Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: kA2CtQF5fbCCTeD8ifgUDZlF5R7m31bsS+6b5Xwtmo0=
Subject key identifier: AE:28:E0:8C:62:80:5C:A5:23:58:F7:C2:4B:A9:71:54:E2:24:9C:00
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 01A0DA282BA9AEA2E144CB934E239CDD0285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 20:01:00 +0000
Manifest this update: Fri 25 Sep 2026 20:01:00 +0000
Manifest next update: Sat 26 Sep 2026 20:01:00 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: qnMXdmefmiHunHwiezlxWDvfIM2zbagoX/3hWocFHvs=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:2b:a9:ae:a2:e1:44:cb:93:4e:23:9c:dd:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Sep 25 20:01:00 2026 GMT
Not After : Sep 26 20:01:00 2026 GMT
Subject: CN=ae28e08c62805ca52358f7c24ba97154e2249c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:3f:0c:40:0a:e6:8b:45:42:48:38:7c:e6:
20:8d:34:18:0d:64:4e:97:fa:00:34:89:5c:6b:0f:
a1:3a:b0:7e:02:ed:b1:55:6c:8a:ad:35:4a:8d:00:
04:4e:58:48:83:bd:ff:3c:7c:3a:88:46:80:d5:e2:
26:ed:ba:95:c5:11:c2:92:a0:b9:c6:38:de:ca:78:
aa:e6:67:e1:e4:bc:f5:c4:3c:4b:f5:2e:85:78:92:
00:15:50:0e:15:2e:16:39:e1:28:ea:60:8a:5f:5f:
d1:0a:b7:2a:a7:22:d4:b8:fe:11:de:c4:73:0a:64:
6f:a1:d0:c2:ca:92:c1:ec:8f:ee:da:52:70:a9:46:
b8:7d:8e:72:9b:ba:9d:40:62:b3:76:8f:1b:be:e4:
83:de:e3:bc:35:45:64:8b:4f:a8:56:ec:8a:ce:cf:
15:82:fe:c6:26:2b:7a:34:18:16:b7:a3:b4:69:e7:
50:ca:6c:32:3d:57:06:1a:8c:f0:ba:68:d2:60:a8:
79:83:6b:61:43:d7:81:e5:d3:78:1b:40:31:d3:be:
c2:df:f5:10:59:5a:8e:e0:79:cd:1f:aa:da:1c:14:
1f:af:63:03:86:0b:a3:3c:5a:42:4a:98:73:2d:cb:
21:43:33:10:0e:75:83:cb:42:c4:d6:2c:64:c4:f3:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:E0:8C:62:80:5C:A5:23:58:F7:C2:4B:A9:71:54:E2:24:9C:00
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:e1:f3:29:b2:ac:42:0a:c9:df:9b:49:d9:49:a5:af:9e:
60:9e:56:d3:80:32:20:ad:ad:8f:7f:d7:3b:96:a0:b5:46:00:
d2:7c:37:b2:4d:ac:6b:3d:0d:49:73:97:84:c5:a9:60:db:73:
cd:8a:0f:6f:f3:2b:06:9b:3a:e3:30:f1:b2:9a:f2:1c:55:01:
18:b1:79:d1:8e:ff:e5:28:c8:c6:e1:9d:cc:fb:6a:79:8f:6b:
c8:64:2f:8d:eb:e1:d3:5c:53:cf:4a:fe:50:7f:ed:10:c0:28:
b8:9a:24:39:34:e4:af:d4:5b:3d:3e:af:68:30:97:52:e2:76:
5d:04:81:d0:b0:63:39:9d:33:3b:c3:ae:91:ed:47:2b:99:72:
3a:5a:c8:77:f3:9c:f3:a2:c9:27:cb:a6:5b:f7:0f:85:6e:86:
fb:a3:e2:e3:02:fc:08:70:ac:bb:e9:2e:de:15:d3:cb:97:89:
67:a0:04:fe:ae:d5:6f:96:51:72:f7:a2:00:b4:af:eb:b3:4d:
85:84:52:da:7d:28:78:be:5c:09:e6:33:99:a2:a2:34:8d:60:
44:19:66:fd:db:68:4f:39:e2:a4:03:3c:d4:16:a0:fa:86:28:
d5:db:e5:cc:cb:72:49:c2:0d:13:8a:1c:a5:db:e5:74:7a:83:
f3:6a:98:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKCuprqLhRMuTTiOc3QKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk
Y2I3NmQwHhcNMjYwOTI1MjAwMTAwWhcNMjYwOTI2MjAwMTAwWjAzMTEwLwYDVQQD
EyhhZTI4ZTA4YzYyODA1Y2E1MjM1OGY3YzI0YmE5NzE1NGUyMjQ5YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rM/DEAK5otFQkg4fOYgjTQYDWRO
l/oANIlcaw+hOrB+Au2xVWyKrTVKjQAETlhIg73/PHw6iEaA1eIm7bqVxRHCkqC5
xjjeyniq5mfh5Lz1xDxL9S6FeJIAFVAOFS4WOeEo6mCKX1/RCrcqpyLUuP4R3sRz
CmRvodDCypLB7I/u2lJwqUa4fY5ym7qdQGKzdo8bvuSD3uO8NUVki0+oVuyKzs8V
gv7GJit6NBgWt6O0aedQymwyPVcGGozwumjSYKh5g2thQ9eB5dN4G0Ax077C3/UQ
WVqO4HnNH6raHBQfr2MDhgujPFpCSphzLcshQzMQDnWDy0LE1ixkxPNgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4o4IxigFylI1j3wkupcVTiJJwAMB8GA1UdIwQY
MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt
Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh
LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdnh8ymy
rEIKyd+bSdlJpa+eYJ5W04AyIK2tj3/XO5agtUYA0nw3sk2saz0NSXOXhMWpYNtz
zYoPb/MrBps64zDxspryHFUBGLF50Y7/5SjIxuGdzPtqeY9ryGQvjevh01xTz0r+
UH/tEMAouJokOTTkr9RbPT6vaDCXUuJ2XQSB0LBjOZ0zO8Ouke1HK5lyOlrId/Oc
86LJJ8umW/cPhW6G+6Pi4wL8CHCsu+ku3hXTy5eJZ6AE/q7Vb5ZRcveiALSv67NN
hYRS2n0oeL5cCeYzmaKiNI1gRBlm/dtoTznipAM81Bag+oYo1dvlzMtyScINE4oc
pdvldHqD82qYTg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:27:06 2026 by rpki-client