Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: I2pVcQlPKuEEBlmpeJnBXW6qTJSRO208g809mNUQowU=
Subject key identifier: 5E:11:75:AA:76:44:A4:90:F2:E4:9A:8C:0E:0F:33:90:4A:F2:FC:C8
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019D265F5F16098D8D2AEE9F609CEEF58805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: 9ue2agzfAIo35GmUAoRIfCasK3U.roa (hash: yFoHWICrkhwEa2l89NQ/jxElFE5J+GHyL3e0jPdDNQw=)
2: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: 4r6A93sh4ZD9Pz9AUklv9T+fRVn3wKOB4SJ3C1XoW8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:16:09:8d:8d:2a:ee:9f:60:9c:ee:f5:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=5e1175aa7644a490f2e49a8c0e0f33904af2fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:71:59:da:b9:e0:cf:a5:cf:1b:9a:ed:3f:
85:c8:0e:27:c9:57:92:56:65:e6:78:27:7d:92:da:
c5:8c:40:f9:c2:70:f6:63:a4:8d:a2:53:f4:34:2a:
f3:0a:97:e8:ef:a4:f2:3c:a7:41:cd:6b:c0:05:41:
1e:f3:67:6f:a9:1d:ec:ce:80:3d:aa:ac:13:03:8d:
a8:18:19:cb:6c:dc:2e:72:85:76:58:d0:fa:cb:10:
7d:73:90:70:0f:04:bc:ba:4a:c9:33:67:3e:b0:3e:
f6:a3:31:74:1e:c6:d3:31:1f:6d:26:6b:2c:69:64:
c4:a3:28:6c:47:02:1e:57:fd:4a:9c:e2:ef:f4:56:
be:5b:98:b0:47:a8:4d:32:3e:44:f2:8a:f2:52:79:
50:61:16:46:03:42:7a:8f:58:c6:6e:1a:e0:cd:43:
c6:16:60:55:92:5b:78:42:72:a1:09:dc:fd:39:56:
79:38:73:d0:de:6e:6e:92:82:c6:11:ab:1a:0a:d5:
1d:07:cc:22:2b:a2:43:34:d4:a1:a1:88:66:a4:fe:
be:d2:89:f2:d3:78:af:22:99:a0:ba:a2:cc:ae:cf:
a4:cc:6b:e0:7c:e2:33:6d:67:0a:d4:76:99:7b:10:
d1:58:79:e0:93:42:06:bf:0d:9b:ad:c5:ce:ee:60:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:11:75:AA:76:44:A4:90:F2:E4:9A:8C:0E:0F:33:90:4A:F2:FC:C8
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:86:29:03:6f:9b:bb:da:23:9b:82:8a:84:48:08:5c:f9:05:
cf:1b:3b:19:04:ca:07:ad:d8:7e:60:90:4e:9b:44:56:5a:5c:
c9:7d:12:58:b3:b4:bc:e9:7e:c9:df:ab:87:1d:a7:b6:bf:ec:
d4:d9:db:a9:2a:c4:e2:13:45:30:ee:38:2a:8d:7e:35:21:22:
51:5f:b0:c2:e3:92:58:10:3d:0f:42:b6:9c:f3:f0:a4:52:8f:
21:20:5c:81:bf:51:b3:15:78:a0:77:ba:ba:e9:39:d0:b8:f9:
36:f0:2e:ba:72:97:02:04:70:28:63:42:04:bd:42:64:eb:2d:
d3:4b:af:c0:62:f2:b0:6c:db:8e:d6:a3:67:e4:27:4a:77:71:
3c:ee:d7:c5:c9:50:3d:62:a5:3b:0c:23:97:e9:5e:34:8a:37:
fe:85:65:b0:71:b2:a6:5e:a1:a9:8a:ee:15:d7:14:fe:0d:9f:
18:d3:3f:72:0e:33:81:00:ac:11:68:22:e3:12:22:54:67:a7:
f6:b3:ae:aa:e3:28:b7:af:f8:d8:37:a2:a1:0c:2f:d4:59:98:
b0:b4:83:cf:59:97:9b:9c:7a:c4:c9:b8:c7:32:08:79:7b:dc:
bc:0b:93:a7:f5:fa:d8:8d:94:cf:98:dd:79:7e:80:24:dd:ae:
4f:3e:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:34 2026 by rpki-client