Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: sdpXQd4s6KvP6i0J3289yqnAYNegNwNB/Ex66SdOetI=
Subject key identifier: CE:8F:01:A8:AE:F1:98:31:DA:50:A3:1D:60:5A:FB:FD:F8:42:8F:E3
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 019D98F5094E0FDA5BD815A132096CF7D509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0CCD
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: VQbuOcSSWIdMJBAGOsItE1iVh4bvshM92DWa93XM/tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:09:4e:0f:da:5b:d8:15:a1:32:09:6c:f7:d5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=ce8f01a8aef19831da50a31d605afbfdf8428fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:cb:66:5f:79:c0:6b:48:a9:3f:b0:75:c4:
a8:43:59:c7:55:1d:20:2c:12:10:5e:3b:be:e2:7b:
63:5d:29:bf:b4:0f:63:0a:89:cb:e6:e3:ea:7e:3e:
6f:a7:6b:af:bf:bd:20:51:1c:bd:dd:d8:de:8b:ce:
67:48:e0:e8:cd:01:c4:45:8f:c8:33:b8:eb:ce:92:
cb:aa:84:81:c3:1e:5f:c6:96:ab:d9:88:21:e7:39:
9f:d6:0c:2e:9a:2e:cf:96:c8:ae:11:b5:1c:9f:d2:
84:6c:b8:81:d4:20:da:57:d0:56:1e:bd:5e:9a:f0:
2f:c2:57:5d:82:e8:4d:af:2e:f2:79:9a:1f:f1:90:
22:a5:aa:9e:a2:51:47:1c:31:de:81:9c:27:58:3f:
70:d3:29:ed:e4:9e:a8:88:7e:d9:a5:eb:a9:f3:c8:
d8:36:0c:70:52:1d:dc:ed:1a:e0:58:06:75:ad:29:
d2:22:c9:4f:04:04:2a:ba:16:7e:4a:ec:dc:38:62:
d4:2c:23:f6:fa:27:9b:7a:62:e6:9c:86:dc:af:b7:
67:4b:47:6d:ab:d3:4e:33:6d:42:75:6a:38:3e:ca:
ac:02:19:96:02:1b:6f:ca:11:35:63:37:c8:5d:a3:
83:d8:08:38:4b:06:7f:13:1a:32:f2:fd:1f:1b:31:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:01:A8:AE:F1:98:31:DA:50:A3:1D:60:5A:FB:FD:F8:42:8F:E3
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:73:33:52:42:70:60:f0:b3:d9:95:84:15:19:45:1a:9f:93:
53:a1:e1:1c:30:0c:78:48:10:d0:a1:4c:31:0a:cc:ba:24:5c:
6c:00:07:13:8a:c8:d1:c7:a7:b7:0d:2d:82:04:21:dd:e4:6e:
4e:66:26:ee:3f:68:a0:23:0b:a1:0a:03:d4:3d:e5:37:cf:6d:
b0:76:6b:86:cf:17:a8:b7:a6:90:12:62:8b:d4:2f:aa:87:87:
bc:ec:75:88:3f:81:fb:6c:b9:94:87:ec:9b:a4:8f:fb:e8:35:
44:6c:18:8e:42:bb:94:e5:8f:d6:20:77:a9:a2:15:a6:43:d5:
a8:76:08:7d:6a:31:5c:0f:ec:6d:10:fb:b3:74:ba:f0:9b:b6:
40:96:9a:f8:6d:29:55:71:a7:2e:a3:69:ff:29:f9:a4:83:e2:
a0:f3:dd:b3:2a:7d:fc:0b:6b:77:1d:21:a6:a7:01:e3:11:2b:
b9:a6:2a:6d:a0:5b:c1:69:fd:81:14:3b:ce:49:9b:55:b1:ef:
37:0b:56:30:e0:f6:54:03:48:80:c6:a5:7b:e3:3b:3e:78:3e:
e5:ee:2e:63:87:7c:a8:c7:ac:df:5c:08:56:5f:e7:21:3a:28:
7e:3d:25:e1:f1:fd:31:a5:bc:82:cc:c7:63:fd:71:99:56:13:
2a:ae:07:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9QlOD9pb2BWhMgls99UJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi
MzI1ZjQwHhcNMjYwNDE3MDEwMTI4WhcNMjYwNDE4MDEwMTI4WjAzMTEwLwYDVQQD
EyhjZThmMDFhOGFlZjE5ODMxZGE1MGEzMWQ2MDVhZmJmZGY4NDI4ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmXLZl95wGtIqT+wdcSoQ1nHVR0g
LBIQXju+4ntjXSm/tA9jConL5uPqfj5vp2uvv70gURy93djei85nSODozQHERY/I
M7jrzpLLqoSBwx5fxpar2Ygh5zmf1gwumi7PlsiuEbUcn9KEbLiB1CDaV9BWHr1e
mvAvwlddguhNry7yeZof8ZAipaqeolFHHDHegZwnWD9w0ynt5J6oiH7Zpeup88jY
NgxwUh3c7RrgWAZ1rSnSIslPBAQquhZ+SuzcOGLULCP2+iebemLmnIbcr7dnS0dt
q9NOM21CdWo4PsqsAhmWAhtvyhE1YzfIXaOD2Ag4SwZ/Exoy8v0fGzEOiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6PAaiu8Zgx2lCjHWBa+/34Qo/jMB8GA1UdIwQY
MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt
ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0
LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHMzUkJw
YPCz2ZWEFRlFGp+TU6HhHDAMeEgQ0KFMMQrMuiRcbAAHE4rI0centw0tggQh3eRu
TmYm7j9ooCMLoQoD1D3lN89tsHZrhs8XqLemkBJii9QvqoeHvOx1iD+B+2y5lIfs
m6SP++g1RGwYjkK7lOWP1iB3qaIVpkPVqHYIfWoxXA/sbRD7s3S68Ju2QJaa+G0p
VXGnLqNp/yn5pIPioPPdsyp9/Atrdx0hpqcB4xEruaYqbaBbwWn9gRQ7zkmbVbHv
NwtWMOD2VANIgMale+M7Png+5e4uY4d8qMes31wIVl/nIToofj0l4fH9MaW8gszH
Y/1xmVYTKq4HWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:17 2026 by rpki-client