Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: AROa5uFW1AeU9izbFqGRGsr8cmgcA7XG35QrVR6Bmck=
Subject key identifier: 44:6A:47:99:A2:0D:75:23:DD:5E:26:3E:CC:62:99:17:05:93:26:A6
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 01A021319AB47AE2B9424364E46EE625B84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 08A2
Signing time: Thu 20 Aug 2026 22:01:33 +0000
Manifest this update: Thu 20 Aug 2026 22:01:33 +0000
Manifest next update: Fri 21 Aug 2026 22:01:33 +0000
Files and hashes: 1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: h6sVGxt/BSAYkrwUDUIvtbGAfc/tethnC6ap10nnweU=)
3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:9a:b4:7a:e2:b9:42:43:64:e4:6e:e6:25:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Aug 20 22:01:33 2026 GMT
Not After : Aug 21 22:01:33 2026 GMT
Subject: CN=446a4799a20d7523dd5e263ecc629917059326a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:37:07:60:88:71:bf:49:75:63:46:14:0b:
04:40:56:f2:ff:03:15:13:e8:35:de:3c:e1:02:88:
51:a0:3f:40:33:3f:c5:2c:b3:6e:d7:6d:79:51:75:
e6:3b:ed:32:f0:91:05:94:b5:d0:01:1a:d2:b1:f3:
2e:bb:d5:46:83:78:35:1b:34:e0:f6:f4:c8:88:21:
b4:2c:a2:a0:80:e6:01:f5:b4:a7:37:ef:c7:bf:dc:
8a:1f:4c:49:55:cc:b0:03:47:dc:9f:f3:4f:ad:58:
71:18:ee:9f:20:be:ff:a1:9a:41:ca:1b:f7:3d:f6:
f0:44:54:ed:29:8e:c4:1b:1e:b5:e0:7a:29:bd:6d:
2d:ec:5c:14:a4:d2:8e:07:7a:de:bd:47:7b:bd:35:
56:9c:f4:e5:74:77:be:c5:b9:1d:a0:35:7a:ce:02:
eb:82:27:76:2d:e8:d6:1a:dd:9e:86:55:2d:12:c1:
01:2b:28:bf:5f:12:19:09:da:4d:e3:0d:0c:d4:f8:
b7:29:b2:3b:3d:db:6f:62:7c:d8:bc:dc:70:30:3c:
89:e9:29:c2:0e:97:c3:ea:8c:86:98:66:83:59:9c:
b2:c2:2e:73:8b:d2:7b:45:d0:ba:3a:7f:ed:51:0b:
25:e4:a5:ee:86:ba:58:fe:5b:13:a4:ed:91:2d:b0:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:47:99:A2:0D:75:23:DD:5E:26:3E:CC:62:99:17:05:93:26:A6
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9f:32:8f:83:33:e2:0d:d5:35:de:fb:45:bd:22:3a:74:d0:
a6:aa:1c:dd:73:2f:ba:d5:75:8a:a5:84:24:85:e4:1e:10:b5:
8f:49:aa:6e:4b:3c:94:25:93:c6:da:62:47:e0:2f:1e:41:58:
70:38:17:67:7e:d6:64:95:ad:16:44:74:14:35:27:27:75:a7:
fb:6f:3d:2b:c6:27:3a:c5:ec:8c:17:b9:b8:a4:7b:1f:20:c8:
f8:48:30:5b:7e:6b:ef:8c:7d:97:8a:12:c6:91:2d:88:c9:91:
ec:f8:e1:e9:43:53:26:30:0e:44:33:6e:f1:82:7b:77:84:fa:
e9:8f:19:24:d4:1f:ae:e2:e5:6b:e1:1b:69:a9:1c:a4:2d:c4:
f2:52:b5:db:ac:19:bc:ea:e8:4b:10:73:46:21:96:cb:4b:b3:
57:99:a3:a3:7b:7d:c8:6f:38:9c:4e:ee:c0:ac:7b:c3:3d:38:
88:16:48:b9:fa:92:29:52:d1:51:ba:66:8a:fa:19:11:bb:50:
d0:a6:1f:84:ce:e0:dc:83:41:ac:85:65:67:b5:88:c0:e3:4f:
19:1a:fa:79:c0:59:4a:4e:e7:1d:68:f6:3a:a0:91:81:e2:6f:
44:81:ce:09:c9:cb:a6:25:87:3d:e7:2c:cd:65:83:8b:10:6f:
b1:4d:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:12:11 2026 by rpki-client