Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: /T0t6RF9Q+9bv+dQVuKsZmwhFfgjIx/rejJyCg4e4j8=
Subject key identifier: A1:28:5C:0A:94:68:9B:58:BE:EC:E9:76:30:31:5E:24:A6:88:5C:2A
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 01A0C74620CC9EAE566041DA878227304430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 08F8
Signing time: Tue 22 Sep 2026 04:00:56 +0000
Manifest this update: Tue 22 Sep 2026 04:00:56 +0000
Manifest next update: Wed 23 Sep 2026 04:00:56 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 1zzAZ/+7yRtyiixqbXSgozXxqP65+56MhJ/ZHQEemUE=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:20:cc:9e:ae:56:60:41:da:87:82:27:30:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Sep 22 04:00:56 2026 GMT
Not After : Sep 23 04:00:56 2026 GMT
Subject: CN=a1285c0a94689b58beece97630315e24a6885c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:20:e1:1a:d6:b9:36:03:82:1e:ca:45:43:
56:ff:15:e3:29:01:a4:39:c6:47:59:ff:50:c9:b2:
21:15:22:17:fe:0d:36:0b:fe:9d:f2:e7:22:5d:05:
d6:69:75:9a:c8:a6:0c:db:45:13:a6:63:bb:a7:6c:
37:ef:bb:16:71:ef:46:6e:9c:69:9b:b8:9a:dd:dc:
b0:2c:b6:d3:7a:05:b6:87:30:62:4b:82:b1:17:2c:
af:d5:2c:be:df:04:39:36:1e:cd:0f:14:f1:c8:89:
f9:2b:be:4c:e5:bc:61:28:06:b5:05:40:84:fb:a1:
89:b4:1a:64:55:b7:2f:20:31:8d:63:5e:da:c6:5c:
00:67:4c:4b:f0:f0:d5:7e:8a:a2:dc:ef:9b:f4:ab:
4b:86:65:25:0b:b4:45:88:99:c4:26:6c:79:2a:64:
4a:1f:eb:f6:98:0d:18:86:6f:6f:c4:65:91:af:50:
b7:81:f5:49:e9:ae:68:cb:b4:b3:7f:b7:cc:ed:a2:
ab:bc:4b:69:70:78:97:4f:04:29:c3:d5:ab:04:b5:
7e:fa:d6:3a:56:6a:e8:ad:52:a0:82:d6:26:c0:05:
21:5e:e5:86:d5:34:95:5a:cf:64:04:43:d2:91:ed:
9a:93:7b:c3:d8:05:4c:fd:b4:62:63:08:ba:1d:4f:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:5C:0A:94:68:9B:58:BE:EC:E9:76:30:31:5E:24:A6:88:5C:2A
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:92:33:80:39:64:9c:8b:8f:10:7b:f7:ba:d1:22:3e:e6:
2a:d6:bf:af:4d:50:4d:40:b2:bf:85:d1:99:81:a7:61:bc:95:
8b:f0:d4:37:4b:b2:07:fb:2b:a3:24:e0:0d:4d:e4:5f:76:55:
77:4e:b0:80:52:e3:be:e3:c4:c5:88:21:03:b6:45:09:84:82:
a0:5d:cf:2a:3d:fc:d7:71:4f:aa:d0:9c:d8:49:a1:bc:81:2b:
bd:e8:f4:7a:00:a1:84:34:3a:e1:81:82:39:f7:81:ff:94:5c:
de:25:36:30:5e:ed:4c:65:3a:e7:f7:96:75:22:5d:2b:3c:d8:
0f:43:bc:24:59:1e:23:2e:b3:d7:7b:92:55:dc:ba:b1:b9:ec:
86:06:e9:95:73:9c:50:b9:b1:1d:ff:7f:c0:38:1e:a0:09:30:
bd:22:b8:60:bb:da:6e:eb:3f:8d:0b:3c:82:67:84:a1:f2:09:
52:d5:e7:00:f5:22:b5:77:48:d7:20:37:24:81:ab:a6:83:8c:
51:80:71:9a:18:2e:b0:5d:83:c7:7c:30:49:94:3a:27:e5:48:
88:e0:fb:8a:75:a1:ae:3a:51:14:cb:a0:e1:48:92:e5:4b:dd:
63:f6:e4:8c:8b:28:5f:29:a2:30:10:40:93:9b:fa:b3:12:6d:
fc:94:ba:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRiDMnq5WYEHah4InMEQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm
Y2FlZjgwHhcNMjYwOTIyMDQwMDU2WhcNMjYwOTIzMDQwMDU2WjAzMTEwLwYDVQQD
EyhhMTI4NWMwYTk0Njg5YjU4YmVlY2U5NzYzMDMxNWUyNGE2ODg1YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpUg4RrWuTYDgh7KRUNW/xXjKQGk
OcZHWf9QybIhFSIX/g02C/6d8uciXQXWaXWayKYM20UTpmO7p2w377sWce9Gbpxp
m7ia3dywLLbTegW2hzBiS4KxFyyv1Sy+3wQ5Nh7NDxTxyIn5K75M5bxhKAa1BUCE
+6GJtBpkVbcvIDGNY17axlwAZ0xL8PDVfoqi3O+b9KtLhmUlC7RFiJnEJmx5KmRK
H+v2mA0Yhm9vxGWRr1C3gfVJ6a5oy7Szf7fM7aKrvEtpcHiXTwQpw9WrBLV++tY6
VmrorVKggtYmwAUhXuWG1TSVWs9kBEPSke2ak3vD2AVM/bRiYwi6HU/obwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEoXAqUaJtYvuzpdjAxXiSmiFwqMB8GA1UdIwQY
MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt
ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli
LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOGSM4A5
ZJyLjxB797rRIj7mKta/r01QTUCyv4XRmYGnYbyVi/DUN0uyB/sroyTgDU3kX3ZV
d06wgFLjvuPExYghA7ZFCYSCoF3PKj3813FPqtCc2EmhvIErvej0egChhDQ64YGC
OfeB/5Rc3iU2MF7tTGU65/eWdSJdKzzYD0O8JFkeIy6z13uSVdy6sbnshgbplXOc
ULmxHf9/wDgeoAkwvSK4YLvabus/jQs8gmeEofIJUtXnAPUitXdI1yA3JIGrpoOM
UYBxmhgusF2Dx3wwSZQ6J+VIiOD7inWhrjpRFMug4UiS5UvdY/bkjIsoXymiMBBA
k5v6sxJt/JS6qA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:30 2026 by rpki-client