Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: nTdprJQqmUafVIbPE2+2TuTOz+cuuVYyNJINueR9/Ug=
Subject key identifier: 1F:B6:5D:27:1A:BA:30:55:C8:55:60:5A:65:C4:C3:79:26:83:1D:FD
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019CAAC63922C9EFA20D9EDA0CE50015C5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 06D7
Signing time: Sun 01 Mar 2026 19:00:43 +0000
Manifest this update: Sun 01 Mar 2026 19:00:43 +0000
Manifest next update: Mon 02 Mar 2026 19:00:43 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: pbHGnCJSHOSRpw7VzbdPUxdxXTHoHAmjOAUu7zo4iDA=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:39:22:c9:ef:a2:0d:9e:da:0c:e5:00:15:c5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Mar 1 19:00:43 2026 GMT
Not After : Mar 2 19:00:43 2026 GMT
Subject: CN=1fb65d271aba3055c855605a65c4c37926831dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:77:4d:db:39:18:1d:54:03:54:3b:79:87:
20:ee:4a:14:ff:34:5c:ff:c3:46:30:9f:81:68:f2:
04:6c:9e:c5:cd:77:ed:12:11:a5:b3:cb:b6:6a:ff:
5d:38:b9:d1:59:0a:6b:bc:cd:e0:38:a6:3d:00:f4:
9b:ac:10:a9:52:4b:d3:ba:79:90:a2:76:ab:91:cc:
c1:72:02:9e:4c:fc:c3:20:fd:33:13:4d:33:67:29:
24:d1:4c:9e:38:03:20:6e:20:62:1a:f5:bc:2f:36:
0f:63:78:4e:1c:62:7b:d3:82:80:32:24:a5:5e:6c:
53:8f:f5:3d:1f:c8:47:f2:d9:48:59:02:ca:07:21:
37:2b:99:d3:49:0f:71:28:65:a8:d5:8d:30:72:74:
69:ca:5f:ec:9b:f1:11:99:d7:78:7b:78:b7:dc:3b:
f5:77:36:6b:7c:06:b7:82:bd:ba:95:82:4f:f4:ff:
74:f5:bd:f9:26:ca:6f:a6:a4:36:11:ab:eb:eb:a9:
0a:45:d8:57:2a:e9:f5:fd:29:78:7b:70:9f:2b:81:
fb:cc:a2:03:49:87:01:43:24:98:3c:e9:06:d4:ea:
ba:f3:79:eb:a1:b0:23:18:12:c3:8a:56:b7:be:44:
cf:69:df:22:2d:e1:3e:fc:7f:e0:5f:f3:72:1b:c6:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:5D:27:1A:BA:30:55:C8:55:60:5A:65:C4:C3:79:26:83:1D:FD
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7c:3e:8f:c9:06:f1:96:b7:8f:c7:ba:25:f5:23:62:a2:b4:
7f:f2:da:98:77:be:a0:38:98:90:c1:d0:15:d2:84:f1:7b:93:
1a:13:9e:b5:c4:74:4a:f9:0a:1d:bb:5d:05:69:d6:44:6f:ef:
1f:7b:b7:30:51:97:cb:60:1f:23:46:6d:41:ee:8c:21:10:8a:
f3:74:aa:46:8c:63:56:12:79:50:a7:a3:98:a0:58:53:b3:73:
7e:e8:96:d6:1b:a4:7e:91:6f:a7:27:aa:c0:27:1c:63:fd:67:
5e:48:d8:ed:cf:dd:ad:15:cb:04:a3:39:30:4d:e2:af:dd:fb:
15:72:38:e8:63:86:68:14:20:2b:2d:3a:7d:e3:dc:01:fd:d7:
f0:3c:3d:ef:47:0c:a2:06:5c:c2:32:5f:8f:bc:45:0a:4f:6a:
f2:f0:f8:2d:a7:50:48:2d:fc:f7:65:9e:99:d3:01:f7:9c:ee:
7e:5b:a3:b4:54:61:c4:1c:bf:94:51:d7:76:b6:5d:2e:3c:1c:
9e:c6:b3:55:bf:fd:35:60:a6:14:20:63:74:14:f4:be:86:64:
74:3f:17:f5:f1:60:96:a7:20:47:62:55:db:f1:b3:3a:0e:28:
24:67:a9:a4:5a:ff:40:48:94:fa:ce:d9:bc:fb:28:8a:c0:15:
76:5d:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:46 2026 by rpki-client