Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: 2nCJNncCYJTMHe5jpx8DfOZscTRGDMO7YePCiq8+xO4=
Subject key identifier: BC:2B:55:BF:EE:A1:20:C8:B5:06:3D:A6:CA:72:BA:4F:C4:25:0D:5E
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019CAA589D69E2CDD300A90FAF01C4825564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: ozEcoH2FLr+lSM4Oup/IyeJFoYY/3s+41gdqq9b+1aY=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9d:69:e2:cd:d3:00:a9:0f:af:01:c4:82:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=bc2b55bfeea120c8b5063da6ca72ba4fc4250d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:7e:23:ca:5f:b2:8b:72:1e:13:65:c4:fa:
f5:a1:00:23:25:b3:38:29:50:2f:30:45:4d:74:b9:
54:71:7b:3c:f2:12:ee:80:3f:7a:5e:09:db:72:14:
c0:59:bf:43:55:94:fd:d8:af:1d:76:2c:19:1d:0b:
e1:dd:c9:6a:5e:87:25:62:85:8f:6b:e4:71:4f:85:
d2:b2:7b:e0:b4:31:09:03:65:f1:ba:8d:ec:01:db:
8d:01:ea:7f:ac:1c:dd:13:91:d3:26:80:5b:88:8a:
41:ff:39:af:30:f8:3e:8c:ae:25:e6:42:73:ec:77:
4b:83:4c:ad:e0:c8:84:f6:50:9b:76:13:68:3c:9e:
d9:c2:24:b7:4c:b0:6c:db:85:ca:24:28:2e:67:49:
38:86:e5:b6:00:e0:9e:a8:f8:66:4b:09:b9:6a:b5:
90:ba:91:29:1e:75:4c:d1:bc:f9:ee:76:e3:3c:54:
d7:b7:ad:c6:ae:50:23:0f:07:cb:c2:68:ec:87:19:
a0:ba:48:42:4b:b5:81:5d:6d:79:fe:20:02:26:68:
89:98:21:1f:93:28:30:89:8d:92:55:0a:63:f0:5a:
16:25:e2:68:34:f0:0b:17:41:b0:97:20:cd:9b:f5:
ac:e5:cb:bd:59:48:46:11:09:65:55:0a:f0:de:9b:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:55:BF:EE:A1:20:C8:B5:06:3D:A6:CA:72:BA:4F:C4:25:0D:5E
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bd:bf:40:4d:1f:85:95:b2:57:db:4f:f9:aa:8d:37:06:9d:
c5:78:9d:16:71:97:2d:7f:1c:69:25:89:23:b1:b8:48:9d:10:
19:21:9f:c8:d7:17:84:1a:29:3d:97:a2:71:5d:85:df:f9:fc:
fd:5c:5c:a5:eb:60:7a:38:b0:99:0f:01:81:bb:ef:51:4d:9d:
d0:53:c8:d9:f2:08:57:a9:7f:db:f2:de:a5:ef:8d:3a:d0:6d:
13:a9:09:0e:bd:22:59:ef:85:a0:0e:64:86:07:e9:8a:27:fc:
7e:b0:64:bf:b0:52:90:78:30:45:32:e3:a7:04:9a:bf:a9:f1:
af:44:99:4b:84:6c:28:70:0b:11:ed:66:a4:a4:dc:70:d3:ab:
ca:5c:9a:01:dc:65:42:cf:69:97:09:84:6a:b5:af:97:3b:fc:
8e:63:2e:a6:c3:b8:05:e0:ff:cb:01:8c:95:9e:e8:be:17:7b:
c6:53:d9:ff:f9:ef:a6:64:1d:6b:61:9c:f8:c5:73:68:4d:3e:
fe:0f:f2:1e:5c:bf:88:b3:c1:da:04:79:33:2b:1f:fe:55:b9:
b1:73:f0:90:3d:95:aa:b4:91:77:9d:62:92:75:32:9e:9f:8d:
16:1f:8a:ad:7f:35:cb:c5:9f:3c:86:97:2d:ae:15:3c:03:f4:
8b:a1:13:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJ1p4s3TAKkPrwHEglVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk
Y2I3NmQwHhcNMjYwMzAxMTcwMTAwWhcNMjYwMzAyMTcwMTAwWjAzMTEwLwYDVQQD
EyhiYzJiNTViZmVlYTEyMGM4YjUwNjNkYTZjYTcyYmE0ZmM0MjUwZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFR+I8pfsotyHhNlxPr1oQAjJbM4
KVAvMEVNdLlUcXs88hLugD96XgnbchTAWb9DVZT92K8ddiwZHQvh3clqXoclYoWP
a+RxT4XSsnvgtDEJA2Xxuo3sAduNAep/rBzdE5HTJoBbiIpB/zmvMPg+jK4l5kJz
7HdLg0yt4MiE9lCbdhNoPJ7ZwiS3TLBs24XKJCguZ0k4huW2AOCeqPhmSwm5arWQ
upEpHnVM0bz57nbjPFTXt63GrlAjDwfLwmjshxmgukhCS7WBXW15/iACJmiJmCEf
kygwiY2SVQpj8FoWJeJoNPALF0GwlyDNm/Ws5cu9WUhGEQllVQrw3ptvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwrVb/uoSDItQY9pspyuk/EJQ1eMB8GA1UdIwQY
MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt
Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh
LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL2/QE0f
hZWyV9tP+aqNNwadxXidFnGXLX8caSWJI7G4SJ0QGSGfyNcXhBopPZeicV2F3/n8
/VxcpetgejiwmQ8BgbvvUU2d0FPI2fIIV6l/2/Lepe+NOtBtE6kJDr0iWe+FoA5k
hgfpiif8frBkv7BSkHgwRTLjpwSav6nxr0SZS4RsKHALEe1mpKTccNOrylyaAdxl
Qs9plwmEarWvlzv8jmMupsO4BeD/ywGMlZ7ovhd7xlPZ//nvpmQda2Gc+MVzaE0+
/g/yHly/iLPB2gR5Mysf/lW5sXPwkD2VqrSRd51iknUynp+NFh+KrX81y8WfPIaX
La4VPAP0i6ETcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:29 2026 by rpki-client