Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: u1VbSuAo7Ic+jal/+hp2CflMpP3PPEu+HptLvnd5Z7o=
Subject key identifier: AB:D3:A0:BF:A7:2D:ED:B2:BA:B1:4A:F7:9E:EE:7F:DB:8F:8E:A5:CC
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019D984FA15BF2C1EEDEBD5A8EA47E112D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0752
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: Y6F+niHH+WwgirqS0vCFEOgoXZrMD1OBIynDlP0g3dE=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a1:5b:f2:c1:ee:de:bd:5a:8e:a4:7e:11:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=abd3a0bfa72dedb2bab14af79eee7fdb8f8ea5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:ea:35:a2:ac:b8:73:50:7e:c9:72:ec:26:
f8:59:96:b3:41:cc:86:74:88:42:8f:bc:ec:ac:2d:
df:b7:17:82:db:bb:e5:fb:87:60:ef:cb:9d:58:7c:
7f:f8:91:d3:12:76:53:5c:5d:8a:70:f6:48:50:9d:
d8:d6:d0:bc:30:d6:c5:b4:21:69:d0:55:35:c0:c9:
15:20:e1:4a:78:3b:ad:de:c9:fe:56:d5:0c:e7:4a:
11:a3:b0:24:fc:d1:8d:31:15:0b:37:07:59:21:9c:
36:59:55:cf:2a:ec:c2:49:6a:a4:44:63:1d:7e:bc:
21:99:9c:4a:90:28:18:c8:38:9e:f0:ae:a5:46:eb:
be:ca:38:c6:2c:0d:98:4c:98:06:a2:86:ed:93:6a:
a6:c8:b5:8d:a0:63:d7:b6:dd:8b:3a:f4:22:42:2e:
21:74:ba:f6:79:07:b7:b4:70:ce:db:d9:40:43:be:
17:39:e9:b3:ed:49:03:77:4e:01:c2:bd:06:2a:60:
af:c4:e1:a6:49:00:60:38:71:7b:40:19:97:5b:88:
6f:ac:21:e1:58:9b:4d:b6:62:29:e3:86:59:bc:a9:
cc:21:81:a9:3d:80:71:ad:d9:85:e3:ee:bc:4a:96:
41:3d:1e:ef:c0:6a:2b:27:c6:29:a6:ab:aa:b2:82:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:A0:BF:A7:2D:ED:B2:BA:B1:4A:F7:9E:EE:7F:DB:8F:8E:A5:CC
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:71:5c:db:25:7e:f3:ab:d9:58:cb:c2:4d:ce:13:75:83:
88:78:74:f0:c7:21:5d:31:c0:30:8d:aa:91:54:73:34:e9:13:
00:82:ca:8a:d0:fa:41:6f:fe:e5:fc:db:e6:e9:2e:17:70:e3:
cb:a2:70:88:82:f7:50:02:8f:86:ab:e5:83:91:d4:20:36:67:
32:0d:cf:72:7d:2e:a5:b1:0b:da:57:b3:6e:8a:3b:b3:c1:aa:
ff:de:39:fe:09:f7:e8:f6:44:58:34:30:11:bc:56:ad:ad:c9:
cb:ba:1d:8e:52:e6:80:fd:ad:94:f4:f0:7c:93:b9:25:5d:2d:
45:8f:bc:fd:81:32:c6:64:1d:7f:4f:c7:67:76:c3:f2:7d:e1:
e2:6b:a0:e8:7b:f7:37:fd:ee:11:84:7f:42:1d:89:f3:2c:8c:
f2:85:27:cc:d1:27:f0:50:94:2f:cf:15:9d:f0:70:bd:29:30:
e2:e1:1d:5e:41:0d:fd:fd:2d:94:d9:de:84:aa:d8:da:c8:c1:
68:9f:03:8f:af:cc:8f:08:57:40:d9:a1:ab:b7:52:85:0a:3d:
41:be:77:0a:1a:26:37:21:c2:02:49:01:c1:6b:8f:19:15:21:
e7:7d:8c:fb:7e:7b:51:2e:c4:a7:13:28:c9:fc:2b:30:19:f0:
0f:48:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:04 2026 by rpki-client