Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: P+CqsNSocG0i01cM5Rm2CY+rWfxfvoBhPREjkT//Kfg=
Subject key identifier: 4D:A4:26:21:EC:F8:F6:88:90:60:C6:21:12:EE:56:73:17:33:3B:52
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019F91DA65ADC87D9FA765CD706BD15B3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: OvB+nBlN1rGYhlQ/I4aEX3VjCagmkXD8WCFdJqfQdak=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:65:ad:c8:7d:9f:a7:65:cd:70:6b:d1:5b:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=4da42621ecf8f6889060c62112ee567317333b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:02:c5:91:6d:25:6c:ac:e3:77:0d:89:c7:
74:41:49:3a:bc:13:9a:f4:85:be:69:6d:08:17:95:
f7:80:c7:90:fb:35:14:15:8c:fd:0e:e8:25:ee:90:
a2:8a:fd:f5:0a:5e:12:ac:a4:5b:3a:48:60:0f:af:
36:e6:47:db:fe:8f:3a:2b:5b:6f:48:cc:35:cc:b7:
90:85:e4:cd:1d:cc:4c:cb:1a:25:ba:a5:82:83:64:
5b:e4:36:13:65:97:99:83:22:b2:c7:07:06:20:51:
2a:8d:01:15:2a:cd:4d:59:2e:f4:39:e7:05:b2:8f:
5e:55:8b:b6:bf:7f:64:42:d7:41:15:f1:ec:63:07:
78:d1:b1:4f:25:f2:bb:3d:5a:42:70:04:30:fe:a3:
9c:0a:45:f0:78:e5:1d:9e:70:1a:e8:d1:3b:07:3f:
cb:42:67:3a:c6:b9:d4:42:ed:07:93:3d:9d:bd:ac:
c0:9b:4e:20:30:50:79:ea:e1:3e:ad:8b:85:33:d4:
94:77:eb:a4:75:68:9a:31:f4:ec:1c:e1:a7:8c:c0:
70:60:df:ef:20:45:27:64:62:fe:3c:7d:21:82:db:
24:7a:af:4d:e0:96:9e:0b:3f:d8:a0:67:77:15:9c:
f5:fc:a3:7d:26:3f:91:6a:44:28:e8:76:a4:26:e3:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:26:21:EC:F8:F6:88:90:60:C6:21:12:EE:56:73:17:33:3B:52
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:2a:07:43:76:c1:ea:6d:6e:26:d0:d2:35:7f:84:70:df:
d6:89:93:9e:51:a5:d7:1f:e6:e5:3f:71:55:e0:1f:1b:d5:b3:
f9:41:64:fb:d7:b5:89:b2:52:0a:15:82:16:62:1b:82:a4:03:
bb:2c:04:e1:4b:b2:b6:55:6e:2f:42:6f:ad:68:3a:bb:6a:22:
0e:75:e3:15:e9:2d:1c:a3:48:c9:1f:f3:2f:0a:6e:1a:52:96:
cc:4f:72:fa:ad:00:e1:ed:7f:1e:ca:6e:9c:6f:11:7a:b9:f1:
11:db:8d:a9:9a:f2:66:1c:d0:b7:15:10:24:8a:bf:a7:5b:c5:
d8:b3:c8:1b:1e:01:26:c9:4b:94:74:9d:db:b2:c2:f0:aa:3e:
f0:49:ad:83:ae:9f:a2:ac:01:91:52:8b:50:2b:ea:2a:7e:06:
c8:ba:4e:36:83:91:b2:2c:5b:9a:c1:2f:cf:77:82:48:d0:fb:
97:34:68:14:40:7d:58:ac:23:4e:40:0c:a8:0e:3b:53:fd:5b:
c8:99:73:a2:33:fb:b5:10:eb:97:57:68:6f:e8:1d:f8:1e:ce:
42:af:75:ab:73:b4:a6:a5:57:85:dc:b8:1a:2c:ed:be:51:b4:
73:d7:05:31:87:81:a8:0a:b2:83:df:79:5a:58:d8:08:72:d3:
5a:40:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:32 2026 by rpki-client