Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: DKPV6U0Uv1IPm2Z0deaWb9ZGWCEMtjOW3JAxsJS9RzQ=
Subject key identifier: 06:90:64:6F:CD:B7:61:62:37:70:3D:3F:E3:28:DC:EF:52:EC:3A:F9
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019FA97581D35AEB6BD3332BB57E972CDDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0864
Signing time: Tue 28 Jul 2026 16:01:17 +0000
Manifest this update: Tue 28 Jul 2026 16:01:17 +0000
Manifest next update: Wed 29 Jul 2026 16:01:17 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: fes4mGlN5/MeKecey3FCKxfJa6ZobWDh3JTa6HLhs58=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:81:d3:5a:eb:6b:d3:33:2b:b5:7e:97:2c:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Jul 28 16:01:17 2026 GMT
Not After : Jul 29 16:01:17 2026 GMT
Subject: CN=0690646fcdb7616237703d3fe328dcef52ec3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:e4:4d:78:3c:89:66:0b:24:a6:c9:73:6d:
b5:32:00:4c:fa:25:3c:6a:95:87:f2:28:bb:d7:e5:
5b:ce:aa:32:e8:f8:3c:41:d2:7a:c0:1f:d7:43:05:
a8:15:22:f0:97:32:c3:b1:03:87:85:0f:12:21:b7:
da:1a:eb:c9:9a:e7:4e:92:7f:41:4a:22:d1:9f:17:
62:5c:54:82:26:96:8f:48:ea:58:32:5e:c0:1c:c9:
ff:a9:e8:cb:00:86:ca:cc:40:c5:e5:0b:3b:82:b5:
2d:ae:23:d8:2f:69:04:3b:1b:dd:05:66:03:a3:11:
ef:68:4b:b4:6d:71:02:eb:c0:a1:30:43:0f:ee:c5:
ba:a3:d1:6e:39:9e:5e:16:c9:a9:71:2b:96:ae:f9:
dd:1b:13:1d:98:83:2a:99:fa:85:8f:65:f2:08:cd:
35:0c:3c:60:55:8b:98:ce:c9:c1:de:4b:48:d8:e1:
85:ad:56:dc:3b:83:d3:04:d3:56:08:29:7d:4c:ea:
c7:f4:ec:8c:f8:10:12:bd:d4:a4:d6:60:0c:3d:fb:
9d:da:5a:ca:8e:73:7d:3a:c8:36:12:bb:18:18:fd:
2a:30:c5:8e:1e:60:d5:f1:3b:79:b9:c5:29:a1:90:
77:3c:5f:60:91:5c:41:4f:67:92:9f:22:78:2b:a5:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:64:6F:CD:B7:61:62:37:70:3D:3F:E3:28:DC:EF:52:EC:3A:F9
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:1b:18:d9:54:bf:d9:a7:32:9d:e4:da:69:e1:7b:3a:6b:
9b:64:4d:a6:4f:08:4b:de:cc:c8:54:38:72:a4:9f:19:18:5c:
98:0e:88:e3:ba:1c:46:83:37:17:91:4f:e3:03:fe:7b:97:16:
c9:d7:8c:e4:64:04:50:52:39:3b:23:25:34:8e:84:f5:49:02:
df:f0:cb:1f:fe:bc:00:d8:eb:72:7e:c9:5f:2b:5d:42:4c:87:
a9:c8:a5:4d:bd:80:09:0c:24:ef:87:80:dd:a9:6c:e5:cb:54:
06:22:cf:c4:58:27:5f:86:73:d7:5b:b9:1e:79:1c:64:a7:b7:
ec:85:7a:fa:72:ad:de:72:63:8f:1b:97:1b:c8:86:27:ce:2c:
79:d7:f8:70:20:ec:31:5c:d4:68:65:90:6d:a2:b5:b8:c6:e1:
22:3d:55:ce:32:64:5d:1d:1d:db:df:7d:79:5c:6f:06:6b:9b:
d7:60:c9:99:81:18:3c:f2:e7:a6:6e:9c:e9:e4:d1:70:dc:1a:
62:ec:de:44:f1:12:cf:f3:c9:d6:97:3d:82:b4:12:26:ae:90:
ad:a9:a5:ff:89:1b:97:81:f1:ad:32:3b:9d:64:77:0b:1e:a2:
59:78:f9:e1:19:65:28:13:05:83:3d:78:33:68:6f:d7:2c:53:
7d:5a:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:43 2026 by rpki-client