Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: D7eznFSmUWckk+NK3FLgWE+8QN5mVb8O9LseGqp/XsM=
Subject key identifier: C0:02:DB:96:99:CC:11:C9:47:A6:F0:F5:88:1D:11:46:ED:5B:44:03
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 01A0E4ABFBAC6BFA5F23CFD3E6A3432886C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0BF8
Signing time: Sun 27 Sep 2026 21:01:11 +0000
Manifest this update: Sun 27 Sep 2026 21:01:11 +0000
Manifest next update: Mon 28 Sep 2026 21:01:11 +0000
Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: dHT80LIbTAq+Zr477M4tNUrLaWZDUodEhyi6tFNq7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ab:fb:ac:6b:fa:5f:23:cf:d3:e6:a3:43:28:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Sep 27 21:01:11 2026 GMT
Not After : Sep 28 21:01:11 2026 GMT
Subject: CN=c002db9699cc11c947a6f0f5881d1146ed5b4403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:32:e5:c2:70:e7:ed:73:fd:a7:70:bd:bd:
a3:bd:38:3d:36:43:d6:61:3d:9d:5c:95:dc:f5:e9:
a9:aa:8d:3d:8b:5c:7d:e4:25:9a:64:54:70:e5:63:
8e:8b:d9:cc:b2:6d:2d:94:9e:ed:70:d3:55:52:e0:
6b:30:74:d7:9c:b1:d1:8c:f8:ce:34:3f:ae:b4:a1:
7a:74:72:be:ba:c1:85:46:77:b7:17:65:c9:b0:e8:
01:32:3b:09:17:1f:b0:a0:9c:07:0f:8c:d1:0a:e8:
4e:74:0b:3b:8c:87:f0:f7:55:e7:b6:ce:ea:b6:52:
d0:58:4a:51:f8:c1:07:0a:65:b1:1f:2d:84:da:d9:
81:63:29:85:41:18:ec:30:a9:c0:b8:f4:44:fc:7d:
08:1f:60:b8:04:c6:42:67:9d:fc:ea:82:9b:0c:f0:
03:a2:1c:fe:be:65:08:19:23:40:5e:ff:ee:43:c6:
18:36:6b:ab:8a:b0:98:b1:0e:e6:48:41:80:d2:a3:
d4:d1:8b:2a:10:2d:c1:4c:60:f4:67:14:4a:fc:79:
7d:aa:de:3d:65:43:a7:19:6b:ba:da:f1:c9:10:3e:
fb:39:d9:83:e0:f8:8e:b8:24:3b:a6:67:23:09:2b:
44:f0:ed:d2:3f:d1:83:2d:85:fc:70:cc:e5:2b:8c:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:DB:96:99:CC:11:C9:47:A6:F0:F5:88:1D:11:46:ED:5B:44:03
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2b:d9:85:a3:1e:0e:fd:51:6d:5a:16:85:e0:01:21:bf:e2:
65:f0:e7:02:4e:a6:b7:63:4b:e9:33:21:37:51:02:5c:37:e8:
20:14:b3:2d:9b:54:d7:68:f2:bc:3d:b6:90:70:47:84:21:bd:
11:c4:7f:0c:a0:71:f9:07:69:0a:fa:34:b6:a2:59:fc:ca:58:
62:8f:a5:e7:48:6e:25:23:b4:c6:53:76:66:e4:a3:26:48:81:
49:ed:d8:ad:41:4c:8e:e8:2c:7d:84:b1:ee:5f:8b:62:1d:49:
76:d4:7e:8c:58:84:22:6a:79:28:63:5b:0b:40:f8:f9:f0:77:
9e:1f:fd:36:14:a9:90:11:a4:71:b5:a1:7b:ce:6e:1a:1b:61:
a9:dc:54:45:d2:4e:45:24:ac:0c:52:65:0e:57:1a:d0:95:ff:
fb:71:7f:11:a5:91:1c:da:8e:ce:11:68:7c:f7:12:1b:52:a0:
64:33:d0:06:00:a7:08:d8:42:92:96:c1:cb:41:21:85:bd:86:
bd:cb:76:45:8c:26:75:49:b8:07:75:88:6d:1e:b7:53:25:16:
0d:f9:09:38:84:6a:5b:be:34:26:7a:50:10:c3:f9:5c:74:08:
07:42:d7:a2:a7:18:81:9e:15:d7:80:db:2f:ef:ed:4d:5b:50:
1a:52:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:34 2026 by rpki-client