Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: f6NP4nSmqIPLIyyxQYinQSJd3NkDtRxgISi5vWbvFU4=
Subject key identifier: 91:B0:87:96:89:8C:B1:25:95:46:D8:EA:97:D1:77:35:AC:1F:FE:91
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 019D38661CE4FDC9C674416A02817BF6AF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: MZb5n18F5H3DOSvwzELtzgDzUrVX6S4xjh1Xpi8N/q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1c:e4:fd:c9:c6:74:41:6a:02:81:7b:f6:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=91b08796898cb1259546d8ea97d17735ac1ffe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:a7:0a:7e:68:21:4a:d2:56:e2:e1:6b:a3:
6c:6d:f4:77:c8:df:18:c8:ea:fd:5a:d4:17:4b:46:
6f:e4:26:08:64:30:97:be:1e:61:06:11:76:07:fd:
d1:26:ce:2e:8f:8c:4e:04:63:30:7e:3f:0d:be:97:
e0:7c:cc:5d:d4:5a:86:7d:60:b0:55:c4:a9:43:8c:
03:bb:8f:35:a5:d5:8e:96:df:1c:9e:2b:c5:a1:4b:
67:a9:95:b6:91:52:1c:72:a2:dc:27:93:f4:c9:ce:
4d:8c:85:e1:60:3d:c5:53:db:d1:6e:8d:18:8b:1c:
a3:94:f6:7a:7f:07:92:bf:fa:a0:81:e2:12:b8:01:
e7:2f:b3:91:f1:ca:ef:b0:08:64:0b:52:cf:dc:b2:
3a:66:d0:14:35:16:79:af:ac:a3:37:99:ef:fc:fc:
33:cc:3c:5a:04:fd:0a:87:f3:75:69:5c:88:d7:b8:
99:9e:e0:74:75:8d:9d:a5:4f:41:56:a3:a6:89:8b:
24:66:c1:fd:d8:0f:10:4f:4c:99:67:cb:20:41:53:
74:5d:24:50:cb:d3:2f:08:27:62:87:a7:be:b8:e8:
16:3f:5c:48:9e:7d:9a:2e:f9:3d:4c:fb:7a:cb:7b:
55:30:11:c8:69:60:af:73:18:21:90:bb:c0:cc:f0:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:87:96:89:8C:B1:25:95:46:D8:EA:97:D1:77:35:AC:1F:FE:91
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:dc:bd:00:5a:ad:d2:7c:0c:2a:30:18:e2:69:e0:ba:a0:
92:43:e9:f6:48:26:d7:11:04:9d:b7:83:5d:9b:00:09:d1:68:
fb:95:4b:f5:01:25:36:59:a9:22:50:8c:1a:0e:ac:fd:32:e8:
67:d9:59:db:14:de:dc:0b:cf:9e:5e:c4:a9:ff:c8:89:c2:af:
b0:7f:a2:ba:4e:7c:ba:3d:9c:34:24:8e:90:e0:e4:59:e5:1f:
5c:9c:de:fc:1b:7d:b5:2b:31:07:f0:47:39:69:e6:4f:6e:60:
cb:4f:e1:61:8a:c0:ab:07:d7:9f:d9:81:2d:2f:80:6d:10:c8:
59:74:68:3b:9a:98:52:4d:2d:9c:e7:c3:80:75:21:8d:f4:06:
65:9f:83:66:cd:4c:4a:aa:e6:3f:7f:f0:1b:0d:28:6e:a4:6f:
69:28:7c:91:16:02:9e:e5:b2:9c:28:af:d5:28:c7:b0:dd:1f:
4f:0b:1a:27:57:e0:b1:81:e0:c8:e8:7b:3e:ee:05:b7:ed:9f:
be:aa:70:97:ce:22:86:cc:f2:84:76:18:ea:d2:1e:5e:6a:f0:
48:a1:22:cc:27:22:f7:bf:55:e2:21:b2:16:59:ac:b0:46:5d:
40:aa:bd:11:3d:08:02:06:cf:7d:59:e5:90:c6:6b:1f:ed:c7:
12:45:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:01 2026 by rpki-client