Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: omDMWv2beG2ANzH8PrSG2xMO1Joz4IBdh+NiAsKyPoU=
Subject key identifier: ED:94:DD:1E:39:91:62:32:9C:48:CE:23:1E:D8:D8:5E:E5:D9:AC:F2
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019E1C7D58C061B3A5D3028941CD4EF1230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 14:00:37 +0000
Manifest this update: Tue 12 May 2026 14:00:37 +0000
Manifest next update: Wed 13 May 2026 14:00:37 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: 9Zae6xIQEiIesVA+TmLo8q3ZU58nLp7bIUBfn09podw=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:58:c0:61:b3:a5:d3:02:89:41:cd:4e:f1:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: May 12 14:00:37 2026 GMT
Not After : May 13 14:00:37 2026 GMT
Subject: CN=ed94dd1e399162329c48ce231ed8d85ee5d9acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:8c:db:33:4a:9e:6f:74:d2:51:f1:fa:bd:
5b:7f:68:c2:f6:c1:9f:f0:78:66:57:4b:f4:9b:88:
03:42:1a:f5:f0:5c:77:bb:8c:c3:66:ff:db:e8:22:
a6:b0:6f:7c:d8:10:3d:9a:7f:c6:82:16:ce:32:90:
c9:5e:d8:0c:19:65:b6:0e:5f:d8:59:d1:ef:e7:26:
63:0a:ba:99:a9:de:25:c0:cc:b6:57:e4:9e:be:c1:
0e:c5:48:f2:47:8a:ca:be:df:74:c3:85:4d:23:83:
35:d8:b5:14:7c:75:c1:a3:ab:e2:5c:f8:f1:1e:df:
8b:ec:3e:db:3b:29:df:ec:81:cf:b6:7a:f4:df:9c:
d5:c4:ef:19:23:de:37:81:1d:23:ee:33:01:9d:17:
59:04:e0:83:0a:4c:89:b5:f5:d3:fe:9a:58:35:f8:
30:32:f7:5a:21:7d:ac:51:01:13:7d:fb:5b:ef:e3:
f7:e3:19:fa:ae:cd:e7:27:75:4b:3b:62:b8:91:27:
26:27:5e:30:f5:7d:94:c1:1f:05:cb:ca:69:e8:1a:
cd:a9:81:db:e2:d3:3d:ff:34:ab:c0:32:91:0d:51:
97:d3:b8:dc:e9:48:de:1e:9d:11:d2:ca:58:42:5e:
3e:67:5c:2c:50:d1:b2:0c:e6:84:2a:28:f5:8e:1f:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:DD:1E:39:91:62:32:9C:48:CE:23:1E:D8:D8:5E:E5:D9:AC:F2
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:32:78:73:13:6b:d1:1e:c2:01:fc:10:4c:3d:bc:5e:18:45:
d0:a2:15:dc:e1:0a:54:d1:eb:94:2b:14:26:63:26:65:f2:40:
1b:38:7b:4b:ad:43:5e:a1:d4:31:da:cd:12:f0:14:83:f2:7b:
e9:8c:ea:94:d7:6e:bf:76:99:21:31:c4:c8:c8:89:c2:ee:cc:
9a:ec:3c:e2:09:5c:d1:ab:23:2b:63:49:c0:6e:21:08:73:e8:
34:32:6b:2f:01:c2:a6:2d:f2:d2:f4:9d:a8:3b:dd:f6:d0:49:
7d:22:dc:2c:9b:6d:9d:fb:79:bb:71:bb:c6:a0:49:94:9b:7c:
5a:80:e6:a8:be:0d:82:ca:38:fe:ec:76:fa:9d:65:8a:ed:d5:
0c:d8:bf:79:d1:28:69:93:77:b4:02:2c:7a:a1:44:0d:fa:c1:
cb:aa:13:88:2a:23:84:b4:95:7f:4e:f3:8d:b6:84:2e:74:2b:
57:40:12:19:42:57:92:22:5d:71:cc:de:39:1b:00:ac:c9:32:
2b:ec:c4:ca:5c:bc:bf:e4:e9:4f:3e:54:90:e3:c5:ae:d3:b6:
08:16:45:7f:bc:07:44:e6:8f:c3:61:51:7a:ca:d8:f5:ce:32:
b8:22:21:67:91:df:ad:21:66:8b:6e:39:96:83:26:ca:7f:c1:
57:a8:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:44 2026 by rpki-client