Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: rcBN4yG5A5XcGhGWUb9wlIOYk/REZLBOYeNee9mmb+g=
Subject key identifier: AA:D6:19:33:68:1B:89:23:D9:1C:75:6D:CB:31:D5:40:82:28:EC:FE
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01A0C633435216AA274E65E8BEE2E391A19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 23:00:43 +0000
Manifest this update: Mon 21 Sep 2026 23:00:43 +0000
Manifest next update: Tue 22 Sep 2026 23:00:43 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: BEDjVm5ZMrS3hcmMeFJzrkHVv/kA/EWH/RBTmbgaJ00=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:43:52:16:aa:27:4e:65:e8:be:e2:e3:91:a1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Sep 21 23:00:43 2026 GMT
Not After : Sep 22 23:00:43 2026 GMT
Subject: CN=aad61933681b8923d91c756dcb31d5408228ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:a7:d9:f2:ec:3d:4b:b8:17:7e:0e:67:c7:
ca:98:ef:f1:39:b4:21:35:ad:61:a6:6b:cc:3e:e1:
fd:54:a8:a5:2b:c1:e3:2f:8d:19:92:e8:f7:96:3a:
bc:41:b3:44:b6:c2:cc:4c:90:02:44:d5:9a:84:83:
72:0e:5a:88:58:f2:4c:77:78:ce:8b:f8:3e:c4:4a:
ba:7e:3e:44:a5:f0:c5:87:6a:87:36:68:26:fb:fd:
35:3e:5a:be:2e:58:80:79:f7:63:d1:3d:a7:64:2e:
26:8a:06:cc:fd:db:44:fa:02:bd:b2:17:fd:77:32:
67:4d:f0:ec:34:30:d7:81:00:2b:93:f5:b7:66:30:
49:61:42:aa:47:22:a1:f0:1c:ba:4e:7a:ff:c9:64:
7e:4e:df:21:4e:ca:61:38:b1:e7:15:49:82:8b:3e:
68:0c:41:22:f0:6e:23:4a:3c:e9:bb:2a:a1:15:ff:
91:75:ce:5b:42:bc:60:48:93:0b:31:7c:7c:50:66:
25:0c:3a:8a:e6:77:56:0d:70:16:7a:2c:57:71:e7:
60:d4:18:9e:4b:1b:23:55:7a:8b:c6:42:f4:e3:7e:
84:e6:d0:61:75:84:af:18:ad:0b:d2:d7:e5:30:1e:
23:39:a6:d2:4c:55:0b:59:51:4a:76:c4:79:45:b1:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:19:33:68:1B:89:23:D9:1C:75:6D:CB:31:D5:40:82:28:EC:FE
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:24:51:e4:ed:cc:e8:8c:85:65:68:28:8c:f6:75:cd:68:
91:92:17:1d:e9:2e:82:91:b9:2f:8c:a9:6f:0f:9e:9e:ce:50:
cc:e2:33:7e:5f:5e:00:90:77:ed:23:ab:eb:8d:8d:af:b6:13:
43:aa:7c:11:b3:a3:65:e3:c9:0a:35:92:7c:83:3e:be:96:f5:
b6:1a:1c:05:bd:51:d4:25:0a:d5:33:f9:3c:b1:51:c7:1c:99:
ca:58:93:1d:82:d0:91:4a:33:6a:ed:f6:64:1b:1b:2b:0e:d8:
79:ff:fd:a0:65:83:7f:2e:ab:d1:0b:3f:d0:98:20:4b:0c:95:
ed:66:4f:75:08:ed:61:ed:53:32:22:19:2f:b1:1f:1d:5a:d5:
7b:d1:2a:58:e6:ee:82:cd:20:83:6a:54:52:26:c3:bc:14:7c:
ab:5d:53:00:e7:e1:43:d2:02:10:c3:a9:b2:21:cd:15:b2:8d:
50:95:4f:99:a8:30:7e:a0:d1:c3:a0:8a:6d:ac:a6:f9:f0:b8:
f1:d9:ec:88:da:82:ae:7b:25:f3:fc:1e:11:4c:04:1b:b7:70:
e7:57:4b:96:3a:03:b7:21:c5:57:1e:26:da:8f:3b:17:77:f6:
ad:64:5c:a0:9e:83:71:df:cf:3e:32:a8:f4:a8:a4:3f:d9:a7:
7c:4f:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:37 2026 by rpki-client