Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: hN13vlsZ0pg1tuc1tisNaRqdRDg8n7ihm8iguUbTsNY=
Subject key identifier: 3F:E5:A0:F9:93:B5:35:D5:0A:C3:7E:5D:E7:EF:EE:68:76:B0:D7:49
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01A10400618293E3A5401F24EBB95DDA5D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 23:01:36 +0000
Manifest this update: Sat 03 Oct 2026 23:01:36 +0000
Manifest next update: Sun 04 Oct 2026 23:01:36 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: UBmnPogEVQwB5wooDXzhrwCy7+XXr4rCR2Sx6fWOBs0=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:61:82:93:e3:a5:40:1f:24:eb:b9:5d:da:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Oct 3 23:01:36 2026 GMT
Not After : Oct 4 23:01:36 2026 GMT
Subject: CN=3fe5a0f993b535d50ac37e5de7efee6876b0d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:0d:07:eb:a3:7d:31:d3:24:d9:e7:6a:af:
98:b3:39:43:26:f0:37:4e:1b:85:65:81:ba:fd:ef:
1a:63:83:33:d3:f7:49:a8:91:5a:90:b5:e3:19:4f:
d2:b0:e3:e4:e7:cf:87:bb:01:e0:a8:77:69:dc:00:
79:5f:e5:48:60:fd:33:16:f6:a5:e2:ef:6d:96:33:
50:32:62:41:be:60:63:84:a4:e4:30:19:cf:66:48:
2d:48:dd:df:8d:3e:59:e1:8d:4b:f4:0f:d6:d1:4e:
17:62:e0:3c:ee:1b:72:42:7d:a9:54:da:3e:00:77:
ed:c3:02:fd:d8:34:3f:ac:f6:11:0e:82:d3:01:6f:
66:98:cb:db:26:87:90:c0:c9:6e:0d:6b:89:3d:32:
20:49:45:89:3c:c8:d2:75:98:c0:e2:5e:02:37:8a:
a6:a8:80:25:b2:86:15:b6:60:15:0d:9d:3a:7a:ae:
e9:34:ca:31:05:2f:84:dd:1f:81:d3:33:15:80:63:
a9:05:81:40:ff:fc:77:0f:d6:ef:34:3e:c2:76:5f:
a1:d9:b7:c5:e3:de:f7:35:a5:45:d0:2f:1e:c5:7b:
49:20:73:6a:07:2b:00:d4:05:10:53:09:c4:01:46:
54:ad:e6:76:b6:a5:67:f8:63:68:a0:b5:6b:c2:ce:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E5:A0:F9:93:B5:35:D5:0A:C3:7E:5D:E7:EF:EE:68:76:B0:D7:49
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:62:2a:aa:01:6e:55:27:a9:2e:82:80:5f:1e:75:73:c3:
71:03:87:09:9f:3a:75:72:3a:7c:4b:b0:0b:98:14:40:89:73:
1c:f3:37:89:80:00:bc:42:cf:b6:ba:8c:b5:62:04:d2:38:2a:
a8:ec:0d:5d:9d:ae:41:2b:79:1f:e2:57:53:0d:66:20:78:c2:
f0:97:e2:00:47:1c:27:fe:25:91:73:8b:56:e7:90:87:60:be:
01:08:3c:12:99:13:b8:0c:72:73:75:96:08:bc:a1:f3:ee:35:
c6:22:9c:eb:b3:8b:e2:65:fc:04:11:8d:4a:3b:a4:e8:3e:73:
87:55:3e:57:45:34:36:bb:22:c8:a8:29:0a:64:31:73:72:04:
9d:12:6e:7a:c3:e0:b6:bb:61:49:63:3e:68:98:30:84:0a:1e:
d4:18:a5:d4:93:81:e2:5f:28:b9:1a:e3:59:b4:56:57:19:59:
d7:2c:cb:1b:95:3a:25:4f:6f:d4:1f:54:57:95:b3:58:af:f0:
2c:32:26:0c:63:81:e5:81:86:62:e1:e4:37:e6:97:61:97:29:
ce:f1:7b:76:0a:8e:6a:8c:e6:c1:2d:98:b6:e5:cf:dd:15:1a:
77:b3:da:0a:32:2a:4b:e5:8d:7a:91:98:e0:30:dd:78:7a:f9:
b1:15:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:00:38 2026 by rpki-client