Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: Bnl8L3v3DJt05TetXsNDnv0OB/bN8DxkWLxtY8jjWU8=
Subject key identifier: D3:F3:22:0B:B6:28:11:00:A8:BA:D5:55:C3:9E:DC:BB:3D:FA:F0:4F
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019D39AF58FC05203A79797386C439A94E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: 9ue2agzfAIo35GmUAoRIfCasK3U.roa (hash: yFoHWICrkhwEa2l89NQ/jxElFE5J+GHyL3e0jPdDNQw=)
2: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: UqIHESQarwq0BsbhSwBJztRAqBuYnFMlGYyRjvYD+6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:58:fc:05:20:3a:79:79:73:86:c4:39:a9:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=d3f3220bb6281100a8bad555c39edcbb3dfaf04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:00:95:ef:7b:cd:4b:f9:d5:7e:ce:ea:0c:
e7:7f:21:65:d2:ff:db:4d:3d:fe:85:77:bb:e8:88:
a6:11:b5:83:01:d1:f5:ba:e3:0b:15:3d:02:06:05:
7b:d6:51:1c:73:67:45:9b:ed:9e:61:50:c5:8c:dd:
cd:3a:27:2c:c1:80:15:d3:57:96:89:fd:93:e9:1d:
42:f7:21:65:10:37:de:30:bc:6e:20:a2:3c:90:fc:
91:e4:38:6f:2b:84:85:d7:35:18:de:80:9a:d4:43:
07:91:f8:76:56:30:3b:1f:c4:7a:38:9c:16:02:de:
e6:09:b0:ce:c3:03:db:43:27:8f:c3:45:d7:00:00:
86:de:77:f3:67:dc:47:7e:9a:8c:65:45:f3:36:e6:
09:9b:1b:3a:e5:e3:6a:a4:e0:a0:52:00:f9:07:4b:
bd:fb:18:a1:2f:14:ce:a6:47:f0:b9:6f:c2:24:84:
ba:6c:7a:a6:80:8a:13:87:ec:24:c1:fd:b1:65:45:
f0:16:a0:12:f2:94:d4:f5:03:d6:12:07:7d:7b:21:
90:fc:ea:a3:78:67:a3:45:8a:19:9c:2a:1a:9e:41:
58:df:68:4c:b4:46:8b:c4:cd:7f:81:43:b7:0c:a4:
b0:1b:25:c0:5a:94:8d:e8:f9:32:3e:c3:30:2f:e1:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:22:0B:B6:28:11:00:A8:BA:D5:55:C3:9E:DC:BB:3D:FA:F0:4F
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:de:c1:a9:bf:e3:ce:55:1c:d1:a4:a9:26:73:28:85:1a:7d:
1f:70:7d:59:31:17:f6:f8:43:34:9d:2f:3c:8d:8e:15:f5:44:
f2:92:de:47:24:96:4a:1c:c4:93:8b:3f:d6:c3:77:9c:f3:06:
64:9c:9f:6f:3e:b0:13:75:56:c6:47:f8:2f:18:a5:c7:54:e8:
f8:54:43:fa:f6:a9:8c:c4:e3:9e:71:fa:ba:f9:7b:c0:98:f8:
a5:26:f8:aa:ea:0f:23:54:49:24:2d:f7:32:7c:22:c2:e3:10:
3a:8d:3f:d6:f4:d8:5f:d8:ff:76:e5:d5:2e:e0:cc:82:4e:be:
eb:15:80:49:1c:e9:8f:f8:58:c7:fc:e7:06:e8:8d:bf:a6:74:
e7:73:3e:de:3b:84:45:dd:cb:9d:1c:c3:60:47:c7:19:4c:f6:
65:11:c6:93:41:ce:0a:42:2f:f4:cd:d2:a5:bb:2e:c7:98:73:
87:e0:9f:05:66:f0:64:2b:6d:13:8a:fb:ab:24:39:79:12:2b:
2a:89:3d:ae:85:f7:05:62:d5:10:63:70:dc:3e:7b:24:46:55:
51:92:7c:bb:62:ed:c1:5e:0a:1a:f8:33:6a:f1:19:cb:57:d2:
f7:de:a7:4e:c2:1e:33:c2:45:12:a2:e8:38:05:12:87:96:c3:
85:3c:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:30 2026 by rpki-client