Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: UaMalt3xlXCkrIi/WBXua9dWhljnztknnhMueAV+xWo=
Subject key identifier: 1E:29:29:2D:6B:E8:68:8B:18:B3:E4:AC:B3:29:9C:AC:E6:2A:65:54
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 01A0DA5F05C8121CD7B11C443CD1F2EA0580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 16D0
Signing time: Fri 25 Sep 2026 21:00:55 +0000
Manifest this update: Fri 25 Sep 2026 21:00:55 +0000
Manifest next update: Sat 26 Sep 2026 21:00:55 +0000
Files and hashes: 1: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (hash: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw=)
2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: dUAc82r24ULy7RpdBvs8NV/jmrdzaOm9CyF4CjQmRhY=)
3: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (hash: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:05:c8:12:1c:d7:b1:1c:44:3c:d1:f2:ea:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Sep 25 21:00:55 2026 GMT
Not After : Sep 26 21:00:55 2026 GMT
Subject: CN=1e29292d6be8688b18b3e4acb3299cace62a6554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:93:cb:be:f3:57:2b:18:3d:db:83:57:c9:
66:79:c8:1c:67:1d:42:64:e4:1f:64:5a:1e:7b:83:
c3:6a:10:ed:ed:8c:f8:8e:5c:7c:78:d6:8c:48:35:
01:3f:b1:21:65:47:47:27:b9:4c:14:1c:2f:ae:70:
2c:b0:0c:26:bb:6e:84:47:c4:2c:f9:1f:06:22:6a:
21:57:c8:64:27:b2:16:27:c0:a1:d5:95:59:a3:62:
91:0c:a3:2d:5d:d5:43:e4:b1:50:57:c9:86:90:0f:
3e:f6:8d:d9:f9:bf:b8:de:32:79:96:89:a4:4a:56:
9e:53:c4:72:03:46:67:bd:27:70:c1:6f:de:08:9e:
07:9d:5f:36:83:24:fd:ae:be:d7:dc:99:97:37:1f:
c3:9c:29:b8:56:ee:79:e6:9b:86:52:ce:ef:64:aa:
7f:27:16:f8:fa:bf:db:ca:02:f7:77:bd:d3:68:18:
47:a4:58:42:c1:b9:dd:83:e4:d3:41:38:4e:fb:3e:
85:ff:27:75:95:dd:21:38:ec:5f:b7:e4:b0:1c:db:
de:b8:a4:32:b4:59:10:91:b4:62:1e:b9:72:7e:a4:
62:b7:18:91:ba:8a:49:43:9a:5c:7b:9e:66:ef:63:
c1:cc:77:b1:6b:f1:bc:20:00:17:ad:59:80:4d:02:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:29:2D:6B:E8:68:8B:18:B3:E4:AC:B3:29:9C:AC:E6:2A:65:54
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e1:58:76:74:d4:0a:eb:1f:3c:f1:19:93:96:e5:6d:1a:69:
40:26:df:6c:e4:16:9e:27:cf:45:92:bd:f8:d3:9a:7d:29:b4:
50:9a:24:f1:69:0b:0d:05:72:a3:f4:54:b7:f2:fe:f1:e3:57:
91:31:06:dc:d9:b7:c9:b8:72:e3:2a:00:fc:76:24:c7:4f:ec:
b8:40:57:43:98:58:6e:3d:f4:cb:93:bb:78:25:8e:b1:92:5c:
dd:31:3b:c6:a9:17:4a:ed:4f:df:27:9e:9d:82:94:ef:ec:2d:
42:79:08:a0:bf:d1:ea:39:3e:2b:3b:f9:0e:19:0b:e4:77:b2:
27:2d:82:39:88:85:e3:43:57:6c:a5:d0:c2:67:ed:98:99:ab:
c4:8e:0e:68:37:24:ac:ae:dd:85:b8:2b:c5:11:ef:c7:89:ff:
3e:34:4b:a2:3a:3b:60:b3:22:ec:5a:06:9b:29:10:bf:1c:2b:
f6:dd:05:8c:4e:e0:dc:e7:df:5a:d6:3f:bf:fc:60:38:a6:07:
d2:2e:c9:83:59:60:b0:19:8d:30:04:07:15:f5:00:65:c2:d4:
e5:f3:3c:ab:1f:41:4c:39:98:5f:fe:32:1f:39:f9:84:df:30:
81:3f:df:a2:a2:e4:62:e8:1f:89:5d:66:81:5c:4e:d8:cc:22:
d3:46:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:13:31 2026 by rpki-client