Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: p0V0l32vjoUGVywnyzW100AI9gv+90bqJ9cmRtpmIyA=
Subject key identifier: BD:FD:AA:BA:9D:92:BF:1B:6D:91:7F:53:50:D6:1D:5B:9D:B8:BA:77
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019D2A3BEF504524256BB1818F4235C43910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0719
Signing time: Thu 26 Mar 2026 13:01:04 +0000
Manifest this update: Thu 26 Mar 2026 13:01:04 +0000
Manifest next update: Fri 27 Mar 2026 13:01:04 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 2eK0sk7O8AhhQj060RoQaCPAGMrZxGF1XpoPtiJ0JUE=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ef:50:45:24:25:6b:b1:81:8f:42:35:c4:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Mar 26 13:01:04 2026 GMT
Not After : Mar 27 13:01:04 2026 GMT
Subject: CN=bdfdaaba9d92bf1b6d917f5350d61d5b9db8ba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:85:56:ae:97:08:60:c4:bc:54:a3:2a:57:
d0:7c:a2:db:54:a9:64:f9:be:c3:09:66:cc:36:fa:
c6:6f:18:e1:b6:3a:4b:3a:dc:e8:29:16:b3:d9:9c:
f8:99:5a:bb:21:2a:5a:7c:ba:3b:97:3b:0a:e9:72:
15:47:ff:8f:14:23:5e:24:99:fa:fe:95:8e:8a:bf:
b3:47:88:28:73:a6:31:e4:ed:62:22:66:4f:7d:6a:
2a:e2:91:e3:dc:24:33:e8:b2:b8:8c:48:01:55:57:
ac:1b:88:f3:a2:c3:44:9f:e4:b6:74:6e:1e:ae:3c:
44:40:31:b5:ef:b0:41:6d:20:76:4b:ab:7c:b0:43:
a7:21:2f:89:fd:7a:e8:47:65:17:0f:df:93:fa:a0:
53:73:07:31:37:ab:25:95:ab:63:a1:be:af:a8:0b:
c0:cc:3b:16:ff:41:11:f4:ca:f1:fb:1b:d8:8b:38:
89:78:c9:1a:82:47:3e:a2:76:fb:26:6b:51:ce:fd:
8b:62:b2:57:66:d7:16:de:ac:c3:86:28:d3:bc:87:
13:4f:44:a8:e0:3b:77:11:14:6b:90:c4:66:19:87:
76:a1:88:50:d1:a5:06:51:5f:0a:31:55:d8:ef:07:
60:d7:f3:21:c8:5e:ed:43:e8:3c:41:b8:d2:f4:03:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:AA:BA:9D:92:BF:1B:6D:91:7F:53:50:D6:1D:5B:9D:B8:BA:77
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:da:4c:f5:78:ab:78:37:87:98:20:cd:3b:5f:43:59:39:fd:
07:d2:34:95:d6:4c:92:b6:1f:3c:d3:d8:01:1c:5e:75:52:5a:
7c:ff:a0:50:79:a6:2a:6a:5d:a4:2d:f1:d6:37:13:b9:9f:0b:
69:d2:72:61:ba:60:4c:9e:e4:9b:6d:72:d8:26:ed:e9:73:c0:
c4:e9:01:b7:73:f6:75:69:37:d4:6d:ad:fb:2e:4e:25:13:53:
ae:3a:ea:a4:28:f1:0f:f4:63:8e:f1:c6:e2:bb:a2:59:79:9b:
2f:23:45:93:e6:63:16:b9:54:6c:7d:20:27:7a:40:de:29:28:
e1:a1:64:74:a3:e8:98:de:4e:ee:d9:7b:6c:53:87:3a:4a:31:
ba:33:f5:61:73:d0:33:26:d8:68:1f:83:60:89:ad:1b:e1:cc:
93:74:d8:3d:9e:d4:ca:07:84:83:90:10:45:e1:49:20:a2:59:
bd:22:4a:9d:e6:f7:e0:c6:39:91:be:11:01:52:46:94:3d:e8:
74:73:6d:ab:14:0e:57:df:7a:c6:1c:bd:ac:01:fa:81:bf:69:
ab:31:ab:ec:3b:e6:3a:2c:48:9a:ee:20:c4:00:6c:9b:81:dc:
f8:b1:6d:b6:dc:15:34:67:ee:e4:ca:65:e7:35:dc:fe:fe:56:
c6:75:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:21 2026 by rpki-client