Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: L9XVnih3qs0ht01dATZLbD3GYaSOQ8u0ZUhVvTZBVgc=
Subject key identifier: 72:62:2D:DF:3E:AC:E7:55:76:0E:4A:18:80:21:FB:E0:80:67:73:B5
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019D2929B7CF6C0B5905E085665F099B9E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:33 +0000
Manifest this update: Thu 26 Mar 2026 08:01:33 +0000
Manifest next update: Fri 27 Mar 2026 08:01:33 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: xWSN34RsxkxV/2XN27LkUZvDdn/CY1q4Ua5E71afUak=)
2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b7:cf:6c:0b:59:05:e0:85:66:5f:09:9b:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Mar 26 08:01:33 2026 GMT
Not After : Mar 27 08:01:33 2026 GMT
Subject: CN=72622ddf3eace755760e4a188021fbe0806773b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:5d:38:98:9e:85:b7:06:db:4d:f2:66:f4:
f6:04:2c:0d:be:87:b1:a9:19:37:37:c9:cf:67:ab:
0e:d4:fc:7c:91:af:16:b0:4e:04:dd:ff:67:53:62:
3c:32:ae:b8:30:c9:0d:a9:77:51:a7:fd:bb:06:94:
84:92:eb:e8:72:89:66:84:5b:dc:43:7d:76:16:37:
28:7b:a8:1a:28:7e:dd:65:89:0e:fb:2b:f1:c2:ee:
6a:0e:f3:8c:84:71:bf:c9:c2:a4:de:6a:c6:a6:1a:
d5:2c:bb:28:2e:b4:19:46:9d:d0:74:bf:ee:d1:90:
d9:9b:50:00:8a:1f:2c:df:9a:ee:c2:57:9b:80:5f:
96:06:2e:b1:af:55:07:34:d5:a7:cd:30:eb:a6:42:
45:b5:84:e0:2a:fa:4f:32:34:d5:21:79:af:cd:e4:
c7:91:32:8d:a1:73:38:f6:4b:cd:67:13:dd:b9:82:
f5:f9:97:64:7f:f6:f3:37:3c:00:e1:13:d9:cc:05:
61:3e:1f:f2:4b:bc:fa:ac:db:9b:dc:01:dc:16:9e:
d3:f5:24:a8:99:0e:ad:80:77:52:3c:97:e0:cf:a5:
87:83:42:49:7e:99:e5:ba:50:9b:de:51:95:8f:11:
d0:ad:64:f7:15:3a:be:7d:33:42:9c:3a:a3:33:39:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:2D:DF:3E:AC:E7:55:76:0E:4A:18:80:21:FB:E0:80:67:73:B5
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:6c:38:98:2b:54:44:ce:a5:82:cf:87:28:e8:ad:56:ce:
fa:0a:9b:85:31:0e:de:95:5e:4a:2a:a0:17:5b:e9:9f:88:ed:
cb:ee:e4:9e:b7:e2:6b:cf:6d:ad:a5:4f:da:d8:8f:3a:00:03:
e7:be:e0:4d:27:f9:ad:96:b4:60:98:59:63:78:1a:66:f1:f2:
e8:34:50:8c:42:c5:4f:8d:d2:74:21:26:5b:7d:95:f8:3b:be:
a6:9b:3c:ee:ee:62:5c:10:d4:ed:38:fd:49:bc:d8:f1:67:d6:
1d:0b:86:5e:af:bd:48:7d:ba:81:56:97:2c:c9:f8:a6:be:72:
2c:f5:7f:77:7d:c9:81:f2:3f:46:af:c0:89:1c:74:f9:da:94:
ab:15:33:8c:67:cc:11:ce:99:09:46:f2:19:58:a2:d0:cb:31:
21:7b:7d:29:f8:49:92:fe:e0:16:38:27:b0:df:81:37:17:a7:
28:84:83:01:ab:1e:6f:ab:fd:23:8c:b1:d1:02:fe:f7:9b:bd:
a6:fd:30:37:3a:28:80:be:14:1d:92:34:08:d3:1c:73:2b:fc:
fc:68:af:c4:80:3b:0f:80:fd:18:a4:78:32:3c:ab:2c:30:3a:
d2:63:6a:44:7e:5b:31:6e:c2:a1:4a:53:a2:c1:07:91:a3:38:
07:9e:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:09 2026 by rpki-client