Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: ndJN8Fc1+asmFJv/V2GmhtCpp8U3pVcjPaQvMyuye6Q=
Subject key identifier: 6E:1A:56:DA:8D:F5:7E:4D:4D:3E:0C:20:A1:26:AD:93:A1:1C:E2:27
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019EBDDA917EE5608847FA550829B492535C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 07EA
Signing time: Fri 12 Jun 2026 22:01:18 +0000
Manifest this update: Fri 12 Jun 2026 22:01:18 +0000
Manifest next update: Sat 13 Jun 2026 22:01:18 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: FHUJk0lL8paFyQwsMrHn3aAtzQY56NJpeNS287dNPSg=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:91:7e:e5:60:88:47:fa:55:08:29:b4:92:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Jun 12 22:01:18 2026 GMT
Not After : Jun 13 22:01:18 2026 GMT
Subject: CN=6e1a56da8df57e4d4d3e0c20a126ad93a11ce227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:e0:a4:ac:87:28:3d:00:2f:88:56:d7:d4:
3d:f1:38:4d:00:73:bb:77:c7:bc:8d:4f:32:57:3c:
2e:b8:3f:32:b8:b7:32:04:c7:2f:f6:03:3e:2b:46:
c9:c6:ae:5d:7f:c6:bb:7f:17:b2:fb:a9:6f:1e:45:
08:d2:d2:ef:38:bc:bb:f3:94:f8:58:03:41:49:d9:
90:21:cc:7b:fb:db:37:7b:4a:c1:6e:fd:5f:ad:d0:
4b:23:cd:ac:29:97:34:4e:8d:66:59:af:c4:ca:0c:
3e:da:9d:41:d1:14:22:8d:03:81:2f:da:4c:30:1f:
9a:e9:6b:59:52:42:6b:27:70:67:38:f4:f3:6c:98:
9d:8b:31:07:66:9f:6c:7d:69:98:09:d3:af:4f:4a:
cc:27:c9:ec:7c:72:0d:56:f7:f7:37:ac:51:b6:45:
09:98:8c:62:2d:da:20:83:38:31:ed:84:1d:33:3c:
1c:f9:8e:d6:c4:1e:ef:30:16:ab:de:22:78:89:c0:
69:dd:95:64:5d:9f:d1:97:8d:94:31:fc:ac:bb:7e:
bf:9c:d2:d6:23:51:05:b5:a5:ef:4a:25:28:81:6a:
82:aa:94:c5:e0:e8:e3:f4:7f:8f:20:c1:d2:23:68:
50:3c:f5:f9:2d:74:8b:a5:c6:ad:5e:43:55:88:b3:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:56:DA:8D:F5:7E:4D:4D:3E:0C:20:A1:26:AD:93:A1:1C:E2:27
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e5:5b:ac:70:1f:75:be:02:10:21:48:84:25:d4:c5:73:db:
b0:8d:63:98:fb:4c:ac:c8:e2:1b:41:35:e5:31:60:df:f6:9c:
a2:2a:fe:a3:52:55:bc:0d:17:b9:ea:6f:56:e5:a1:14:19:a3:
81:41:8c:56:fe:54:ed:26:15:35:e2:62:35:84:64:2b:84:7d:
8c:21:be:e7:9b:45:d4:3a:04:17:d3:fa:5e:5c:81:35:5c:9e:
c6:1a:e9:94:1a:91:fd:46:26:a4:02:bf:30:4a:16:07:b9:8f:
87:01:de:2e:1a:c3:09:cb:84:8d:33:09:fb:ef:f8:8c:95:75:
ca:8f:4f:c8:a3:38:e2:3d:b1:db:30:77:52:9f:29:0d:a1:e1:
06:20:bc:b9:11:bc:f1:17:77:66:7e:5a:2c:1b:85:3b:b8:31:
b1:58:a3:2f:65:55:2d:16:64:20:53:0d:84:a0:d8:ac:eb:33:
78:e5:e2:04:a9:b4:1f:1e:63:4f:10:2e:8d:16:c9:d8:14:7b:
26:62:0c:2d:22:76:57:b2:da:b5:a0:15:ee:46:e2:9d:98:47:
17:7a:c4:d0:5a:fa:1d:87:f0:34:4d:8e:0d:85:d6:99:d4:bf:
fa:89:4e:f7:6c:46:d9:2f:a7:64:42:27:3b:42:90:5e:d6:a8:
5e:0e:e2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692pF+5WCIR/pVCCm0klNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm
Y2FlZjgwHhcNMjYwNjEyMjIwMTE4WhcNMjYwNjEzMjIwMTE4WjAzMTEwLwYDVQQD
Eyg2ZTFhNTZkYThkZjU3ZTRkNGQzZTBjMjBhMTI2YWQ5M2ExMWNlMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmargpKyHKD0AL4hW19Q98ThNAHO7
d8e8jU8yVzwuuD8yuLcyBMcv9gM+K0bJxq5df8a7fxey+6lvHkUI0tLvOLy785T4
WANBSdmQIcx7+9s3e0rBbv1frdBLI82sKZc0To1mWa/Eygw+2p1B0RQijQOBL9pM
MB+a6WtZUkJrJ3BnOPTzbJidizEHZp9sfWmYCdOvT0rMJ8nsfHINVvf3N6xRtkUJ
mIxiLdoggzgx7YQdMzwc+Y7WxB7vMBar3iJ4icBp3ZVkXZ/Rl42UMfysu36/nNLW
I1EFtaXvSiUogWqCqpTF4Ojj9H+PIMHSI2hQPPX5LXSLpcatXkNViLOAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4aVtqN9X5NTT4MIKEmrZOhHOInMB8GA1UdIwQY
MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt
ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli
LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeVbrHAf
db4CECFIhCXUxXPbsI1jmPtMrMjiG0E15TFg3/acoir+o1JVvA0XuepvVuWhFBmj
gUGMVv5U7SYVNeJiNYRkK4R9jCG+55tF1DoEF9P6XlyBNVyexhrplBqR/UYmpAK/
MEoWB7mPhwHeLhrDCcuEjTMJ++/4jJV1yo9PyKM44j2x2zB3Up8pDaHhBiC8uRG8
8Rd3Zn5aLBuFO7gxsVijL2VVLRZkIFMNhKDYrOszeOXiBKm0Hx5jTxAujRbJ2BR7
JmIMLSJ2V7LataAV7kbinZhHF3rE0Fr6HYfwNE2ODYXWmdS/+olO92xG2S+nZEIn
O0KQXtaoXg7ifQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:25 2026 by rpki-client