Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: GpX9v1OG6aZJTZNcyTssxfKygCSOtOZdVvTTMrwyru4=
Subject key identifier: 64:5F:30:F1:DB:66:C9:E4:33:D7:E9:E4:54:5F:F3:BF:FA:52:85:E9
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 019DA48B01DF788D3188B964AB21E50FB4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0CD3
Signing time: Sun 19 Apr 2026 07:01:06 +0000
Manifest this update: Sun 19 Apr 2026 07:01:06 +0000
Manifest next update: Mon 20 Apr 2026 07:01:06 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: o65NQwv158877CFL95oWIcaeG4YwGQvHKtwqi2et2FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:01:df:78:8d:31:88:b9:64:ab:21:e5:0f:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Apr 19 07:01:06 2026 GMT
Not After : Apr 20 07:01:06 2026 GMT
Subject: CN=645f30f1db66c9e433d7e9e4545ff3bffa5285e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:b3:3f:cd:f2:34:8d:2b:3d:a6:a6:95:ce:
bd:24:76:82:c0:92:2d:3a:e5:ac:2e:8d:4e:fb:59:
0f:7b:29:3a:47:ed:74:f0:5e:11:8b:cb:34:b4:a9:
fe:67:c6:80:b1:bf:d4:e0:24:60:6c:69:5f:ce:96:
a9:25:ef:e2:d2:c8:ea:5d:ab:db:fd:74:6c:81:60:
e2:ed:30:65:b4:95:78:50:88:2e:c9:b4:1a:0b:bd:
1f:2b:70:77:18:af:c4:01:32:e0:1b:80:de:67:0e:
aa:1f:d2:5b:f0:8a:8e:7e:20:f6:20:f8:43:83:ee:
24:4d:f7:86:c1:6c:46:9d:5c:d6:cc:91:2f:11:50:
57:d6:01:13:3d:96:3e:99:5c:25:92:5b:a4:c6:e7:
53:96:60:bf:96:74:b9:c9:d3:17:03:9d:6f:aa:39:
ae:09:f7:11:c6:c0:35:25:dc:5f:75:db:c5:45:72:
fe:35:e7:ec:ca:f1:b8:d6:93:f5:2f:57:89:a6:d1:
0e:f6:69:10:24:0f:4f:ee:8e:ee:be:75:9d:e6:10:
3e:20:47:cf:43:b1:65:f5:9a:c7:a3:95:5f:c2:8b:
da:e3:33:79:d5:6d:73:1f:1b:73:51:84:79:eb:82:
47:40:71:94:cf:24:5f:e3:49:64:ec:d9:65:b1:91:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:30:F1:DB:66:C9:E4:33:D7:E9:E4:54:5F:F3:BF:FA:52:85:E9
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:ec:c3:a4:c2:a3:12:17:a7:21:a1:43:88:3c:6a:ac:7f:
35:a6:ea:46:f0:1d:6f:79:8d:f3:fd:c2:77:70:b1:a8:40:1b:
ea:5f:c9:d8:27:2b:6e:46:ba:c4:d2:e3:30:8e:d7:50:16:18:
86:27:eb:0d:77:60:23:88:75:37:17:74:ab:b2:d5:4c:69:32:
cf:67:bc:5b:89:10:77:e2:5e:0b:b9:f4:c8:49:04:65:db:c4:
5a:83:b6:1c:8c:fe:91:31:35:11:04:4f:b2:60:f6:de:76:49:
13:cc:ae:2d:a8:7a:50:16:6c:e1:de:61:ef:84:c3:93:d4:dc:
3c:9a:4c:f7:a4:9b:84:29:13:7b:61:8a:cd:64:aa:d0:77:c0:
27:82:e6:a0:d3:89:ff:c9:99:52:f8:bd:f1:8f:c5:b4:4b:7a:
a7:90:4e:72:9b:7b:e3:e4:f6:70:9e:43:e1:76:eb:8c:db:db:
0e:f9:cf:07:e9:52:db:32:f5:8d:c4:c4:a9:19:ff:1c:1b:24:
a9:af:f6:08:3e:a6:02:6a:85:35:1e:1b:0f:5d:25:f8:46:f9:
f7:42:55:75:78:1d:c2:bf:6c:7a:dc:83:ad:ec:0a:b2:cc:f9:
d3:02:62:fb:26:12:a9:89:a5:7f:c0:d8:fd:8e:8c:c5:21:f1:
4a:18:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:35 2026 by rpki-client