Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: npcNQh+KxwKatjjsZDeXrSMfOSNmZdLoxTnYWsHdHW8=
Subject key identifier: B0:86:7A:76:98:78:ED:14:88:AB:A0:DE:AE:CD:99:46:90:03:98:D6
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019D26CD04BE861C88197E9287D2609CC167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0A08
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: 9u79KGnOHDmk/4ju6ZCiUaxUqfQHE5VzHqKUdzBLk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:04:be:86:1c:88:19:7e:92:87:d2:60:9c:c1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=b0867a769878ed1488aba0deaecd9946900398d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:7b:ba:04:94:b8:30:c2:f8:3a:fa:cc:0c:
91:7c:d5:83:85:b5:a3:23:e2:75:f9:f1:0a:70:c3:
28:bf:a4:2e:21:53:91:76:3d:c4:e2:10:d7:4f:72:
2d:56:81:5a:bd:7e:95:c0:d4:7b:2d:1a:3f:87:39:
49:18:7f:f3:41:7e:21:3f:fc:73:86:40:48:8a:3b:
14:bc:47:1e:48:e6:09:2e:c0:02:bc:1a:84:8e:9e:
92:a3:db:1e:e1:ca:a0:ab:8c:63:6b:98:82:a6:9a:
a6:7b:d3:5b:5d:20:5b:ac:b1:85:76:cd:df:06:a4:
7a:d3:7b:5d:67:dc:9a:04:d7:66:25:80:d6:a1:eb:
0c:51:e7:3e:2d:3a:3c:3a:ee:a1:59:ac:7f:b2:3c:
e6:57:04:e1:fc:1a:26:63:29:33:39:0b:31:fc:f6:
92:63:28:17:5f:fc:a3:27:65:30:51:97:95:f8:06:
b5:06:2c:a0:8a:c9:75:51:97:6f:8d:04:06:87:62:
9e:4d:10:e6:43:22:4f:95:15:a5:15:d8:3c:b4:95:
98:cd:e9:65:07:1e:d9:bc:18:79:9a:b8:bb:3d:54:
95:bc:d3:aa:f4:22:2f:7e:6e:c9:0c:f3:21:e4:07:
4c:7e:63:b6:c0:b9:6f:40:44:a6:11:ca:3f:bb:0a:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:7A:76:98:78:ED:14:88:AB:A0:DE:AE:CD:99:46:90:03:98:D6
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:aa:a0:7f:ca:32:78:e5:15:18:86:f2:a7:ae:59:63:8c:
6d:86:c8:0f:cb:8f:16:d1:bb:04:cc:f5:90:b0:9a:f4:97:79:
da:a4:18:aa:f1:b5:3c:c2:d6:f3:10:9a:c3:35:17:0f:d1:13:
d8:1e:bb:46:d1:f4:a6:3d:fe:bb:e9:76:2e:05:f3:c8:30:aa:
5d:3f:e7:75:8c:1f:dd:4e:8e:4a:91:91:8c:6f:1a:19:26:18:
51:75:11:b5:c3:12:6e:cc:d5:d6:03:ff:15:d8:10:ff:94:e7:
56:fc:b5:c0:7c:cd:da:1e:6e:63:75:4d:86:1f:d4:0e:c8:8b:
1a:e3:49:6e:a2:33:d2:59:c7:23:90:e4:07:76:e9:56:66:ab:
ec:6d:48:f8:8d:56:8c:98:e9:01:d2:b7:a6:df:b8:b2:30:b8:
c4:03:09:a4:28:b1:e0:66:ed:b9:20:2d:e0:f8:be:83:d6:00:
c7:5c:51:96:84:b8:96:6f:a7:75:0a:a0:8b:30:77:4c:d9:21:
df:e5:12:81:66:d1:21:c3:ac:dd:cb:32:31:71:7f:fe:ac:bf:
94:39:5e:93:7d:1f:29:2e:c8:57:de:64:3f:09:29:1c:a6:9b:
ed:73:88:64:fb:3c:c2:82:87:4c:e5:f9:e4:e5:f3:30:4f:e9:
4c:e7:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client