Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
File: M_PHSnWNqUu1mmZyrZAesl6SMWU.mft (raw, json)
Hash identifier: J6CIlx1sDasnTBh1Ot+TYqBfcsvDlx9yZo/0jkynn7w=
Subject key identifier: 42:6E:5A:E9:A1:F4:A6:3C:4B:A0:D0:F5:A2:3F:39:4C:54:F0:48:8D
Authority key identifier: 33:F3:C7:4A:75:8D:A9:4B:B5:9A:66:72:AD:90:1E:B2:5E:92:31:65
Certificate issuer: /CN=33f3c74a758da94bb59a6672ad901eb25e923165
Certificate serial: 019D32D09FC418B3DC3C4229F04F78BEB54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_PHSnWNqUu1mmZyrZAesl6SMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
Manifest number: 4F
Signing time: Sat 28 Mar 2026 05:00:26 +0000
Manifest this update: Sat 28 Mar 2026 05:00:26 +0000
Manifest next update: Sun 29 Mar 2026 05:00:26 +0000
Files and hashes: 1: M_PHSnWNqUu1mmZyrZAesl6SMWU.crl (hash: I91TUffrEJ91e4m5AoQ2apDfpgo9ydKclrSENl4Q+/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_PHSnWNqUu1mmZyrZAesl6SMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:9f:c4:18:b3:dc:3c:42:29:f0:4f:78:be:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f3c74a758da94bb59a6672ad901eb25e923165
Validity
Not Before: Mar 28 05:00:26 2026 GMT
Not After : Mar 29 05:00:26 2026 GMT
Subject: CN=426e5ae9a1f4a63c4ba0d0f5a23f394c54f0488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:82:40:9c:66:92:09:da:ad:69:f8:3c:f8:
3a:4c:35:8e:48:0a:d4:62:5f:6f:67:dd:e9:82:a8:
8b:2b:3f:dc:ba:21:9c:9b:c1:b5:b5:f5:ae:61:11:
a8:1c:55:59:e1:e6:ab:37:4b:94:69:96:50:7c:6f:
a6:52:a6:63:38:a6:2f:e9:f3:30:c9:f9:7c:3f:1f:
63:85:91:a2:02:a8:b4:da:ab:5f:ab:fb:a6:77:25:
f6:4c:15:2b:5a:e7:44:7e:bc:b8:98:d1:c2:dd:1d:
5f:1e:4a:e4:a0:62:7b:b2:29:c2:52:81:2b:17:c4:
5d:93:9a:5c:94:b3:3f:a6:39:26:23:33:87:f6:c7:
9c:d2:0a:2c:0f:be:32:ce:18:be:2a:fe:bc:da:26:
df:52:a8:1a:a1:19:dc:ee:64:2e:bb:4b:c9:db:c1:
5f:ee:e9:fd:d9:a7:fb:7a:65:07:82:66:84:99:77:
d4:59:b6:e9:80:7d:08:21:59:02:6e:21:5b:fa:66:
73:08:fa:35:44:b6:fd:4b:be:8d:26:66:56:8f:0c:
8b:68:15:4f:0b:c5:fc:55:f4:c0:37:e1:ae:09:62:
2d:2a:e4:13:4a:3a:85:d3:c4:a1:35:af:a9:78:da:
dc:e8:eb:2d:f6:15:5d:19:91:6a:9b:15:fb:fd:fb:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6E:5A:E9:A1:F4:A6:3C:4B:A0:D0:F5:A2:3F:39:4C:54:F0:48:8D
X509v3 Authority Key Identifier:
keyid:33:F3:C7:4A:75:8D:A9:4B:B5:9A:66:72:AD:90:1E:B2:5E:92:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_PHSnWNqUu1mmZyrZAesl6SMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:12:e4:37:70:bc:1b:82:a1:75:6b:08:4a:40:37:b0:f7:67:
2a:13:02:2f:7a:93:fd:b8:20:99:1e:20:17:60:d2:4c:65:2a:
b8:c0:de:a2:28:08:91:bc:fe:2a:1d:36:31:e6:ac:23:21:d7:
70:37:06:83:72:ac:7f:57:7a:c9:b1:b3:96:a5:86:77:19:5c:
c9:5f:cc:02:ef:68:5b:b4:31:b5:c7:b9:2b:1d:b2:5f:9f:c0:
0a:0b:94:fc:17:64:7e:77:0c:6f:b4:e7:57:af:5e:d7:df:67:
c0:0e:9d:c8:d2:bb:ec:e7:9d:32:9b:a2:f9:82:6a:54:b2:5c:
06:a0:a3:27:9a:61:4f:ca:79:7b:e9:47:d5:d9:e0:ef:cc:53:
0f:1d:34:22:ac:37:85:0f:70:37:cc:fc:a5:07:93:52:ee:e9:
e3:7f:9c:99:cd:6b:36:ca:3d:22:0e:e1:c9:30:46:21:ce:b4:
22:48:39:1b:9b:1c:ce:ea:6a:4a:be:9b:22:9c:6d:b3:68:92:
64:b7:a0:ac:42:ab:c8:34:3c:62:ea:ff:a7:8a:41:4a:5e:b3:
7b:fd:d2:2f:8f:66:90:aa:aa:56:17:bc:56:ce:1b:a5:fe:8d:
99:4b:cd:44:89:5d:61:7f:6a:35:97:5b:96:e9:0e:3a:62:5f:
87:07:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:53:49 2026 by rpki-client