Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: VKi1NZEFtaF6hfR3K5BFQLmiRB5tVMYnhqlS/ZNQIu8=
Subject key identifier: 26:C4:12:2E:49:E5:B9:99:70:37:22:90:95:26:F1:8B:F4:86:4E:62
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01A113734724447D30E416485BCF0F33B64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 23:01:24 +0000
Manifest this update: Tue 06 Oct 2026 23:01:24 +0000
Manifest next update: Wed 07 Oct 2026 23:01:24 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: 0epJStE36y9M+fBJScg1KtJovA2qSS20StqE8yQdliU=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:73:47:24:44:7d:30:e4:16:48:5b:cf:0f:33:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Oct 6 23:01:24 2026 GMT
Not After : Oct 7 23:01:24 2026 GMT
Subject: CN=26c4122e49e5b999703722909526f18bf4864e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:88:42:3c:c4:4f:f8:f4:8b:4d:68:ba:c3:
a1:b9:93:9a:75:3e:37:d7:cd:d5:e1:46:c5:72:a7:
e8:0a:c2:d8:91:77:f3:61:c3:c1:a4:f3:b9:97:65:
79:2b:22:f8:47:fd:c1:33:66:1f:48:e8:cb:3b:33:
6b:a2:6a:c3:e7:27:d6:c6:95:82:6c:75:ef:b4:4b:
1d:94:cc:8f:e0:7c:d2:5e:bf:75:07:e3:29:e5:4f:
1a:f1:d0:3b:ee:dd:c8:60:a4:b4:bc:e6:a4:00:56:
9c:99:cd:3e:1c:ce:84:e3:e4:5d:5c:54:8a:d5:e9:
4d:6c:59:b0:ab:81:fb:77:ec:d9:7e:a6:0b:99:26:
0f:73:79:13:45:58:a9:2e:f3:77:ef:58:e1:dc:a5:
42:25:91:4d:ae:0e:17:05:8c:2a:56:0c:35:69:04:
7d:0e:96:dd:69:c3:10:aa:d8:19:c4:20:d6:f1:9f:
53:4e:23:84:9c:47:05:48:a3:f9:e2:da:ec:bc:15:
35:c0:61:fe:e5:c5:26:a3:c1:39:da:61:c5:12:dd:
90:d8:8a:88:7e:7d:a7:c9:91:1a:ca:2d:ab:72:75:
7f:91:2b:d9:35:51:cc:82:10:da:17:a8:6c:6e:1d:
af:c4:75:73:dd:8c:d2:ae:87:ea:dc:22:9b:a7:11:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:12:2E:49:E5:B9:99:70:37:22:90:95:26:F1:8B:F4:86:4E:62
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7c:96:77:42:8b:46:d5:8a:fc:4a:8a:47:a2:8f:eb:60:9c:
9a:89:46:9c:39:7e:3d:c7:9e:f7:eb:cd:f4:cb:2d:0c:f3:ef:
2b:d1:02:e4:9b:02:c8:86:dd:6b:00:fc:d2:1f:46:fe:40:79:
07:a5:ad:05:94:d2:38:07:28:1b:57:4c:af:78:26:da:ab:bf:
e3:8f:b8:80:8a:29:64:52:1d:e4:75:65:ab:fe:0e:db:dc:81:
9d:57:18:54:c2:35:0b:29:24:62:8f:ef:5c:07:cd:c1:83:62:
6c:74:42:0e:20:d9:92:ec:99:96:dc:07:31:f9:b2:76:2b:ca:
fc:a6:b6:af:38:a8:4a:42:02:6f:c0:cd:0e:c1:1b:0a:be:69:
33:44:06:93:67:69:69:fe:7f:1a:89:a0:dc:be:bc:bc:d3:58:
fa:aa:21:71:9a:8d:1f:ae:a0:52:7d:d0:38:4b:9b:8a:95:36:
1c:25:fe:ac:6a:81:c4:3a:c6:38:28:67:8f:81:44:9a:90:42:
c6:e7:3e:ab:3b:8a:41:b6:88:b8:f3:f5:9c:94:4f:4d:a7:af:
6b:88:e9:63:64:0c:7e:d6:72:84:a2:60:78:7e:29:2c:92:dc:
a4:f0:be:ef:24:89:a6:0c:04:8a:6f:2a:56:d7:d9:e3:26:f8:
89:15:30:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETc0ckRH0w5BZIW88PM7ZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjYxMDA2MjMwMTI0WhcNMjYxMDA3MjMwMTI0WjAzMTEwLwYDVQQD
EygyNmM0MTIyZTQ5ZTViOTk5NzAzNzIyOTA5NTI2ZjE4YmY0ODY0ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTiIQjzET/j0i01ousOhuZOadT43
183V4UbFcqfoCsLYkXfzYcPBpPO5l2V5KyL4R/3BM2YfSOjLOzNromrD5yfWxpWC
bHXvtEsdlMyP4HzSXr91B+Mp5U8a8dA77t3IYKS0vOakAFacmc0+HM6E4+RdXFSK
1elNbFmwq4H7d+zZfqYLmSYPc3kTRVipLvN371jh3KVCJZFNrg4XBYwqVgw1aQR9
DpbdacMQqtgZxCDW8Z9TTiOEnEcFSKP54trsvBU1wGH+5cUmo8E52mHFEt2Q2IqI
fn2nyZEayi2rcnV/kSvZNVHMghDaF6hsbh2vxHVz3YzSrofq3CKbpxE0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbEEi5J5bmZcDcikJUm8Yv0hk5iMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHyWd0KL
RtWK/EqKR6KP62CcmolGnDl+Pcee9+vN9MstDPPvK9EC5JsCyIbdawD80h9G/kB5
B6WtBZTSOAcoG1dMr3gm2qu/44+4gIopZFId5HVlq/4O29yBnVcYVMI1CykkYo/v
XAfNwYNibHRCDiDZkuyZltwHMfmydivK/Ka2rzioSkICb8DNDsEbCr5pM0QGk2dp
af5/Gomg3L68vNNY+qohcZqNH66gUn3QOEubipU2HCX+rGqBxDrGOChnj4FEmpBC
xuc+qzuKQbaIuPP1nJRPTaeva4jpY2QMftZyhKJgeH4pLJLcpPC+7ySJpgwEim8q
VtfZ4yb4iRUwyQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:39 2026 by rpki-client