Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: /SUO/z8UXPB2FHu+/oG2coSpeNKt3gqqeMxzoQPw2j0=
Subject key identifier: 6B:17:8D:48:8C:66:75:26:2D:5A:DF:A3:7C:2F:0D:8A:15:64:99:8B
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019E1D9004CA0C4E45BE6138E994370EBF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0797
Signing time: Tue 12 May 2026 19:00:38 +0000
Manifest this update: Tue 12 May 2026 19:00:38 +0000
Manifest next update: Wed 13 May 2026 19:00:38 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: wwKkfIXBtKObt720eNULDcegmkr6t+xGMQJ0vrd4Qn0=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:04:ca:0c:4e:45:be:61:38:e9:94:37:0e:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: May 12 19:00:38 2026 GMT
Not After : May 13 19:00:38 2026 GMT
Subject: CN=6b178d488c6675262d5adfa37c2f0d8a1564998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:16:a7:d3:fc:d5:0a:fb:70:3f:ab:eb:bf:
4b:6d:c9:fe:c8:ad:b6:cc:19:5b:ec:82:92:79:23:
a3:a5:97:77:3f:ea:d1:25:eb:06:c4:a5:4c:8a:95:
7c:ae:94:b1:b0:a6:16:11:89:e6:af:e0:95:f6:bf:
7a:41:98:c6:89:88:77:93:67:8c:14:b3:24:41:19:
fd:40:4b:4e:69:c6:a1:9b:4a:25:d2:8a:cc:21:fb:
2e:7f:95:a8:a8:fd:e8:29:4f:4a:59:71:a3:f0:a9:
7a:c5:75:33:c0:89:aa:fc:68:0c:d6:f8:68:42:7d:
be:37:b0:6f:3b:0a:fb:ca:1b:a8:50:31:95:5a:06:
e1:7b:70:aa:58:82:7c:38:c6:4f:e6:ff:bc:ac:74:
bd:c8:ff:14:ca:6f:aa:4b:e5:c9:02:38:1f:61:25:
89:2c:2b:2a:47:db:27:a1:f2:2c:0f:75:4c:25:83:
35:3d:50:08:b3:46:7b:c6:13:50:b2:15:86:c2:95:
89:5e:40:4b:b8:61:fc:16:39:ef:fd:fb:99:e0:c9:
66:24:2d:53:22:1e:e9:f7:8a:93:ce:f5:2e:21:05:
9e:ac:5f:1c:40:68:67:2d:d6:90:6f:10:52:7a:85:
df:cc:64:23:bd:d5:f3:55:34:11:cc:67:cd:ca:b3:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:8D:48:8C:66:75:26:2D:5A:DF:A3:7C:2F:0D:8A:15:64:99:8B
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:7a:62:b1:e6:54:8e:fc:3f:93:16:8a:4f:18:e5:81:31:
bb:24:02:fe:5d:98:13:d3:84:1a:e0:58:a7:56:2a:bf:5f:60:
25:ae:20:32:76:fd:c3:f7:75:a2:46:b5:af:e2:41:cc:72:c2:
9d:7c:6c:fb:51:27:c5:25:32:42:1c:7a:43:ac:46:cd:d6:5c:
d5:e6:05:60:02:60:9a:69:94:a0:81:19:af:ba:4e:00:20:6b:
29:bd:e5:c9:5c:2a:42:54:b4:e9:27:17:a1:b3:6d:87:ff:b0:
46:af:bb:ea:09:0a:c6:38:58:87:0b:16:52:84:f1:09:46:61:
92:c3:69:ad:51:c9:d5:3b:cb:4f:18:ec:2e:83:97:ea:7e:18:
72:eb:82:78:ec:8c:cd:96:d3:44:ce:e2:2c:22:ce:aa:fd:83:
7a:04:f8:e5:90:31:66:15:f7:b2:2a:d1:2e:a9:97:f0:5d:7e:
56:05:dc:79:cc:ef:71:17:8d:0b:d0:30:4d:bf:49:7e:c5:94:
b3:1f:67:bb:d5:20:61:20:a6:e1:de:38:46:c9:13:99:b1:5e:
9d:bf:89:54:b8:b8:f5:ff:cf:2f:35:5b:e3:f9:4c:e5:87:16:
16:a2:d6:51:f7:31:15:99:71:ba:02:fc:a0:73:37:84:35:a9:
5f:81:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:50 2026 by rpki-client