Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: geCpJabJ/Of44IGM3ezucaPtNKEWMdnoJrVhdErIs4A=
Subject key identifier: EF:8F:1C:13:77:6F:89:3D:A2:63:F9:BB:3E:D3:D4:B9:D0:4E:78:A0
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019FAA50D8FA0215F155A66F8E31E461DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: cEdoHJWVNaOa0rhpcus3pntgrZFFwt/7I7bxR7P8oiY=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d8:fa:02:15:f1:55:a6:6f:8e:31:e4:61:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=ef8f1c13776f893da263f9bb3ed3d4b9d04e78a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:c9:51:41:e4:f5:ef:19:7e:89:05:d4:fe:
b3:60:ae:b5:21:19:73:27:21:87:1e:05:fe:36:59:
15:f9:59:e5:38:be:0f:da:3c:22:cb:43:18:dc:75:
ce:91:a8:c7:98:a4:d4:72:81:ea:2a:0e:10:b0:4e:
de:c2:89:b2:5f:02:af:e2:3c:1b:4e:55:ee:32:a4:
08:21:51:70:6b:c9:7b:56:db:9f:d5:55:be:b4:a0:
cd:c2:27:ef:01:95:8d:93:a7:4e:0a:53:de:bd:c4:
6d:bc:57:82:c0:cd:46:bd:66:d1:32:ec:0a:25:b6:
e6:5a:8b:d7:27:d3:f8:37:05:61:56:3a:8f:96:cf:
31:64:bc:95:f4:06:0b:95:f1:34:de:bb:d8:4b:fc:
36:e3:cd:01:07:ee:dc:a0:fa:98:7d:51:5b:38:92:
5a:4a:58:af:f4:f4:1c:80:9a:94:3a:c9:74:8a:cb:
84:ee:37:f9:55:bb:65:c5:b0:e8:81:15:de:ee:e7:
a7:0a:b2:d2:42:f8:64:11:fb:0f:41:2b:c3:01:41:
12:40:7e:bd:6a:a5:01:f1:74:9e:65:bd:ee:12:1d:
b4:b1:4f:00:f6:84:d9:4b:df:d2:81:f6:cc:66:51:
58:47:cf:8f:0f:51:5c:69:b9:c5:ef:30:01:63:78:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:1C:13:77:6F:89:3D:A2:63:F9:BB:3E:D3:D4:B9:D0:4E:78:A0
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:d3:2f:78:a4:03:0b:85:88:15:23:ee:e7:9c:f6:54:7a:
62:86:fe:9e:48:88:07:2b:11:d4:0d:a4:ec:cc:14:48:a9:d2:
e9:cd:21:99:5b:9d:b3:6d:dc:f9:20:60:a2:22:02:bb:86:5a:
cf:59:65:21:3d:35:2e:22:e4:79:b7:10:cd:fc:c7:f1:32:12:
20:97:2e:1a:59:2d:18:8f:06:6d:16:94:ff:02:2d:66:44:00:
85:e3:82:47:9d:41:9e:98:80:99:21:d7:41:a9:e7:da:ea:32:
ca:73:b3:7d:ec:22:e9:be:93:5d:17:11:ca:d8:0e:2f:b8:0d:
40:cd:78:7f:1e:00:41:3e:ed:94:a6:a6:91:d9:14:09:0f:a0:
f6:58:e4:94:33:a3:5f:3b:da:aa:fd:07:4e:80:f0:6a:03:85:
78:60:a0:d6:08:a8:11:53:04:7d:37:40:01:49:27:5d:6a:34:
d5:eb:16:2e:94:49:0e:d3:51:cd:f5:04:e7:10:3f:27:a2:4a:
f6:3c:d2:2b:9e:1f:65:77:5e:e3:7d:a2:2c:04:26:9c:f9:2a:
9f:c7:45:32:ca:bb:31:3f:68:69:42:1c:ac:a9:fe:73:0f:e8:
4c:e8:4b:aa:9b:90:0a:b3:70:68:a7:c1:7f:dd:fb:b8:48:29:
d8:ef:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:22 2026 by rpki-client