Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: rXutuU0KkrOfO3DlKpYptHNbDrp6/BnI3CJw8ZvNOJ4=
Subject key identifier: 8E:AC:7F:0F:78:E6:FD:A8:38:70:BF:7D:7F:10:DA:98:23:98:C0:6D
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019D992B8D37D1A89B74519F97C4F925CE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:01:01 +0000
Manifest this update: Fri 17 Apr 2026 02:01:01 +0000
Manifest next update: Sat 18 Apr 2026 02:01:01 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: 4PlJqMcUPGAWEtXoBMosB8n8g1c3PjhFadxFo7VRNrU=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8d:37:d1:a8:9b:74:51:9f:97:c4:f9:25:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Apr 17 02:01:01 2026 GMT
Not After : Apr 18 02:01:01 2026 GMT
Subject: CN=8eac7f0f78e6fda83870bf7d7f10da982398c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:e5:50:1b:63:49:eb:82:ea:28:3c:d7:53:
c5:cd:33:55:5d:24:ac:78:88:82:b4:5f:0a:0c:e4:
27:ea:85:e9:01:dd:74:7f:47:97:db:19:b0:a6:ec:
87:fb:16:67:27:a7:df:0b:50:d9:63:82:dc:d6:a9:
4d:7d:81:45:ff:41:90:78:a4:3d:d6:d4:89:5b:d7:
4e:72:11:dc:22:73:d5:5d:06:44:44:8a:cf:ff:03:
87:35:63:9b:31:6a:3c:4e:00:87:49:81:80:c5:01:
b3:91:32:c7:95:47:74:7d:4d:e0:c5:62:43:97:49:
0c:80:e0:ac:89:e3:6c:3a:18:c6:fd:b9:a6:f7:14:
88:d6:19:7d:22:13:15:9b:b0:da:87:30:6b:67:b9:
6d:2a:2b:76:c7:fb:c7:4f:9a:23:e1:5e:9e:0a:e9:
12:75:a2:25:e1:27:7a:e0:87:28:da:b6:d3:dd:c8:
72:f5:39:8d:84:94:7d:0b:c8:eb:b3:ea:93:69:0b:
8e:19:82:87:9f:0c:a9:ce:c4:bf:dc:a5:a3:94:6d:
e4:09:a1:5b:60:d6:32:d4:f3:1b:f4:c5:50:b7:52:
89:8c:19:67:c3:25:9e:94:3b:ef:72:0f:51:e3:53:
ac:4f:ad:96:d3:6a:15:04:18:3e:a4:2f:5c:ff:ff:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:7F:0F:78:E6:FD:A8:38:70:BF:7D:7F:10:DA:98:23:98:C0:6D
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:05:7a:16:63:d6:61:95:9d:7f:c1:90:8d:3d:28:5b:8c:8d:
d5:53:10:5c:2d:15:53:c0:10:b1:68:e5:74:d3:eb:e9:2e:a5:
e6:0a:08:7d:95:e5:c7:36:ae:d6:38:d4:85:87:08:43:a5:c0:
64:2c:19:96:36:d8:d7:e0:58:2a:94:b0:bd:f2:80:1b:80:4b:
96:0a:16:54:b2:8a:79:6d:af:d9:9a:47:37:35:84:42:90:f1:
c5:25:9d:bc:ff:11:25:ff:c0:14:6f:e2:57:21:ff:82:13:39:
66:44:f0:15:88:f5:d3:39:15:ea:f0:61:28:97:05:18:d2:ef:
38:35:c1:54:25:4a:7e:23:7d:59:2f:9b:e5:41:f6:b4:00:85:
0a:f1:1e:d4:e9:79:85:8a:95:f4:57:d5:11:08:99:c9:a5:f1:
25:23:4e:fe:8c:86:c3:65:b1:f9:6a:36:05:01:71:52:ae:1f:
f5:5f:bc:97:11:68:d5:96:14:8e:f4:dc:ba:68:26:b0:67:38:
a1:df:ab:d3:93:65:da:09:c7:01:9b:90:0c:8c:52:0c:ae:56:
d9:65:f8:27:ef:6b:b4:b1:a1:f8:8a:e6:04:82:47:ec:48:cc:
3b:4d:84:a7:f6:8a:6d:b1:63:1e:05:79:58:7c:61:97:f5:51:
87:b3:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:15 2026 by rpki-client