Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: VSUJrdZ4rW5c4ryJseqRy3iDkSh0OSPfpUT9fc+nI5M=
Subject key identifier: E2:1A:7A:BB:3D:61:51:B2:96:8F:58:FF:3D:90:84:AA:A1:94:07:CC
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019CABA1CFCBDC56067BF290DDF6158C5F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: fsZMMrVNhUhiIXeBsYmW42Gkjsqlvi8hgd4VQE8WjsU=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cf:cb:dc:56:06:7b:f2:90:dd:f6:15:8c:5f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=e21a7abb3d6151b2968f58ff3d9084aaa19407cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:4d:bf:25:73:cb:cc:c9:32:ae:4a:74:ab:
e7:0a:41:43:cb:11:79:44:fc:16:28:2d:d2:1e:ed:
c8:86:70:30:19:59:7b:0c:39:f1:02:b3:2c:8a:ac:
3a:ab:a3:df:24:48:70:f6:9b:8c:82:c6:59:74:63:
9b:c3:c4:68:86:d6:e7:c8:fd:af:16:19:15:cf:2c:
dd:8b:a2:50:3d:08:e9:eb:7c:93:2a:56:d3:07:5a:
19:b2:10:10:3a:83:f7:50:1b:7a:31:0b:11:de:52:
73:04:a9:1a:e7:d8:59:fb:1f:bc:15:a2:ba:0a:66:
c6:3a:2d:45:ec:db:c2:07:53:6b:46:5e:58:0d:f8:
02:32:4c:f3:a3:c5:70:f0:3b:d7:64:b7:f3:d6:04:
f3:df:0e:5a:5c:d9:ea:76:f7:c4:4e:5b:3e:e3:50:
56:1b:83:e1:9b:9f:3f:90:c5:2f:3d:fb:17:11:b9:
e2:57:b2:a2:29:0a:d8:bc:dc:5e:d7:6f:4e:4c:1b:
1d:d3:c6:03:8f:1b:3e:36:f6:42:d8:b0:9a:cd:ea:
36:79:98:0e:ca:e9:5d:77:34:4d:72:2f:19:3a:a8:
df:3b:16:41:99:03:5d:91:84:83:1f:f6:10:9b:60:
73:b4:95:48:2c:eb:1e:df:4a:df:54:c1:95:8a:9a:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:7A:BB:3D:61:51:B2:96:8F:58:FF:3D:90:84:AA:A1:94:07:CC
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:b6:72:fc:3c:31:c9:d4:cb:76:c1:e5:85:76:69:98:30:
53:82:0c:c5:95:36:eb:d4:52:95:b4:bb:6d:11:77:73:9d:db:
02:fa:44:71:fe:d2:ff:35:00:79:ba:9e:0b:29:25:8d:d5:4d:
c0:b7:0d:2f:ad:70:d8:51:06:33:1a:7a:ed:ca:42:f5:f0:3f:
f3:51:1d:f3:d3:e5:fe:ee:ab:a2:8c:36:26:3a:24:96:08:b5:
1e:48:0e:e0:3a:a6:47:4b:8c:b3:ee:52:bd:5d:e9:b0:7f:cd:
5d:0c:64:b8:3b:ce:b2:53:4e:2b:e0:56:49:39:97:d9:ab:fc:
b9:6d:aa:d9:08:e5:56:09:07:c9:e4:8e:7d:4a:fa:42:63:1c:
d1:a4:51:b5:e3:04:fc:1f:fd:22:3f:e5:85:10:78:53:09:05:
ae:41:21:e5:88:c8:ab:08:4d:11:a3:c8:bd:c9:a0:bf:ca:4f:
ee:83:74:43:02:d4:e6:1d:d7:1e:d7:1e:eb:60:45:1b:4a:ca:
d9:0e:47:dd:9b:d4:33:a5:aa:a2:fa:79:42:25:ea:2c:c5:a8:
a2:a7:dd:33:1c:16:83:2f:4c:e8:d2:41:38:00:6c:d7:ab:ca:
dd:17:96:a4:23:08:79:f5:1f:14:af:a8:0d:c2:06:b9:46:40:
85:b3:60:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroc/L3FYGe/KQ3fYVjF8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjYwMzAxMjMwMDM0WhcNMjYwMzAyMjMwMDM0WjAzMTEwLwYDVQQD
EyhlMjFhN2FiYjNkNjE1MWIyOTY4ZjU4ZmYzZDkwODRhYWExOTQwN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rBNvyVzy8zJMq5KdKvnCkFDyxF5
RPwWKC3SHu3IhnAwGVl7DDnxArMsiqw6q6PfJEhw9puMgsZZdGObw8RohtbnyP2v
FhkVzyzdi6JQPQjp63yTKlbTB1oZshAQOoP3UBt6MQsR3lJzBKka59hZ+x+8FaK6
CmbGOi1F7NvCB1NrRl5YDfgCMkzzo8Vw8DvXZLfz1gTz3w5aXNnqdvfETls+41BW
G4Phm58/kMUvPfsXEbniV7KiKQrYvNxe129OTBsd08YDjxs+NvZC2LCazeo2eZgO
yulddzRNci8ZOqjfOxZBmQNdkYSDH/YQm2BztJVILOse30rfVMGVipp4hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIaers9YVGylo9Y/z2QhKqhlAfMMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuW2cvw8
McnUy3bB5YV2aZgwU4IMxZU269RSlbS7bRF3c53bAvpEcf7S/zUAebqeCykljdVN
wLcNL61w2FEGMxp67cpC9fA/81Ed89Pl/u6roow2Jjoklgi1HkgO4DqmR0uMs+5S
vV3psH/NXQxkuDvOslNOK+BWSTmX2av8uW2q2QjlVgkHyeSOfUr6QmMc0aRRteME
/B/9Ij/lhRB4UwkFrkEh5YjIqwhNEaPIvcmgv8pP7oN0QwLU5h3XHtce62BFG0rK
2Q5H3ZvUM6Wqovp5QiXqLMWooqfdMxwWgy9M6NJBOABs16vK3ReWpCMIefUfFK+o
DcIGuUZAhbNgEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:50 2026 by rpki-client