Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: fFHXEBkzEySdr4MDCPVSUWcOW/45loh5VSgHDhsOlv4=
Subject key identifier: 74:22:65:BC:05:35:30:D7:27:EE:8E:72:09:20:72:09:BA:F8:00:80
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019F9512882DA3EB6ABDAD9A58601CD2AAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 17:00:47 +0000
Manifest this update: Fri 24 Jul 2026 17:00:47 +0000
Manifest next update: Sat 25 Jul 2026 17:00:47 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: hxUWNrYU6+jMnbQ/tAbGusn5pzpdFObUmhZyzkSqKkw=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:88:2d:a3:eb:6a:bd:ad:9a:58:60:1c:d2:aa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jul 24 17:00:47 2026 GMT
Not After : Jul 25 17:00:47 2026 GMT
Subject: CN=742265bc053530d727ee8e7209207209baf80080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:fd:24:14:dc:a6:26:8b:88:cb:6d:d7:d9:
76:9b:60:d5:e7:51:f6:3a:bf:45:60:a4:c0:bb:ab:
83:8b:a5:b1:81:b9:a7:19:4b:c9:44:ec:75:e7:0e:
19:13:cf:42:c7:7a:96:7f:4b:45:85:4f:00:5c:1a:
27:e1:1f:8f:8d:e3:8b:7f:fe:6c:6c:7a:82:ad:cc:
50:ac:1e:93:30:ac:4e:f7:69:61:a6:84:42:0e:2f:
54:2a:bd:0f:22:b8:78:d3:57:7f:ec:b6:27:0b:1f:
1e:91:07:b6:62:ca:11:00:45:53:bf:b5:e4:f9:7f:
66:3e:f9:99:e7:fd:d0:c9:fe:ee:c3:1b:03:59:20:
ae:c4:11:02:22:87:b7:a5:3f:b7:f9:12:0b:9a:9b:
13:36:95:37:02:81:77:6e:3f:ec:a5:df:4d:d8:02:
26:2e:2a:b7:ae:fd:25:7e:fe:f7:4a:2c:ec:fe:f9:
40:2b:4c:2e:2f:ab:35:1d:a6:99:2f:24:64:ec:66:
69:78:75:73:5e:7f:95:91:0a:5c:5c:5b:d4:a5:6a:
85:67:fe:06:f3:ad:96:b0:f3:9c:c6:40:fe:ba:47:
41:cd:85:c8:6c:34:a9:eb:32:5a:74:78:0e:ca:9b:
94:0f:24:8e:58:f0:51:20:87:61:14:c9:99:b2:f6:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:65:BC:05:35:30:D7:27:EE:8E:72:09:20:72:09:BA:F8:00:80
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:3c:e6:c5:38:d9:ef:c3:77:10:e1:0a:3c:f0:61:4b:ed:
02:59:5f:ad:ce:26:74:7e:fb:46:65:27:6a:6d:f2:a5:7e:a8:
d3:8a:c0:b5:f9:b2:f5:be:af:2b:5b:78:8d:a9:ab:18:76:5c:
38:46:fb:47:d7:d6:a3:f6:5f:cc:df:cd:27:db:19:b0:7d:d7:
21:03:b7:6c:cd:82:6b:71:d6:b2:19:3f:e2:5c:42:27:32:a3:
ea:fd:4e:aa:f2:76:55:af:aa:ad:e6:76:e1:8d:b8:af:a3:db:
2a:6a:5e:66:8c:f5:8e:af:78:64:ed:ac:b1:65:85:2b:03:80:
cb:64:9d:e5:41:e0:e7:e8:21:6e:eb:04:8f:dd:05:2b:99:11:
e9:cd:e7:c4:c4:5f:4e:f9:fb:27:66:39:a3:ef:f6:70:5e:10:
24:d6:db:b7:2c:e3:d2:eb:29:a9:ec:f6:c6:8b:99:44:72:eb:
fd:22:7c:f3:6e:49:b3:ea:50:f8:ea:69:d0:68:ed:d1:bc:04:
63:1e:2b:86:ed:bd:bb:10:01:4c:3e:da:27:69:ff:69:76:b5:
1e:eb:5b:7e:f2:c7:98:d0:6a:48:1c:ad:7c:20:ec:65:fe:8d:
e0:c8:06:48:d9:67:d4:ac:c2:93:5d:f3:8b:91:f9:25:77:4c:
69:a6:09:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEogto+tqva2aWGAc0qr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjYwNzI0MTcwMDQ3WhcNMjYwNzI1MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg3NDIyNjViYzA1MzUzMGQ3MjdlZThlNzIwOTIwNzIwOWJhZjgwMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGj9JBTcpiaLiMtt19l2m2DV51H2
Or9FYKTAu6uDi6WxgbmnGUvJROx15w4ZE89Cx3qWf0tFhU8AXBon4R+PjeOLf/5s
bHqCrcxQrB6TMKxO92lhpoRCDi9UKr0PIrh401d/7LYnCx8ekQe2YsoRAEVTv7Xk
+X9mPvmZ5/3Qyf7uwxsDWSCuxBECIoe3pT+3+RILmpsTNpU3AoF3bj/spd9N2AIm
Liq3rv0lfv73Sizs/vlAK0wuL6s1HaaZLyRk7GZpeHVzXn+VkQpcXFvUpWqFZ/4G
862WsPOcxkD+ukdBzYXIbDSp6zJadHgOypuUDySOWPBRIIdhFMmZsvYIRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQiZbwFNTDXJ+6Ocgkgcgm6+ACAMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDQ85sU4
2e/DdxDhCjzwYUvtAllfrc4mdH77RmUnam3ypX6o04rAtfmy9b6vK1t4jamrGHZc
OEb7R9fWo/ZfzN/NJ9sZsH3XIQO3bM2Ca3HWshk/4lxCJzKj6v1OqvJ2Va+qreZ2
4Y24r6PbKmpeZoz1jq94ZO2ssWWFKwOAy2Sd5UHg5+ghbusEj90FK5kR6c3nxMRf
Tvn7J2Y5o+/2cF4QJNbbtyzj0uspqez2xouZRHLr/SJ8825Js+pQ+Opp0Gjt0bwE
Yx4rhu29uxABTD7aJ2n/aXa1HutbfvLHmNBqSBytfCDsZf6N4MgGSNln1KzCk13z
i5H5JXdMaaYJ2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:53 2026 by rpki-client