Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: LJJwLUY7JsrOZO4Jefr/eU2iIYqXrPfNAg66TlY7qx4=
Subject key identifier: BF:88:D6:FB:0E:C9:0C:23:0A:27:FD:3E:8C:CF:DA:BE:02:E8:15:80
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019F905A98EBA43C5F99E1DDA5ACA875153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0857
Signing time: Thu 23 Jul 2026 19:01:24 +0000
Manifest this update: Thu 23 Jul 2026 19:01:24 +0000
Manifest next update: Fri 24 Jul 2026 19:01:24 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 4FqbDR0Z3qDvnqvQcrrsHt0aMKH+TAM2mAtBIwr1UFE=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:98:eb:a4:3c:5f:99:e1:dd:a5:ac:a8:75:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Jul 23 19:01:24 2026 GMT
Not After : Jul 24 19:01:24 2026 GMT
Subject: CN=bf88d6fb0ec90c230a27fd3e8ccfdabe02e81580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:d4:65:15:f1:1e:2f:26:1d:74:40:9b:3f:
52:e2:a9:9a:f5:1a:ee:8c:a7:2c:df:46:b3:db:c4:
f7:f5:a2:07:bc:d1:ab:f4:6a:5a:b0:fb:c5:c8:51:
4b:6f:e2:96:2d:54:cc:d8:39:c2:9b:88:1b:93:28:
71:1a:9d:d3:4b:be:b8:47:62:e8:c6:6a:a6:62:13:
47:3a:cd:d7:68:95:a2:2f:4e:bb:9d:43:c1:b8:fc:
6b:98:4e:00:6b:97:fb:30:29:dd:af:51:da:14:60:
27:69:57:9d:ef:ca:89:4d:21:83:55:ff:09:68:53:
96:10:fa:3a:98:e0:af:de:27:a3:a0:99:39:d7:70:
6c:79:67:5f:02:32:e5:c4:f2:2d:1a:b3:3a:b6:5a:
e8:82:2e:fa:74:a3:f4:32:09:bb:66:38:0a:83:d6:
c8:38:78:10:1e:64:10:92:75:a3:7f:40:c8:5e:bb:
21:e7:30:a9:0a:a3:2d:06:0e:0f:6c:00:f6:33:7e:
8c:ef:cd:1c:2e:73:6d:3f:0f:85:32:9b:2c:a9:b4:
36:11:ec:e8:23:e5:06:ab:87:31:2b:9f:0e:b6:c1:
a0:81:71:d0:49:8f:07:d6:63:cb:89:9c:2d:fb:61:
d4:b3:27:bf:56:f7:a3:b6:9a:dc:5e:f8:d8:3f:bb:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:D6:FB:0E:C9:0C:23:0A:27:FD:3E:8C:CF:DA:BE:02:E8:15:80
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:fb:fc:c7:53:67:4c:ae:c3:7b:09:72:ce:3e:d4:93:31:
e3:09:2f:41:91:1f:37:ba:4d:69:e9:be:25:e5:31:bc:f9:90:
8f:4e:8e:f2:a9:f2:fd:01:55:23:e0:72:2f:50:62:f2:2c:45:
b6:eb:d7:98:2e:52:ba:9c:8e:3b:13:3c:35:24:cd:9a:ba:ea:
90:84:00:71:96:b2:18:fc:7b:84:52:c5:3e:ab:a2:6f:60:87:
ba:db:a7:46:d0:0f:40:0a:a0:ca:a1:85:75:b4:19:60:f2:0f:
54:74:dc:3b:a6:bd:27:8a:4b:22:bf:6e:0e:f6:cc:0a:0c:4b:
8d:ea:5a:95:0c:c6:3f:0b:aa:d0:78:39:a1:3c:0b:b7:9c:71:
d6:49:32:0c:31:57:bb:ce:cb:a7:aa:ef:ff:e8:91:5b:e9:21:
7d:3f:44:d3:cc:55:93:3e:4b:71:67:99:07:e0:78:fb:12:50:
6e:73:25:29:31:59:39:58:5b:e7:f7:f0:4f:91:a0:ac:de:2a:
c6:8f:9b:47:a2:96:62:8f:3e:b9:a3:d6:02:ee:15:b0:4d:18:
34:e3:72:0a:50:9f:ab:60:19:0f:98:eb:29:e0:32:ba:44:93:
58:a8:d5:2e:e0:b9:92:d7:e1:6d:44:63:ee:93:ae:b2:2b:3b:
07:6c:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:04 2026 by rpki-client