Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: BlMxR5hSOKR/gWXfShkwZ9mguGr9uuwzw9LV8p89QC4=
Subject key identifier: F8:B6:54:71:6B:B0:5E:75:25:60:3E:27:EE:0A:41:AD:CE:9E:73:AE
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 019DB13366D4B3764329DDDB26DDA594282C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 152D
Signing time: Tue 21 Apr 2026 18:00:28 +0000
Manifest this update: Tue 21 Apr 2026 18:00:28 +0000
Manifest next update: Wed 22 Apr 2026 18:00:28 +0000
Files and hashes: 1: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (hash: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw=)
2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: C/+QGBzeBiXi5hjLyPWsWIwGh65lN0nliYIE9TB92i8=)
3: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (hash: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:66:d4:b3:76:43:29:dd:db:26:dd:a5:94:28:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Apr 21 18:00:28 2026 GMT
Not After : Apr 22 18:00:28 2026 GMT
Subject: CN=f8b654716bb05e7525603e27ee0a41adce9e73ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:97:3b:7b:3c:03:e8:d0:9d:ee:70:48:45:
6d:6b:9f:1e:9f:22:70:bf:44:5a:58:c5:1c:e8:1e:
80:f1:6b:73:15:a3:19:bb:0e:4e:2b:29:0b:21:e4:
79:57:4d:18:c0:93:bf:76:36:b5:68:e5:2e:85:c9:
fe:da:9d:03:30:26:67:2d:aa:8d:e5:78:da:94:35:
17:ea:c6:69:b9:bc:8c:04:92:d6:a1:a5:72:4c:5d:
af:12:45:a5:b7:18:0d:56:0b:90:00:ff:3b:0d:5b:
db:92:88:dd:82:84:d9:cd:23:35:0f:7b:a8:c9:b8:
d7:a6:a7:1f:b1:55:9d:92:42:c1:97:46:6c:39:a1:
87:b6:0e:c3:2f:4c:20:8a:01:14:8f:b7:a1:a0:8e:
23:81:15:ae:5a:03:e4:10:cc:9c:6f:06:8c:5a:ea:
f4:a0:6b:64:fc:68:3c:69:f8:87:16:45:92:d5:14:
56:b4:93:38:c5:6f:fc:ac:eb:14:cb:4e:c2:ba:d5:
14:d0:f5:a8:60:98:f4:c7:d5:d5:87:83:87:31:2e:
3c:c3:3b:19:05:4c:0c:8e:dc:19:14:cb:7e:6d:ee:
96:9f:d3:0d:09:a8:36:67:1a:59:be:b8:e3:0e:32:
b0:e7:6f:f8:73:ef:fb:28:e6:95:71:62:af:e5:f4:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:54:71:6B:B0:5E:75:25:60:3E:27:EE:0A:41:AD:CE:9E:73:AE
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:8c:19:31:24:07:6b:0e:78:c0:b2:d9:28:8c:36:15:04:
b5:17:7f:8a:b5:5d:91:37:58:4c:f2:85:95:e6:75:2d:47:e2:
39:c5:28:6f:17:79:ce:c4:aa:4f:8b:24:34:bd:da:11:c8:13:
c6:f4:ef:f5:f3:ca:a9:a1:26:2b:ac:b9:59:2b:d1:63:3c:27:
67:cf:0a:97:65:6c:7d:1d:06:4f:d8:1c:26:9f:9c:f1:7d:72:
33:91:80:0c:9e:19:7c:2b:b7:c9:ce:02:2a:06:e9:92:03:28:
19:47:b9:9f:8a:11:b4:94:ce:b2:55:58:01:45:ae:96:5f:82:
b8:59:02:fe:f7:28:0a:2a:64:b5:6d:d2:1b:0e:c4:47:28:50:
0d:0e:c4:56:fb:bf:f2:ed:02:4e:39:80:3f:b7:9f:f4:5d:0d:
13:83:12:ba:7f:c8:47:ea:75:4a:85:91:db:cc:f0:81:03:1b:
d5:d3:86:e0:61:91:39:ca:1a:89:ee:d1:97:cc:dd:74:9d:54:
8c:d4:ce:f4:6f:a3:d7:cd:aa:4a:bc:32:7a:b3:e5:8b:52:75:
a5:69:d2:f6:64:5b:f9:a3:ff:95:8f:7c:45:f8:e8:ab:2b:00:
34:11:89:05:f6:05:48:da:f0:f7:e1:42:56:c2:28:13:25:1c:
c0:4b:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:27 2026 by rpki-client