Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: rzgVToT6XRsxSJEcHkBf6OVjkWb+uMr9Hr0ppCzgSF0=
Subject key identifier: D5:F4:60:C0:29:7F:73:60:ED:00:19:2B:E4:4E:90:87:0D:6F:A4:60
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 01A0D6BA37D797BA5CE41825A2900738B232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0900
Signing time: Fri 25 Sep 2026 04:02:03 +0000
Manifest this update: Fri 25 Sep 2026 04:02:03 +0000
Manifest next update: Sat 26 Sep 2026 04:02:03 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 4W9VJ2tHu+CP+iNDt81XwO6q839na8LTNt4mrU6Jxko=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:37:d7:97:ba:5c:e4:18:25:a2:90:07:38:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Sep 25 04:02:03 2026 GMT
Not After : Sep 26 04:02:03 2026 GMT
Subject: CN=d5f460c0297f7360ed00192be44e90870d6fa460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:d3:4c:94:36:62:ec:fd:47:30:9e:a7:98:
7e:7e:46:bb:87:d3:54:5c:db:40:62:ee:52:4c:30:
1d:5d:42:7a:80:14:e3:26:6a:52:0f:ce:34:d3:02:
cd:09:be:64:a8:37:c8:86:ee:77:8b:89:c8:46:f0:
03:d7:c9:e8:68:5b:65:6b:eb:a9:39:d7:20:12:39:
94:33:2b:34:20:d4:77:e2:4c:b7:34:d2:2b:b2:9f:
b3:bd:f1:53:fd:d0:c4:e7:4e:96:e9:86:2b:d5:a0:
73:3e:be:df:90:0a:5e:c4:21:b6:c2:5c:60:36:76:
8c:9a:37:55:31:fd:84:08:98:aa:1f:b6:77:dd:08:
a5:2f:46:b5:32:8f:df:8e:29:2e:89:68:90:b9:98:
7c:15:28:af:89:fc:ab:66:f4:b9:bd:b5:7d:b7:04:
6c:e3:cf:93:91:89:4b:02:68:98:1d:d1:4c:37:df:
95:50:8f:94:a4:9b:11:80:60:99:b8:3f:47:53:43:
73:6c:f9:d3:a4:2a:fe:15:18:66:f6:9a:b3:ed:7c:
73:8d:69:fa:d4:6f:14:4b:2c:cb:4d:35:c5:a1:ee:
16:04:b6:08:01:62:9b:1b:9c:1c:df:db:04:8a:f7:
35:78:f3:37:4c:25:d1:fc:fb:15:94:f2:fb:e0:a5:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:60:C0:29:7F:73:60:ED:00:19:2B:E4:4E:90:87:0D:6F:A4:60
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:50:96:25:ca:04:19:16:32:2c:64:b7:0f:d7:96:d7:a6:
96:42:e7:3e:db:f1:3e:d7:16:2e:19:86:77:80:55:af:09:0e:
7d:87:36:04:ed:3d:f3:91:91:eb:7c:14:12:57:36:92:db:69:
be:05:2f:fd:da:3a:71:c9:88:36:c4:5a:ff:2a:2e:6b:ee:e1:
e8:15:d0:75:60:98:88:6d:11:04:af:b0:3b:34:3e:86:9a:9c:
63:e9:01:05:90:e1:4a:e5:18:0a:38:8a:84:c4:a1:55:4e:3a:
25:20:9b:82:09:6d:9e:78:0b:2c:80:ec:ad:f9:7c:ea:51:4e:
56:6f:ff:dd:d8:a6:2f:11:5f:60:41:9b:74:74:7e:cb:77:d2:
ae:b3:9b:aa:be:6e:11:e6:8d:96:89:e0:8f:95:10:45:1f:4d:
a2:26:01:de:e7:75:4b:78:20:f7:1a:75:8c:33:63:a1:7b:69:
10:f1:0f:f5:62:e9:d0:cf:44:3c:56:9b:9c:e4:a4:72:1c:4f:
00:fc:e7:f4:06:56:12:27:cf:c3:aa:01:83:2f:63:96:6e:28:
ef:94:e4:a0:55:69:df:e7:f2:fc:dd:8c:2d:be:36:3d:d2:c7:
a9:3b:b2:e3:62:ad:03:1c:d1:71:5f:b1:fb:00:e6:63:b4:ca:
c8:24:e4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWujfXl7pc5BglopAHOLIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm
Y2FlZjgwHhcNMjYwOTI1MDQwMjAzWhcNMjYwOTI2MDQwMjAzWjAzMTEwLwYDVQQD
EyhkNWY0NjBjMDI5N2Y3MzYwZWQwMDE5MmJlNDRlOTA4NzBkNmZhNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0zTTJQ2Yuz9RzCep5h+fka7h9NU
XNtAYu5STDAdXUJ6gBTjJmpSD8400wLNCb5kqDfIhu53i4nIRvAD18noaFtla+up
OdcgEjmUMys0INR34ky3NNIrsp+zvfFT/dDE506W6YYr1aBzPr7fkApexCG2wlxg
NnaMmjdVMf2ECJiqH7Z33QilL0a1Mo/fjikuiWiQuZh8FSivifyrZvS5vbV9twRs
48+TkYlLAmiYHdFMN9+VUI+UpJsRgGCZuD9HU0NzbPnTpCr+FRhm9pqz7XxzjWn6
1G8USyzLTTXFoe4WBLYIAWKbG5wc39sEivc1ePM3TCXR/PsVlPL74KWAeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX0YMApf3Ng7QAZK+ROkIcNb6RgMB8GA1UdIwQY
MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt
ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli
LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnxQliXK
BBkWMixktw/XltemlkLnPtvxPtcWLhmGd4BVrwkOfYc2BO0985GR63wUElc2kttp
vgUv/do6ccmINsRa/youa+7h6BXQdWCYiG0RBK+wOzQ+hpqcY+kBBZDhSuUYCjiK
hMShVU46JSCbggltnngLLIDsrfl86lFOVm//3dimLxFfYEGbdHR+y3fSrrObqr5u
EeaNlongj5UQRR9NoiYB3ud1S3gg9xp1jDNjoXtpEPEP9WLp0M9EPFabnOSkchxP
APzn9AZWEifPw6oBgy9jlm4o75TkoFVp3+fy/N2MLb42PdLHqTuy42KtAxzRcV+x
+wDmY7TKyCTk4g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:54:16 2026 by rpki-client