Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: MrnpsrSisZOpPaZ3CS+1QMo7eVPqWkPWhkJ6SebTK0s=
Subject key identifier: 20:56:85:BF:B3:1B:C5:A3:99:74:8E:79:19:AC:BD:5A:56:22:D4:43
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019D27E03BED8F85A1B48FC86EAB74FAC3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: 7DRBwfLzfBUJaxH5eB5JDTUUFQ2oUb5dqhYtoBJZvik=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3b:ed:8f:85:a1:b4:8f:c8:6e:ab:74:fa:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=205685bfb31bc5a399748e7919acbd5a5622d443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:fe:ea:69:29:ad:00:8f:17:6d:1c:15:09:
00:dd:83:b0:af:ac:10:a1:9b:e2:5e:d3:aa:e1:e9:
40:dd:6a:a7:3d:42:0a:0c:f6:94:20:2c:5e:9b:c6:
c0:65:f1:8a:42:97:22:f2:28:eb:f3:8a:31:5d:f6:
08:da:95:9f:41:2d:65:2c:e3:0a:25:06:7e:3e:90:
38:a9:4a:aa:14:7e:c3:10:a7:32:36:49:9d:2d:cd:
12:46:5f:1d:f6:55:78:a8:85:d2:32:19:aa:0e:c6:
55:39:9c:66:c0:31:2f:16:6c:4a:52:c1:04:3a:86:
2f:ae:e9:0a:8b:d5:97:29:09:bf:a0:82:b9:b9:c8:
4a:a1:41:e9:79:a7:7f:46:55:d0:38:94:11:71:b6:
c2:fc:b3:13:2b:82:b7:96:f8:45:19:1e:82:41:a5:
70:0e:3b:79:fc:4d:09:2b:c3:dc:d4:af:81:7b:4d:
c4:08:7f:4e:0f:8d:e3:8f:5a:ed:8e:e5:bb:c4:70:
0f:11:62:5c:da:16:b1:5a:ef:f4:45:00:ca:8b:2f:
6a:73:d2:fe:d3:ea:4e:52:1a:a4:9a:2d:77:65:b2:
41:5b:3c:f8:f6:6e:c1:e9:d3:0a:36:6f:6e:cf:17:
63:68:2d:2e:2c:39:f3:37:c2:63:d8:06:32:62:45:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:56:85:BF:B3:1B:C5:A3:99:74:8E:79:19:AC:BD:5A:56:22:D4:43
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:34:40:91:de:be:fa:91:48:f9:51:03:43:7c:ea:ed:a9:5d:
76:63:95:08:e9:f2:10:ad:3e:75:fa:96:83:2a:5d:25:d0:a4:
ed:bd:df:3e:89:be:04:ea:48:a3:18:b2:08:df:ae:0e:f7:40:
e7:56:b5:39:3f:34:35:a9:98:1b:8a:5c:ee:50:d2:ec:c9:6e:
d5:31:e9:fe:69:78:b1:c1:e7:5f:dd:6c:5e:0c:f0:f5:de:00:
06:2a:26:29:98:dd:db:78:8f:0e:32:03:9f:aa:ca:6f:6f:e8:
af:7e:d2:3d:30:10:cc:f2:72:98:2d:1b:84:96:68:7d:26:60:
78:da:01:b4:54:60:f9:f6:ae:49:fb:90:4d:ad:f3:9e:e2:e3:
41:9b:18:d0:02:86:91:1f:76:37:ca:d7:1b:5a:b2:51:61:ae:
6d:d5:59:c9:47:d6:b2:2e:24:4b:1f:eb:d9:14:3e:fe:45:5b:
8a:31:90:56:29:ad:53:81:3e:95:ae:28:25:e9:ce:3c:f3:b6:
eb:49:b5:1a:5c:6f:04:e7:a9:b8:b8:55:85:4b:cf:3c:26:9d:
5d:44:9e:22:44:13:3c:13:3d:dc:c4:fc:d1:21:74:1d:f1:6d:
cd:c5:b1:ff:22:e6:9e:29:9b:7f:9d:43:a5:a6:e3:91:e3:d8:
83:3d:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:20 2026 by rpki-client