53:6f:bd:b9:e6:4f:06:05:81:a1:22:5d:
c4:78:67:42:32:9b:12:5a:73:27:d0:cc:64:8a:4f:0c:e1:10:
16:42:cf:65:d1:69:c3:6e:f4:8e:02:cc:b3:2c:d0:5a:c7:70:
c5:70:0a:60:74:07:c5:4d:58:14:d9:89:5b:e8:f3:90:be:5c:
28:18:2a:ed:97:e7:6a:69:12:37:e0:53:08:23:ce:19:f1:de:
32:c9:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:33:42 2026 by rpki-client