Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: nomiZpKqoWrkhNcjbPcGU0x1WULN9Iqf6O8R9h+3YrA=
Subject key identifier: 57:60:12:E2:E4:BF:B1:EF:5F:E2:E0:1B:DE:D0:8D:3C:3A:18:A9:6E
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019D38658440780EA6966706E9C2C58DDFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: y2g/otBG+aB6tlEDQsB6J0+i9zhUM5/GpsGsW7zI4Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:84:40:78:0e:a6:96:67:06:e9:c2:c5:8d:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=576012e2e4bfb1ef5fe2e01bded08d3c3a18a96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:50:1a:11:fa:14:d2:de:66:fc:2b:e7:66:
d7:62:07:de:69:61:a2:e1:79:3a:1a:60:1f:99:1f:
20:ed:47:84:c9:a2:1a:94:5a:5c:5a:30:6a:a7:0f:
6f:69:a5:83:0a:03:64:43:07:7f:84:7e:2b:f7:cf:
08:d2:f7:e5:d8:0f:56:a7:f8:98:27:aa:0e:16:91:
cb:e8:17:79:0f:2c:c0:19:a4:c1:28:cc:f0:7c:44:
2e:90:f4:5e:29:87:fd:af:e2:30:a7:ff:f8:ce:a9:
01:43:e8:86:9d:81:33:d8:bc:03:b6:ed:cd:86:c4:
a8:d1:14:88:e8:6c:45:0d:4f:16:dc:b9:91:64:ac:
34:29:0d:d0:ce:e9:27:c1:06:71:af:bf:04:0f:43:
39:68:14:92:b7:05:20:05:b4:7e:6c:35:4b:77:55:
77:e8:c2:5e:61:2b:e6:db:ed:99:62:43:bc:6e:6a:
0c:35:05:b4:7b:90:62:0b:0d:65:92:cf:29:b9:81:
74:e0:21:d1:0c:1b:e6:53:99:45:57:1e:ac:8d:3e:
55:d7:dc:4b:2f:1d:7c:41:a3:82:f6:e6:b7:d4:20:
ce:70:e4:82:58:39:28:4a:31:21:61:dc:f9:b9:76:
54:93:be:2d:8a:39:72:fa:f5:f2:41:b2:05:17:20:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:12:E2:E4:BF:B1:EF:5F:E2:E0:1B:DE:D0:8D:3C:3A:18:A9:6E
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7f:e6:b8:8c:04:c5:4e:d8:be:b2:99:81:37:9e:ca:fd:ac:
c4:b6:90:76:7a:96:0b:f8:cf:3d:2e:d4:58:91:c1:59:58:61:
3b:22:1c:5d:90:53:81:22:d7:52:c1:47:e3:85:1e:18:aa:dd:
5d:6b:2c:b2:c7:cf:d5:da:08:65:af:05:e4:07:85:9e:78:8d:
cb:f6:8b:8a:aa:4f:0b:3e:0d:08:fd:0b:a7:34:1e:07:4a:ea:
45:56:16:c4:0c:ea:12:1d:18:86:ad:7c:3e:ef:6b:99:dd:41:
27:d5:ed:bb:29:61:77:6e:36:4b:2a:35:ae:72:74:30:75:1d:
65:e0:e7:9a:c6:18:6e:c8:bb:01:b0:97:88:9f:1f:21:63:be:
5c:4b:b8:6f:3a:12:2b:d8:6f:b2:c0:d5:3f:23:bf:d0:42:5e:
12:c2:bd:62:67:78:d8:db:b0:84:71:61:00:c8:45:0a:9e:47:
b0:04:b5:f7:81:ef:3a:ed:36:a4:f2:98:4e:eb:c7:df:74:dc:
af:e8:ab:a2:17:db:4e:18:94:4f:1d:65:4b:44:fa:3d:95:8a:
a5:7f:89:19:34:56:65:81:ad:c7:24:63:5e:e7:68:ba:a9:9e:
69:38:7f:fe:32:0b:06:44:93:12:ef:f2:ae:85:21:2e:38:14:
9f:ca:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client