Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: sQ/W8HyWSZkNrK8G/bYYFbHibWDHJsLoPtbrqLvCsTA=
Subject key identifier: 6A:F5:FF:D4:18:8C:C2:BD:2C:0F:46:D9:F5:D7:7C:9A:D3:44:2A:A2
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 019D2703A699DFE71BAEC0A980D91B9E566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0C92
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: YLUpRGXMDdlegSa/I3pFnTvV5q32rUWP4B21bzc5t6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a6:99:df:e7:1b:ae:c0:a9:80:d9:1b:9e:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=6af5ffd4188cc2bd2c0f46d9f5d77c9ad3442aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:6e:19:1f:6f:67:27:d8:a7:07:be:e5:9d:
9b:43:b4:d4:ae:c9:a1:5e:f4:b7:b3:1d:0d:ed:a5:
6c:1a:f2:06:41:1c:03:5a:05:61:7c:ff:32:54:4a:
3a:6e:4c:90:09:64:c7:b4:22:97:04:70:61:a2:7b:
ba:d7:50:b7:78:cd:b7:ff:ec:d2:aa:56:74:6c:42:
5b:8b:9a:43:b4:4e:79:54:a8:65:da:a4:cc:4b:17:
d3:de:27:29:60:01:15:c2:56:d6:65:c8:45:84:57:
62:50:3a:45:53:29:e1:f1:5a:11:b4:25:d9:65:b7:
00:65:85:3b:a6:e0:34:c9:4e:50:96:6c:34:89:2e:
35:d5:47:d1:ee:1a:10:17:58:ba:a6:37:54:dc:d3:
96:1a:ad:60:fc:05:93:1f:63:2a:b3:17:b7:7d:56:
bc:cd:e6:04:13:33:9a:d4:ab:f7:d5:d5:84:6d:8c:
cd:e3:07:57:6b:83:5d:8a:a7:be:84:44:5e:8a:28:
1e:6b:30:0d:bb:28:2d:cc:4d:8b:84:13:84:39:ff:
46:e7:01:0a:eb:59:85:0d:f8:22:b1:fe:39:4f:ed:
e6:b5:ad:6b:13:9c:19:71:91:76:6e:2b:dc:01:9e:
c8:9f:b4:0c:ea:78:be:8f:1d:09:bd:83:4d:40:2b:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:FF:D4:18:8C:C2:BD:2C:0F:46:D9:F5:D7:7C:9A:D3:44:2A:A2
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:21:93:d5:8e:de:5a:71:10:23:fc:b4:68:29:f7:ea:9d:25:
f2:d4:c9:62:e3:f0:f8:fd:3b:ff:4b:29:5c:0b:90:4b:3e:42:
2a:c1:d2:0d:63:b4:bd:da:90:61:10:7c:d0:b4:82:ad:c5:84:
e3:69:f0:0c:66:c7:f0:b8:0f:4c:27:6f:c5:f9:23:eb:62:9b:
a0:95:d1:f0:e0:cc:4f:c0:75:03:0a:34:18:5d:40:7d:2f:97:
37:a5:c7:aa:99:26:70:4c:07:8c:e0:d2:50:db:61:c7:01:2d:
06:05:41:29:c7:9f:1e:c6:8b:25:8a:70:92:11:4b:96:1f:c5:
23:7f:57:73:93:f6:f0:6c:96:05:65:a3:7e:dd:cf:6e:af:b8:
51:5d:48:e9:f7:be:e5:26:00:26:da:2d:df:0d:8d:64:bd:cc:
2d:40:4b:e5:eb:58:17:e4:e5:1b:d7:38:2d:0b:a1:ee:61:d4:
e9:56:e4:90:95:40:93:37:39:8c:e7:39:ef:9f:f7:04:b2:d8:
6f:ad:24:2f:c6:59:f9:8a:af:86:57:07:bc:70:44:3c:8a:3f:
3e:6e:db:3b:e6:e8:78:c0:09:7a:6c:fd:b1:aa:4a:d2:51:95:
0d:02:8e:83:13:37:ec:67:23:ee:cc:85:2a:37:9c:d3:52:fd:
59:0c:26:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:05 2026 by rpki-client