Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: hERGwwkroYNETw0pggRt4nkT8PHq0JUPxW4CZtLN8/Y=
Subject key identifier: 78:A6:BE:D1:26:32:A5:41:4F:95:E6:83:FA:8C:63:4B:88:49:47:40
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019D98F4273187E1C474795E2E14F9A1295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:30 +0000
Manifest this update: Fri 17 Apr 2026 01:00:30 +0000
Manifest next update: Sat 18 Apr 2026 01:00:30 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: MFPzQGXrtvnXDtDV/inypCtB+YhKkLJQjdHScToqQQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:27:31:87:e1:c4:74:79:5e:2e:14:f9:a1:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Apr 17 01:00:30 2026 GMT
Not After : Apr 18 01:00:30 2026 GMT
Subject: CN=78a6bed12632a5414f95e683fa8c634b88494740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:4e:54:29:f7:a1:5d:b6:30:36:53:56:9b:
7b:88:a8:99:3d:41:1e:2a:99:54:54:61:2a:8f:f5:
e0:bb:40:72:2e:66:a1:86:f8:49:c7:7c:0f:64:4a:
d1:1d:d8:19:d6:c7:2c:c0:48:8b:76:fa:2c:bf:15:
43:c1:69:d3:b0:b9:78:a1:48:f9:d7:f0:48:16:15:
16:d5:06:e5:3f:39:17:67:1c:7f:9e:6f:b8:67:fa:
f9:2a:72:94:04:c3:1e:1e:97:f4:70:1a:e8:5a:41:
21:47:30:da:0d:0c:30:e9:ba:03:00:56:46:fb:2a:
61:91:d7:8d:2f:77:ce:9a:4f:99:ad:fe:db:73:36:
91:1b:f5:d2:92:1d:1d:b7:b0:de:53:8b:5d:9d:d0:
39:14:37:2e:62:b1:3e:3c:07:8b:a5:17:ff:17:2e:
90:c8:6e:3b:1e:e2:41:f7:15:18:a7:38:53:53:9f:
4e:e6:e7:4f:c5:c1:12:91:cb:05:bc:87:dd:42:6b:
80:66:1b:52:98:14:1d:99:22:f1:1a:55:09:76:69:
73:5d:b9:55:67:b5:1a:cb:1b:76:6a:a4:3b:bb:33:
c6:7d:7d:f0:a0:26:91:e7:57:2b:26:dd:e4:79:60:
c4:68:40:4c:5a:93:66:46:12:37:32:ab:82:ac:a4:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:BE:D1:26:32:A5:41:4F:95:E6:83:FA:8C:63:4B:88:49:47:40
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:39:c8:25:04:74:f4:2e:34:ab:d4:28:79:0d:b4:30:3f:
6c:f6:37:a5:92:9d:8d:31:70:95:c1:22:2a:ba:3a:4d:34:fb:
c4:37:42:62:38:17:2f:ac:6f:63:6d:4a:fc:dd:7a:5c:0d:35:
14:1d:9d:94:37:c3:8d:e5:0c:c3:91:6a:47:15:73:b6:ac:12:
d8:fd:42:a9:99:d9:10:0c:b7:96:40:2b:59:78:25:2d:5a:ba:
fc:aa:b4:f3:1c:24:6a:b9:f4:ff:43:3a:4a:77:b5:e4:db:e6:
aa:0b:7c:c9:25:d4:46:27:39:9b:86:db:1b:9b:7c:7d:84:74:
4a:06:80:ba:11:cd:7e:5b:7e:00:67:86:18:52:ee:93:f2:04:
99:15:e8:a9:2e:a4:5a:a7:df:9f:cb:45:18:8b:50:54:cf:d9:
03:5f:b5:2f:90:2d:b1:b6:0b:aa:ee:53:08:f2:19:46:f9:fa:
7a:0b:44:43:f4:25:74:ab:c7:d1:ea:6b:4b:cb:53:11:f3:c4:
ac:9f:bc:59:cf:6c:fa:04:e3:c9:57:9d:70:08:fc:a0:87:21:
6f:7f:f7:f7:09:19:0b:42:9a:35:3d:74:1c:84:59:43:59:2f:
1e:8c:19:e5:28:7b:d5:a4:07:cc:e0:61:50:e4:90:75:20:82:
f5:f8:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:15 2026 by rpki-client