Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: V+0bslX64+X3NGNelpgPZ6E6nejvHsmAAiFdfbzVrIo=
Subject key identifier: 41:A9:0C:0A:51:05:1D:9E:6B:C7:56:CC:30:A6:60:BB:04:10:EE:F9
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 019D281659475F9ECE6C25BD4C8F49EC402E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 14E6
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (hash: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw=)
2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: mAT83k4jaPV0zcQa6Q9X1uNdOUxpWerTojkSi4tgQko=)
3: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (hash: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:59:47:5f:9e:ce:6c:25:bd:4c:8f:49:ec:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=41a90c0a51051d9e6bc756cc30a660bb0410eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:4a:5d:b9:f7:75:f9:b5:62:d2:9e:6a:f8:
5a:64:06:3c:95:9f:13:3b:16:83:95:ef:b9:af:5b:
67:b4:41:08:22:ce:1e:0e:aa:f9:7a:ed:3e:97:dd:
b9:c2:db:ca:6e:0f:23:3d:8e:f9:9a:a5:24:72:56:
58:ad:6b:66:7e:3f:ff:69:54:cb:ba:9b:91:f8:5e:
07:da:53:9c:41:ac:ac:83:02:21:02:14:83:14:50:
ef:de:c1:e9:de:f3:fa:2e:0c:d4:fe:07:3f:57:c0:
65:2e:97:81:ea:3e:06:ac:72:45:57:7b:11:5e:86:
6a:53:22:b6:1d:f3:a5:fa:13:1e:87:52:47:fa:d5:
61:fb:70:8b:fe:42:62:96:b3:bd:a3:f0:6c:f1:a3:
8a:28:f7:b6:72:6c:22:d8:e1:0f:7d:6a:e0:f7:60:
96:ad:5f:cc:77:54:70:94:62:bb:52:0c:78:b5:af:
19:84:1b:9a:7b:e2:c3:04:e8:93:11:2e:fe:9a:cc:
ac:14:40:a6:65:60:fb:e7:ec:23:8a:03:3b:6f:3d:
c6:25:6d:f0:f7:71:0d:9e:45:b5:53:d3:8e:08:d4:
5f:29:d2:2b:cc:98:b7:44:67:a2:10:48:9f:28:03:
72:3a:6d:9b:be:3e:e8:0f:42:77:ca:c2:85:eb:a0:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:0C:0A:51:05:1D:9E:6B:C7:56:CC:30:A6:60:BB:04:10:EE:F9
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:6b:2b:06:f0:a1:dc:50:34:a3:ee:a1:90:93:37:69:85:
08:3e:fb:9b:f0:d7:43:a8:46:a8:53:d1:e3:c3:5c:1a:14:d3:
29:92:bf:88:49:33:be:bb:65:22:51:bc:1e:e3:d7:8b:54:b5:
8d:33:c8:8d:3d:fa:3e:39:9e:0a:5f:b1:46:ba:7d:8d:55:92:
94:85:d9:bd:88:ca:94:a9:20:bc:90:ed:b8:ea:1c:b2:ef:89:
4b:32:b8:20:f2:cd:71:93:e2:12:0e:0e:ad:b0:4c:25:56:59:
35:a1:4c:bd:bb:67:a7:cb:f0:4e:ab:26:a0:1c:f7:57:95:e5:
d1:b9:ee:f6:13:4d:15:df:86:74:53:25:d2:cc:57:de:32:7f:
14:8a:b1:16:68:ae:43:2e:7e:3a:51:cd:53:39:fc:fa:30:63:
1b:88:4a:c9:5f:11:88:b2:a5:d2:1f:55:9f:57:ee:d5:77:0e:
2b:e0:fd:59:e6:28:35:47:11:52:d6:4b:2f:f2:7d:5d:93:d9:
77:ff:27:ca:f3:aa:87:0a:e4:8c:22:c0:4b:0b:9b:c4:2d:2c:
49:3e:81:15:d0:94:bc:c3:93:ea:ba:b7:11:66:ef:e8:1a:f9:
7b:ff:6c:f0:05:a0:2e:76:04:c8:2e:6a:96:6b:a2:9d:91:b4:
26:8a:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:22 2026 by rpki-client