
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: oz9wnO/IntxlgQbZcPjiCNMl18ofcyFFAE9ODoAnN70=
Subject key identifier: 3C:8D:70:3C:51:58:C2:C9:57:4B:A4:BC:A5:5E:DB:E4:71:DE:D1:C8
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019DA566BD9842E85CC312A8942F28E7A0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 11:01:06 +0000
Manifest this update: Sun 19 Apr 2026 11:01:06 +0000
Manifest next update: Mon 20 Apr 2026 11:01:06 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: rBghRKzrLE8JWDN3rOkt167a6XmkrimIN+35GJGz7kw=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:bd:98:42:e8:5c:c3:12:a8:94:2f:28:e7:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Apr 19 11:01:06 2026 GMT
Not After : Apr 20 11:01:06 2026 GMT
Subject: CN=3c8d703c5158c2c9574ba4bca55edbe471ded1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:63:0d:3c:87:8d:2f:be:cc:09:a0:26:a4:
56:0f:a7:50:c6:8f:79:8a:83:89:a9:fa:3a:8e:55:
15:6a:1b:f9:86:1a:cb:07:f1:d1:50:e9:32:0d:6a:
43:1e:b7:f8:c5:e1:3f:79:95:13:35:8e:f5:53:5e:
37:19:ad:83:d7:6e:54:15:ee:6e:05:50:d5:0f:58:
af:25:e2:41:3f:a6:c7:26:f8:be:25:cd:53:03:2b:
c1:21:51:61:20:6f:d3:be:56:a5:ef:4e:0e:cb:b9:
38:d2:74:11:92:b3:d7:6e:5b:cf:80:d4:c1:81:56:
c9:bf:bd:00:9f:6a:90:91:f1:00:d8:94:ec:f8:44:
62:de:a7:89:4e:56:2a:e7:84:01:9a:ae:e8:b1:7a:
0e:4a:7f:e3:c6:8e:bd:33:d5:8f:ed:84:10:a3:de:
3c:d4:ed:5f:f5:2b:5d:4b:2e:78:0b:07:dc:9a:89:
c2:57:98:c3:c7:51:81:9e:67:7a:9f:d4:e5:12:82:
3b:2b:3d:9b:a1:36:37:2d:fd:2f:44:7b:2a:07:34:
59:c9:b0:7c:f0:95:01:1c:86:b5:0e:0f:eb:f6:5f:
ee:a8:d0:84:46:f0:94:ac:75:7e:7b:7c:d9:83:ed:
5f:77:eb:13:20:04:2a:19:4b:bd:f3:4f:34:b0:86:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:70:3C:51:58:C2:C9:57:4B:A4:BC:A5:5E:DB:E4:71:DE:D1:C8
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:a9:9b:e9:6c:d2:4b:26:f9:33:f6:6c:2d:1b:03:61:3e:
1a:64:ee:92:b2:bb:79:2b:9b:73:2c:b1:9e:6d:4a:6e:a8:77:
42:77:36:fe:ab:6c:a3:16:1c:24:c5:e0:0f:ad:49:f2:a4:8c:
82:cf:e0:35:38:5c:85:2a:1d:93:71:0c:50:8f:51:1a:ed:66:
aa:ec:e2:54:3e:6f:8a:1c:4a:73:93:91:43:5c:a4:ed:35:cb:
52:83:92:04:11:2f:d4:79:a5:91:7b:14:d6:14:eb:db:eb:6b:
db:fc:34:5f:66:97:c4:49:df:d3:3c:c1:10:d0:51:c0:97:7a:
2e:c8:0c:7d:74:a6:f2:6e:25:2b:41:fc:1b:af:5c:33:d0:b9:
8b:73:46:cd:35:29:bf:75:d5:1c:a8:fe:3e:5f:80:09:e2:47:
35:16:93:db:e6:d8:fc:0e:66:75:7b:4f:f1:08:cb:70:ea:4c:
f0:1f:36:c5:af:f3:27:3b:92:32:b4:ed:7b:85:a4:01:d2:e3:
fd:a9:55:3e:09:1d:d4:7d:8a:cc:5f:7f:55:76:ce:25:a0:f7:
8f:32:03:fa:ad:11:5a:d9:e8:ef:b4:b7:58:00:43:3b:ac:52:
39:4c:59:bb:87:86:ce:e1:cc:18:5f:04:4b:4d:5e:c1:fb:31:
01:1f:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:29 2026 by rpki-client