Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: 5qS+yavQ//iCboJ7wv9jNbJY4h7HQH1dkx5zKJ3RYMY=
Subject key identifier: 83:1E:D5:FF:2F:8E:9C:D9:EF:BB:EF:FA:DE:E9:76:99:DD:4A:6A:0D
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019D98506D41A594B6F2BAE7E8813A134BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:40 +0000
Manifest this update: Thu 16 Apr 2026 22:01:40 +0000
Manifest next update: Fri 17 Apr 2026 22:01:40 +0000
Files and hashes: 1: 9ue2agzfAIo35GmUAoRIfCasK3U.roa (hash: yFoHWICrkhwEa2l89NQ/jxElFE5J+GHyL3e0jPdDNQw=)
2: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: T/5AECFZ0qVlwHP+093WD5Rk6DiIzjf3Lu3yIwbu4z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6d:41:a5:94:b6:f2:ba:e7:e8:81:3a:13:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Apr 16 22:01:40 2026 GMT
Not After : Apr 17 22:01:40 2026 GMT
Subject: CN=831ed5ff2f8e9cd9efbbeffadee97699dd4a6a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:4b:75:d7:f2:10:ee:a5:eb:1e:29:45:78:
56:49:e9:c1:5f:d9:5e:1f:e5:1e:f0:86:7b:e8:29:
c2:a3:5f:52:75:4e:03:f2:27:8a:90:63:b5:75:4b:
25:f8:eb:98:65:6d:9d:e8:10:36:a1:b5:d5:8a:05:
e6:f2:94:2d:22:44:14:40:d1:12:b8:48:a2:43:31:
9d:20:da:1c:34:aa:14:5d:0c:10:cd:5c:04:53:dd:
f4:7b:3f:b7:f0:eb:d7:22:bc:a2:48:42:8d:8c:4a:
ff:12:07:a7:08:49:01:59:d3:14:69:0e:ed:16:b4:
33:3d:4b:fa:43:6b:43:d7:cd:f9:d5:c7:4d:dc:33:
a1:a0:a4:e3:6a:01:88:fd:c0:f8:55:61:81:94:a5:
e4:07:f0:3e:d9:fc:2c:65:fb:c5:0d:7d:c9:28:88:
60:b5:63:c8:22:75:2c:8d:e8:73:12:a3:99:f4:70:
f6:e1:dd:80:f5:95:bf:82:6a:21:aa:d9:45:11:98:
9f:81:f1:a1:cf:dc:d7:0b:39:e2:7b:d9:af:d0:4e:
a4:11:67:37:50:38:70:3c:33:c5:09:73:8a:ff:62:
0d:79:af:38:02:69:a1:0a:ea:2e:f0:ff:24:cc:48:
73:80:e4:0f:a1:7c:67:43:80:32:85:aa:42:8a:74:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:D5:FF:2F:8E:9C:D9:EF:BB:EF:FA:DE:E9:76:99:DD:4A:6A:0D
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7b:71:ee:bf:b9:93:88:67:5d:03:f2:d2:9c:60:79:1b:7d:
15:1c:fc:26:e2:be:46:e0:24:7e:54:28:d0:d8:0d:10:16:a1:
90:4a:77:13:0a:28:3c:f4:ce:05:8f:fa:1d:36:45:f4:f7:ae:
02:56:7e:67:dd:f5:82:63:82:39:b9:74:70:00:10:12:59:ec:
92:87:87:c0:bc:c7:46:63:55:5d:ca:b4:4a:70:23:bc:b9:f8:
8c:6e:f8:69:d7:9d:ab:a7:38:ba:e3:f2:aa:2d:5e:76:16:ea:
54:0a:7b:1c:c6:af:6f:6a:af:b9:d0:78:39:1e:bb:69:aa:43:
74:3b:0b:f7:ba:4d:a1:76:17:4f:38:fa:ba:1c:ea:3f:d2:2e:
5c:92:17:90:e3:d2:8e:b2:e9:91:ba:c2:ef:88:b4:e1:00:c6:
80:23:5d:c3:67:33:28:40:63:4c:92:ec:94:24:dd:59:af:00:
e5:ac:4e:69:b4:ce:1f:32:86:a4:01:bc:e5:2e:6f:ed:eb:3d:
0f:eb:0a:4c:70:d6:6d:49:ce:e0:54:39:28:08:c8:85:a8:05:
ae:06:0f:ba:6c:5e:f5:ac:16:2d:82:9b:f9:af:1a:1d:cd:db:
1b:85:46:86:90:2e:ce:5b:bb:f9:42:65:0b:e8:b6:7d:5e:a2:
c0:f0:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:02 2026 by rpki-client