Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: r631Gjb+qLOPf0TKaAp7+QmgGNzYz3dSyFqjA4KhyUk=
Subject key identifier: 4D:15:AB:88:58:BA:E9:04:DF:87:2F:69:5D:13:EA:EE:BA:C2:89:24
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 01A1599DD41CB38FB2F43DD7705757928A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 14:01:17 +0000
Manifest this update: Tue 20 Oct 2026 14:01:17 +0000
Manifest next update: Wed 21 Oct 2026 14:01:17 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: kuPJ+YUsfp2JWhsamQYJwfCEWYiQqzfBgblDFaRN+2o=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:d4:1c:b3:8f:b2:f4:3d:d7:70:57:57:92:8a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Oct 20 14:01:17 2026 GMT
Not After : Oct 21 14:01:17 2026 GMT
Subject: CN=4d15ab8858bae904df872f695d13eaeebac28924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:bb:20:e6:8c:03:55:8a:36:9d:53:ef:e1:
83:ff:de:46:ee:f2:0b:50:66:b4:6a:0c:8a:4f:89:
90:71:1e:5c:8b:76:b8:8d:5e:20:1e:13:73:76:8d:
74:12:5d:6b:b2:7f:c8:60:ce:fe:cd:36:b0:6b:e2:
7d:7c:f3:d9:83:ef:e1:f7:ee:fc:e8:0c:ba:f0:18:
07:ca:41:7d:d0:66:78:a4:cd:f0:e3:5b:06:ed:5a:
54:9c:5a:6d:77:fa:9d:a1:ed:b2:48:84:a7:ac:50:
66:1d:70:25:97:85:78:ab:8b:29:99:11:06:c3:28:
41:c8:e1:c6:ae:4a:f0:cc:95:91:69:4e:32:46:c6:
59:fa:05:fc:30:e2:f1:80:09:f1:13:51:0e:0e:65:
17:4a:9d:97:73:84:31:40:4f:59:20:a8:e6:66:b1:
50:bd:03:62:9a:5d:49:79:b8:42:74:8d:4b:73:88:
3a:b6:03:3e:a0:70:63:27:6a:2a:ad:d3:44:ff:5c:
54:1e:cd:e0:0b:7b:bd:27:0d:23:31:2f:5e:52:61:
83:62:62:48:8e:6a:ce:16:fa:ef:f8:39:fa:fd:81:
69:2b:39:eb:e0:2f:f6:64:36:f6:53:50:ee:ac:19:
d7:de:29:3f:66:24:ce:77:a3:30:25:74:83:7e:14:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:AB:88:58:BA:E9:04:DF:87:2F:69:5D:13:EA:EE:BA:C2:89:24
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e5:5e:f6:14:1e:a7:b8:1f:79:be:d2:ff:83:98:61:33:68:
d2:86:5d:79:8d:f0:bb:6a:84:56:47:6c:69:16:db:5a:0f:f3:
83:19:f9:31:b8:46:d6:81:91:04:94:76:73:04:be:ba:5f:0f:
53:74:48:da:ad:04:85:da:b9:c7:b6:a9:3e:31:fb:42:ee:ec:
8f:37:ac:fc:f1:55:22:fc:29:47:73:0a:a4:55:fd:cd:f7:b5:
0e:ef:67:88:22:e0:34:42:95:3e:04:41:31:e0:62:95:cc:05:
34:d2:bd:7f:bd:79:50:19:23:ee:97:6f:e3:df:fb:49:de:24:
41:1f:9e:05:8a:53:fd:47:ec:23:a3:84:fa:66:c8:7a:76:19:
62:cd:51:2f:ae:b2:e5:92:4b:46:93:cb:5e:f3:d6:14:78:56:
fc:51:c3:de:30:e8:0a:ba:87:4b:f2:b8:02:bc:eb:2e:bc:f2:
fd:06:a7:6d:a5:e3:f0:8f:7b:49:2e:4e:b1:c1:2e:b4:ac:70:
c1:a5:13:54:fb:2d:49:f1:45:39:d2:f5:ff:4c:e7:c6:1b:35:
ea:94:81:4a:eb:eb:82:03:5a:c8:cb:c5:1a:02:1d:b8:0c:8d:
d1:93:6b:50:82:8b:18:99:bc:ea:eb:1b:f1:8b:87:b4:50:ea:
a0:ab:37:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFZndQcs4+y9D3XcFdXkoqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk
Y2I3NmQwHhcNMjYxMDIwMTQwMTE3WhcNMjYxMDIxMTQwMTE3WjAzMTEwLwYDVQQD
Eyg0ZDE1YWI4ODU4YmFlOTA0ZGY4NzJmNjk1ZDEzZWFlZWJhYzI4OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qi7IOaMA1WKNp1T7+GD/95G7vIL
UGa0agyKT4mQcR5ci3a4jV4gHhNzdo10El1rsn/IYM7+zTawa+J9fPPZg+/h9+78
6Ay68BgHykF90GZ4pM3w41sG7VpUnFptd/qdoe2ySISnrFBmHXAll4V4q4spmREG
wyhByOHGrkrwzJWRaU4yRsZZ+gX8MOLxgAnxE1EODmUXSp2Xc4QxQE9ZIKjmZrFQ
vQNiml1JebhCdI1Lc4g6tgM+oHBjJ2oqrdNE/1xUHs3gC3u9Jw0jMS9eUmGDYmJI
jmrOFvrv+Dn6/YFpKznr4C/2ZDb2U1DurBnX3ik/ZiTOd6MwJXSDfhSjJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0Vq4hYuukE34cvaV0T6u66wokkMB8GA1UdIwQY
MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt
Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh
LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuVe9hQe
p7gfeb7S/4OYYTNo0oZdeY3wu2qEVkdsaRbbWg/zgxn5MbhG1oGRBJR2cwS+ul8P
U3RI2q0Ehdq5x7apPjH7Qu7sjzes/PFVIvwpR3MKpFX9zfe1Du9niCLgNEKVPgRB
MeBilcwFNNK9f715UBkj7pdv49/7Sd4kQR+eBYpT/UfsI6OE+mbIenYZYs1RL66y
5ZJLRpPLXvPWFHhW/FHD3jDoCrqHS/K4ArzrLrzy/QanbaXj8I97SS5OscEutKxw
waUTVPstSfFFOdL1/0znxhs16pSBSuvrggNayMvFGgIduAyN0ZNrUIKLGJm86usb
8YuHtFDqoKs3RA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:24:16 2026 by rpki-client