Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: NtzBwcLWK92jErxFkUdjIN34AvanJLbfq/ImI0le2EY=
Subject key identifier: 3F:D2:46:7D:AF:5A:31:DB:87:5E:D5:B8:47:8D:CC:93:37:86:E3:D8
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019FA8D086C28C8EC7D0E5CA18711718A1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 13:01:05 +0000
Manifest this update: Tue 28 Jul 2026 13:01:05 +0000
Manifest next update: Wed 29 Jul 2026 13:01:05 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: TsXF54LYrJyNwtJa6jiehjYz7RCMqXzHi9itlsf51ig=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:86:c2:8c:8e:c7:d0:e5:ca:18:71:17:18:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jul 28 13:01:05 2026 GMT
Not After : Jul 29 13:01:05 2026 GMT
Subject: CN=3fd2467daf5a31db875ed5b8478dcc933786e3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:80:40:ed:74:52:87:55:ba:37:da:48:65:
3b:de:aa:01:5d:73:7b:dc:e1:82:15:6e:f5:1a:00:
04:16:7b:74:9d:fb:23:86:e1:54:1d:33:bc:7b:45:
28:e1:ed:4f:fe:ba:ef:b7:e4:69:79:2d:17:37:ac:
2b:40:ad:62:6c:45:73:7f:c1:5e:81:66:a1:37:b9:
c5:44:47:c0:39:0e:06:32:cc:0b:74:a5:93:32:c3:
ce:64:36:c9:82:39:fd:a7:a0:ad:17:a7:2d:65:fe:
34:16:ef:21:b6:76:d0:74:14:06:a6:0f:79:4c:d7:
f5:37:32:4e:f9:f2:2c:6c:81:97:8c:1d:1c:b8:59:
71:20:7d:ac:6d:6a:ca:5a:e0:3e:5c:be:9f:45:d2:
19:80:13:51:63:1f:c7:88:01:60:b6:13:52:5f:93:
42:a2:7d:56:a6:19:a8:8c:56:aa:e5:2a:cd:e4:cc:
1c:55:20:3b:f5:c4:03:74:c6:aa:4c:93:57:bc:9c:
05:ac:42:1b:88:8c:2f:45:c5:fe:6a:f6:aa:53:e8:
21:58:92:44:16:c7:4c:e3:fc:04:52:65:e7:39:0e:
d8:58:62:ce:29:bd:67:9b:dd:65:b2:7f:b7:df:cb:
63:e5:6a:10:92:cf:5d:31:8a:ec:25:9c:6c:d6:92:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:46:7D:AF:5A:31:DB:87:5E:D5:B8:47:8D:CC:93:37:86:E3:D8
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:83:bc:8e:33:f7:95:6f:46:b4:43:a1:92:36:c5:17:7f:
6d:de:4f:a0:b4:bd:2a:76:e2:d8:4c:56:80:10:09:7c:79:28:
d2:c8:42:dd:86:21:bc:35:3c:bc:2f:13:e8:73:80:6e:ce:2e:
bf:51:b9:aa:2c:bd:fb:2c:a6:a6:e2:cb:f0:57:fb:a9:4e:b7:
0f:c4:3d:4d:c8:36:5a:fa:26:1c:da:e4:30:7c:d2:d1:6f:63:
ec:eb:ec:b1:bf:3c:cd:4a:82:50:af:68:57:4f:fc:f3:c5:cc:
72:8c:ef:ef:1e:d0:a4:bc:74:a3:27:3c:7a:c3:fd:d1:f2:8d:
41:5c:60:ad:c4:ae:ee:3a:47:97:22:d6:e3:88:5f:37:9a:f3:
7e:82:9b:0d:1d:46:44:ca:a2:03:26:f6:97:f4:79:cb:a8:2b:
54:3e:45:94:68:8e:f3:1b:f5:ef:d4:0f:95:9f:77:ee:bd:d1:
e5:58:01:7a:19:1b:fc:f3:af:70:a3:ce:a2:3f:86:d8:89:4f:
dc:d0:c4:d1:63:93:52:c4:09:91:da:0f:20:a4:e8:00:bb:36:
95:fc:c8:12:31:8c:4a:53:7e:86:ce:b2:39:72:b1:19:fb:d6:
f4:c4:f0:bc:61:58:a7:19:b0:9f:e9:ba:9e:fa:b2:29:65:38:
74:a1:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:42 2026 by rpki-client