Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: BkM5Ed3YF668HufO0+FvODUEtvFYQVszsuLyF1gHgD8=
Subject key identifier: 24:4C:82:60:A2:19:66:7D:A2:20:D3:FC:E1:9C:91:5D:92:B4:DE:59
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 01A0D45D768B8909D92FF52B25E601F7F3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 17:01:29 +0000
Manifest this update: Thu 24 Sep 2026 17:01:29 +0000
Manifest next update: Fri 25 Sep 2026 17:01:29 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: PENSct8lzH71HiWKj/ygJk0Ve+vI89sTz6g3wa61yb4=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:76:8b:89:09:d9:2f:f5:2b:25:e6:01:f7:f3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Sep 24 17:01:29 2026 GMT
Not After : Sep 25 17:01:29 2026 GMT
Subject: CN=244c8260a219667da220d3fce19c915d92b4de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:25:85:c3:63:42:fb:17:79:3e:2d:46:94:
6c:78:05:df:e8:5e:c9:79:20:11:90:b5:f8:ff:c4:
fa:4f:cb:e2:7a:67:1b:d5:1f:7d:1e:fb:6b:1f:25:
32:9d:06:79:7f:45:23:07:64:0b:d2:b8:ca:d5:b8:
52:23:54:bb:e1:e1:63:69:3f:3a:9e:23:4f:df:72:
c6:df:58:67:7c:95:7b:56:01:46:67:77:2e:1c:18:
80:c8:38:3f:d9:8e:6b:14:ca:86:75:34:dd:f9:be:
d4:23:df:ee:7a:fb:87:90:7e:d0:8d:76:e5:16:72:
f6:0a:a3:67:94:8b:b9:66:b4:51:32:9b:f4:5c:98:
f1:e2:53:e6:6b:c8:eb:4a:98:8f:d1:95:32:5e:62:
ad:27:63:d3:d1:7b:f8:6a:53:67:17:db:f5:cd:6e:
dc:17:30:33:a1:f7:30:25:25:0c:52:0a:e6:c6:d7:
ac:68:1b:81:0d:29:22:b2:22:87:09:4d:35:08:6c:
09:1a:88:30:7a:93:ca:66:59:87:0e:c2:d9:8e:76:
4d:c2:c5:dd:f9:56:4a:9c:44:9e:37:97:ba:9e:30:
1d:16:95:a2:84:06:d0:86:5e:cf:23:d1:a6:7b:59:
e9:ad:92:51:20:7d:93:f7:af:31:38:a7:3e:23:0a:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:82:60:A2:19:66:7D:A2:20:D3:FC:E1:9C:91:5D:92:B4:DE:59
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:05:7d:aa:ff:4d:3b:a3:4e:e6:dd:20:b9:e7:1b:b9:91:
6c:39:fd:99:ae:37:51:5e:95:62:46:ff:01:21:10:30:e9:87:
9c:a4:28:94:d2:35:3f:d2:bb:a6:0c:b7:19:d0:e5:2a:1f:b6:
44:e1:8d:3e:ec:93:f9:8a:f9:fc:01:ca:68:f6:c4:12:7a:35:
1b:f6:68:7b:29:95:8f:31:99:ee:86:c4:48:b8:75:5d:a6:90:
7a:c0:0f:f9:43:c9:a7:d2:91:a5:cf:fd:f9:67:68:87:61:03:
34:30:1a:3d:76:7c:1b:e8:d8:3b:b6:dc:77:f2:4a:fb:81:70:
c9:d6:cd:2e:68:18:03:08:e1:f1:5d:65:cb:b5:a4:26:85:9c:
80:54:cc:0a:84:55:6e:2e:e3:ff:39:dc:54:82:64:d1:41:bf:
f8:4a:23:34:ca:55:a8:a2:f5:5c:3b:7a:e8:39:db:7b:3f:7c:
b9:11:62:15:75:c7:b4:d0:44:fc:f3:6a:d3:50:04:08:12:70:
ae:e1:9a:55:9f:5d:76:3f:28:3d:af:00:ec:d5:ff:fb:7b:9e:
d0:33:ea:4f:a9:37:95:09:5b:3d:a0:1d:c2:2d:0c:a1:09:95:
6f:eb:a7:8d:ec:99:08:f9:95:73:a0:7f:38:84:ab:2f:24:96:
b6:94:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:40:25 2026 by rpki-client