Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: WKNC9vR8UBQO1Sg/OF36fZKJc8m7WUNFTstULZEz3yk=
Subject key identifier: 21:C4:94:DA:3C:9E:9A:1B:3D:B3:74:71:D3:62:3B:CD:A4:F3:48:E9
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 019F9022F775C81B0A211B87DCD30AF4B6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 1625
Signing time: Thu 23 Jul 2026 18:00:38 +0000
Manifest this update: Thu 23 Jul 2026 18:00:38 +0000
Manifest next update: Fri 24 Jul 2026 18:00:38 +0000
Files and hashes: 1: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (hash: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw=)
2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: 0Wg1Hwgquh/CMdgrZYSkmupi5EpWx6wDd+YDUNqSYdo=)
3: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (hash: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f7:75:c8:1b:0a:21:1b:87:dc:d3:0a:f4:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jul 23 18:00:38 2026 GMT
Not After : Jul 24 18:00:38 2026 GMT
Subject: CN=21c494da3c9e9a1b3db37471d3623bcda4f348e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:14:47:30:22:27:40:92:8d:13:ee:04:67:
d3:ff:36:b0:da:f2:01:6e:d3:f4:8e:e0:ac:22:a2:
df:d7:3b:6a:65:03:b1:d6:26:cf:aa:68:b9:12:ee:
1d:00:9e:67:bd:46:c1:3a:62:b6:1a:7c:d5:ed:94:
46:83:2e:b8:44:47:a9:ae:30:96:0a:e8:96:a9:a1:
76:2e:44:06:4e:df:5e:da:b7:56:c9:25:7d:5b:b2:
64:dc:b3:ca:78:d6:be:12:16:7f:3f:4a:47:13:74:
63:db:db:f6:d8:d7:8d:7e:9b:73:23:61:ff:63:3d:
96:4f:e4:ae:3f:9c:e8:ad:e1:2c:52:1e:1c:74:80:
41:05:fb:cf:3a:6b:10:ae:1c:6c:ce:33:68:7d:53:
8f:24:b0:78:fd:78:0a:cc:6d:8b:f9:ee:d4:65:b9:
ca:d0:4c:b1:1b:cd:98:43:f0:a3:6b:69:67:32:20:
c3:24:da:c3:c7:c8:1a:3f:1a:23:41:64:ad:b2:23:
9f:f5:67:ae:ff:65:0a:a6:c9:1f:d7:67:3a:98:d9:
30:79:c6:f1:c6:c0:ce:91:52:ae:e0:fa:bf:2c:dd:
0a:f1:ab:a7:eb:a4:d0:98:19:89:3d:27:ea:b6:f4:
04:3b:55:5a:48:b8:41:b5:96:ad:2b:66:e2:94:44:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:94:DA:3C:9E:9A:1B:3D:B3:74:71:D3:62:3B:CD:A4:F3:48:E9
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:84:08:a9:2c:cc:8b:70:cc:65:42:2d:8e:c6:7c:66:b3:
6f:1f:7a:9c:6e:d2:4f:ec:61:be:d9:d1:c1:5a:be:52:d3:49:
22:65:a0:41:bc:a7:6b:85:cd:b2:23:be:45:6f:2b:c1:7b:1b:
99:1e:b3:59:85:46:ef:8b:7d:76:a5:67:4f:54:54:77:cb:58:
4d:78:11:9c:0b:89:12:22:d0:8c:11:4c:31:af:d9:2c:bd:10:
8a:f8:70:8f:ed:56:4c:99:3f:59:26:8d:4d:d0:8e:5a:0e:8d:
b0:d1:6c:90:37:f2:c8:61:21:4c:f6:4c:b9:f6:b1:c1:8d:ef:
04:47:d2:8e:4c:d8:f3:69:0d:ae:28:46:cc:bf:1a:eb:af:cc:
b8:a2:94:d2:2e:dd:c1:b8:96:bc:32:d6:6e:e5:6f:92:a9:b7:
76:74:df:f4:6c:18:06:f8:25:c6:ff:6b:da:d9:46:4e:23:3e:
e3:c4:c4:ef:a8:72:43:c1:3c:a4:93:4f:1e:0d:28:ba:80:0d:
88:30:0e:a6:dc:d4:46:fb:2f:ac:74:25:a0:d5:2d:9a:bb:1b:
b8:b3:90:7b:5e:ad:7a:ab:45:2b:b9:fb:f7:73:dc:10:9d:2d:
ce:36:ac:62:a8:b5:49:ed:da:00:b4:96:8e:3c:3f:c6:da:5d:
2d:63:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:21 2026 by rpki-client