Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: nI/gL/2qj7ozQvf1jPphFITPB7lXjPwhAAHquFvTCMc=
Subject key identifier: 6C:C9:5A:00:C3:9D:94:A3:25:19:D7:CB:D5:58:C5:11:82:55:FF:9B
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019D375260F559D928DA071CC4DACA9971CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: zd8vuUGKvSwBnRbraKB3ZH6uUwC9EZVTT6uUkcIBawM=)
2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:60:f5:59:d9:28:da:07:1c:c4:da:ca:99:71:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=6cc95a00c39d94a32519d7cbd558c5118255ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:d2:13:51:36:61:71:08:2f:b9:d5:d9:15:
3f:dd:45:bb:99:d0:31:d2:31:ae:e1:bf:d4:54:df:
a4:8e:99:ed:9c:15:fc:d2:98:a0:98:d0:ee:dd:e5:
f0:af:e2:1f:ec:6f:a5:f1:25:72:09:9c:29:76:c1:
3c:64:51:0f:6b:a2:e4:8b:0d:db:93:9c:4f:e7:f9:
79:da:db:23:ab:bf:99:07:c8:1f:63:68:99:38:12:
ea:cb:62:40:04:16:a2:49:6d:e9:d7:2f:aa:15:fb:
7c:49:11:45:00:a5:17:cb:44:e8:1d:f6:ab:d2:47:
5e:a1:64:c1:26:aa:b2:d0:f7:10:8d:25:6b:7b:b6:
f0:32:88:55:c8:0e:cc:12:a3:98:db:80:56:b6:18:
26:88:28:8a:4d:f3:ca:b4:06:0a:24:c9:c1:cb:00:
d9:46:b9:25:09:dc:4e:48:80:6a:72:2e:ba:7c:fa:
ba:9d:c9:06:b1:ca:b3:d1:0e:41:5e:2b:79:d1:9a:
70:e6:74:7c:5c:3a:53:9c:46:99:b8:9c:92:41:df:
61:e5:b4:c7:d8:42:ea:47:5a:df:86:fd:1e:0c:dd:
94:38:d1:24:40:ae:b7:6a:e9:c7:0f:c2:22:6b:13:
42:53:98:b0:db:9e:0e:c9:db:c5:c7:41:30:10:75:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:5A:00:C3:9D:94:A3:25:19:D7:CB:D5:58:C5:11:82:55:FF:9B
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0d:6d:7b:a0:a1:31:e3:82:38:4a:1d:e9:d7:c4:d0:5f:38:
d1:46:2c:db:04:94:1f:40:20:18:5f:ae:18:46:ed:d4:32:71:
aa:99:20:be:3a:4e:0e:88:bc:73:2c:20:6b:f2:de:f4:69:d5:
20:aa:65:7c:d1:36:fb:9a:95:ee:72:4f:4c:7f:3f:74:79:d2:
7b:ed:ae:c3:4c:ad:8b:89:aa:09:3b:f3:c9:09:16:87:8b:b9:
73:2f:18:2c:0e:46:f3:9f:2a:cf:5c:b2:7a:f5:b3:51:a8:6c:
02:b7:e9:a4:d3:32:75:44:27:87:c2:c8:9b:53:93:66:81:30:
df:c2:f3:6d:d6:b8:48:ea:4f:82:1f:ab:e5:95:38:88:5b:4c:
93:61:b2:8f:13:d3:84:a6:f5:52:fe:05:69:74:70:9c:e7:1c:
91:f4:51:7f:e1:3e:f6:70:c3:58:a9:a6:c8:fa:1e:f8:0b:6f:
f5:36:89:0a:83:d6:b1:8d:0f:5e:e7:2b:5e:55:89:ac:9b:4a:
13:60:36:a7:61:ce:07:6b:7a:40:21:fb:48:db:83:77:bf:8d:
1e:c1:d3:43:6f:6a:87:6b:98:53:57:67:c1:47:06:4f:43:5f:
46:65:b8:24:4f:9e:4d:e2:ba:7e:f5:a5:d6:fc:bb:0e:d7:2d:
bf:23:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:20 2026 by rpki-client