Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: sVXBefJ4J2RZ0Ce8FCGtUY+FBdjuReYHK/hcYA18Mls=
Subject key identifier: F4:D4:6B:5C:06:BA:7B:20:B2:30:A8:AE:78:69:99:D8:86:FB:30:96
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019D389BCB4FCE10F7E4E18CB139A4BBC952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: Qf8oIngsfGanqZHcxc696sP6pUJsT4EhIoaYWcGh70g=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cb:4f:ce:10:f7:e4:e1:8c:b1:39:a4:bb:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=f4d46b5c06ba7b20b230a8ae786999d886fb3096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:ae:49:a1:b6:e8:b5:a3:88:64:08:2f:7f:
30:07:87:94:e8:0a:ba:e0:34:48:b0:3d:b6:ee:c4:
c5:80:fe:df:5e:0e:61:a8:b4:87:ea:fb:5b:4a:08:
fe:7d:73:8c:05:cc:08:6e:47:98:82:57:1e:5a:35:
62:28:8a:81:23:0d:23:e4:e1:34:87:fd:07:fa:72:
b5:9e:5e:d4:08:7e:d2:cd:31:f5:01:df:b9:e8:f4:
0c:95:a1:21:02:5e:db:c5:19:f4:a0:08:ca:c4:64:
5b:16:c9:bb:89:f3:a9:73:97:3c:07:50:33:54:97:
0f:53:2a:02:71:86:7b:e6:f0:fb:61:1f:7b:f0:0e:
ef:25:e0:16:db:04:2e:00:11:d2:ef:cf:91:a9:c4:
82:6c:10:c9:6d:d1:e9:d4:5a:66:9a:37:fc:b2:f1:
95:1c:4b:c8:ef:84:0a:89:39:52:ce:3c:78:40:ba:
cf:4b:88:87:fa:37:b5:5c:87:a5:97:59:f9:2b:89:
c1:d5:43:5f:a4:01:43:1e:6b:2f:39:d4:27:36:29:
4c:89:8f:b4:dc:09:d9:08:d2:6d:e2:59:f2:a8:6c:
8a:ad:61:44:af:2b:45:66:3e:ea:e9:ab:b0:91:b1:
bf:82:62:ac:a3:b3:70:bd:2b:c5:0a:de:5f:08:ae:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:6B:5C:06:BA:7B:20:B2:30:A8:AE:78:69:99:D8:86:FB:30:96
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:24:2c:0f:e0:b6:53:49:64:7a:e4:30:17:67:44:ce:39:30:
29:bf:28:44:50:6e:23:d5:1f:6c:9d:5f:f6:4a:b4:a1:7a:3d:
ce:ad:34:5f:01:00:a9:47:1d:fe:28:0f:d4:7a:69:04:00:7b:
9a:97:90:b1:a1:ff:37:69:b5:3e:3e:8e:d9:59:a9:0c:7f:28:
d7:49:6a:4c:b3:df:f1:27:18:92:f7:4d:7e:9c:21:21:db:5c:
6d:ef:15:f0:76:14:8d:aa:f6:65:30:f7:95:55:66:ce:b4:9e:
4c:0b:c5:98:50:7a:e1:03:97:c1:67:fa:a5:ae:10:6d:2a:33:
29:1d:cf:86:15:56:a9:75:23:44:9b:c2:5f:bc:e8:fe:7a:48:
87:b2:bb:ae:c5:7c:8f:74:5c:58:79:4f:5c:f6:94:1a:b7:21:
ad:18:72:c2:d0:fe:5a:e2:93:87:75:42:20:49:34:82:66:47:
5f:f2:cb:94:73:8a:ca:46:b6:d8:14:f9:ac:ad:d9:56:fd:1e:
0e:b3:53:dd:4a:e4:71:5a:7f:ec:51:8b:07:7e:02:14:e8:e5:
99:4d:ba:4d:af:11:ea:e5:b6:b0:df:04:cb:66:77:3d:ea:78:
cf:14:91:34:8f:86:8c:0f:e2:77:0d:5d:0f:5f:e6:4b:03:cc:
87:39:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:35 2026 by rpki-client