Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: 5+0zCTSJANDyvkDj+j3wxR5HTF3vATQgB7udjZNWpfY=
Subject key identifier: C4:94:DE:09:09:01:B5:9D:EF:2D:D5:E7:03:1C:B6:CE:25:FE:C0:B2
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019CAB6BE43A4068E01AD932ED05BD0469AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: 67wAOunjI/Oaf24QSUxQQbDkJJFiiqxeIIEB8fPfHzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:3a:40:68:e0:1a:d9:32:ed:05:bd:04:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=c494de090901b59def2dd5e7031cb6ce25fec0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:8f:78:8a:ed:b7:fd:3b:c9:9d:bb:44:81:
9d:e4:0f:90:19:32:83:2d:34:82:50:94:40:98:d2:
83:fe:19:42:03:34:86:cf:d0:2f:99:f8:94:b3:5e:
93:c4:33:f4:20:0d:a9:d0:99:01:79:f8:81:4e:2e:
06:50:8d:1f:43:9c:2d:7b:df:54:b7:ce:7e:f8:5b:
b6:c4:53:53:1f:0d:97:86:8c:6c:6b:55:69:83:0b:
f1:2a:8a:1b:62:04:a0:25:31:5d:5e:fe:16:8c:61:
ed:1c:e6:08:60:12:5e:7c:db:48:56:41:07:97:85:
17:2c:a7:12:5a:7e:91:8e:2e:25:bb:06:6a:74:e4:
44:25:4d:b2:41:55:80:cc:a6:c8:73:83:0c:10:04:
79:2c:16:2e:b2:4c:d9:1d:f4:cc:b9:65:f4:3f:55:
ea:f0:be:15:04:32:bc:6f:ab:bb:c8:c5:c4:be:6b:
74:d2:82:b5:e7:62:08:55:42:50:06:fb:28:b6:7e:
d0:66:3f:b8:9c:0f:15:d1:88:ff:26:2c:26:b1:87:
e5:6e:e1:04:92:01:83:ef:32:e5:29:81:53:82:fd:
52:a9:94:e5:c2:be:a1:4b:f2:04:eb:52:c6:4d:a7:
49:11:8a:53:cc:27:11:d0:72:b5:0d:40:76:48:8d:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:DE:09:09:01:B5:9D:EF:2D:D5:E7:03:1C:B6:CE:25:FE:C0:B2
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:2c:d4:ac:79:79:86:8c:40:89:63:6d:1a:3c:eb:14:fc:
a3:47:01:1f:cc:66:d5:96:74:df:4a:4f:63:cd:76:cd:a7:d0:
63:21:ba:e1:1f:7c:74:c3:d2:8a:00:ae:6a:5f:49:be:c3:5f:
9f:d7:11:eb:b2:73:03:5a:74:28:e9:69:aa:d7:a5:bc:ed:79:
c2:78:96:3c:5d:0c:96:ad:19:4a:70:59:be:df:95:1b:ac:7e:
e4:c6:95:51:bf:c7:a0:13:ee:bb:b1:7e:36:54:2f:3f:e0:4d:
80:ba:95:d1:ef:9b:c9:dd:80:3d:b0:45:c7:4a:f1:cb:54:a4:
33:f8:12:e8:dc:dc:9e:8a:4e:ec:c0:8b:b4:cc:8c:d5:94:d2:
77:39:76:0c:49:82:0b:f0:7c:f7:ff:55:b1:34:07:00:ab:ef:
38:58:92:fa:65:dc:46:92:79:01:6c:61:04:6c:15:24:a6:3b:
5d:8c:61:a9:b7:37:96:82:31:78:e0:14:2c:bb:42:9b:f8:a4:
f4:fd:a6:89:42:32:d2:0d:90:5b:9d:68:eb:2c:7f:8d:dd:1c:
db:a0:8d:b0:da:18:93:1b:63:e4:28:89:57:ee:27:cb:bd:be:
19:7e:73:3b:f9:4a:4b:fc:5e:cf:d1:2f:52:11:96:c6:ab:b7:
76:c6:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:28 2026 by rpki-client