Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: 0KEFu9JJX+itJvzybAK6AM6+xaBMm3M5IR8MQ8T8y7A=
Subject key identifier: 3E:C4:C0:18:CD:33:FE:E2:0B:E1:D9:2D:49:F8:72:D6:44:84:38:8C
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019E1DFE1C2CC00E726036B1730BA6EB55A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0A88
Signing time: Tue 12 May 2026 21:00:53 +0000
Manifest this update: Tue 12 May 2026 21:00:53 +0000
Manifest next update: Wed 13 May 2026 21:00:53 +0000
Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: qqOH3sus/e+dmN5EKjz8zAdr2nrZkFBGOKZ5rVg2LPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:1c:2c:c0:0e:72:60:36:b1:73:0b:a6:eb:55:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: May 12 21:00:53 2026 GMT
Not After : May 13 21:00:53 2026 GMT
Subject: CN=3ec4c018cd33fee20be1d92d49f872d64484388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:80:c1:92:dd:a3:5e:0b:9e:08:c3:23:55:
ec:67:29:da:77:4a:00:c2:f1:4e:0d:96:c5:7b:c6:
37:5a:e0:62:aa:24:11:e1:51:4e:ad:d9:82:27:60:
25:f2:bb:1c:e9:6c:a3:9a:d7:71:c4:97:b1:5e:ee:
78:c7:e8:4f:0b:6b:b6:27:a5:82:79:b6:de:8c:c7:
83:51:9c:9b:25:4b:83:bf:6a:33:fe:9b:8d:4e:83:
1e:dd:f4:2f:1e:91:d9:27:1c:10:c9:22:7f:53:9e:
38:49:18:90:39:d4:90:69:5b:86:71:e7:42:15:1f:
1e:2d:88:fe:39:06:2b:b3:fc:4d:fd:a1:d4:2b:2c:
4c:b2:c0:7e:a7:cb:eb:80:29:bb:87:28:c5:bf:29:
9f:5b:87:08:c5:42:30:42:08:a2:71:2b:3d:d5:fc:
0e:9d:0a:47:a1:7d:79:a2:b3:57:cb:a8:d5:81:30:
48:4b:4c:c5:82:4f:f1:a4:bb:a2:0f:0a:6e:a6:7e:
33:ac:6b:47:d6:6c:2b:ee:aa:b1:5d:ad:1f:99:6d:
31:87:9f:7b:bb:5f:b1:ca:7f:c2:73:73:29:b5:99:
8b:8e:f3:93:63:b4:73:8f:56:62:2c:57:b7:1d:ed:
85:60:dc:4c:12:81:0f:b2:16:27:7d:57:80:3d:78:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:C0:18:CD:33:FE:E2:0B:E1:D9:2D:49:F8:72:D6:44:84:38:8C
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:cf:8a:dc:65:90:1a:c7:10:18:86:84:c1:4f:73:b1:15:02:
ff:43:3f:a7:dc:6c:2d:2a:d4:bf:18:bc:5c:6b:71:e2:f3:ef:
5a:40:08:51:a2:c1:00:c8:a9:5e:24:dc:69:35:ed:72:7d:44:
05:6a:44:0a:4a:af:cd:72:38:59:f3:c9:d1:a6:50:bb:88:09:
66:5d:92:fd:53:16:9b:8e:8f:0b:fc:75:f4:2d:72:54:25:03:
0f:93:0a:93:2b:03:05:55:7a:ae:aa:3c:31:78:1f:4a:c7:e8:
1c:84:6b:7f:7d:8e:51:af:90:ec:52:fb:56:d7:ae:2a:10:f2:
d9:c5:ef:dc:fe:45:55:d8:ab:66:8f:38:f4:14:62:6f:77:fe:
3a:7e:84:0f:9b:20:f4:ae:ef:15:a8:4b:1e:03:ff:09:76:e9:
25:98:0d:98:60:ad:01:79:61:dd:cf:b8:a5:23:69:03:f8:d3:
47:7f:cd:27:78:f7:68:7e:c9:91:d5:46:ce:af:f6:88:9e:fc:
f3:bd:c7:18:34:cd:f1:2d:8c:5b:6d:c7:ce:cb:2e:95:e3:ab:
bc:fc:be:28:bd:67:9c:ba:cb:69:8a:21:e5:90:35:b7:52:02:
03:e2:1b:b6:09:13:f9:20:88:b4:c1:3d:32:84:29:b4:ec:e6:
2d:b9:14:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/hwswA5yYDaxcwum61WhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTdmZThkZDcyYzUwYzYyOGRlYTk3MzE1OGQwZjk0MjMy
NmRhOGYwHhcNMjYwNTEyMjEwMDUzWhcNMjYwNTEzMjEwMDUzWjAzMTEwLwYDVQQD
EygzZWM0YzAxOGNkMzNmZWUyMGJlMWQ5MmQ0OWY4NzJkNjQ0ODQzODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8+AwZLdo14LngjDI1XsZynad0oA
wvFODZbFe8Y3WuBiqiQR4VFOrdmCJ2Al8rsc6WyjmtdxxJexXu54x+hPC2u2J6WC
ebbejMeDUZybJUuDv2oz/puNToMe3fQvHpHZJxwQySJ/U544SRiQOdSQaVuGcedC
FR8eLYj+OQYrs/xN/aHUKyxMssB+p8vrgCm7hyjFvymfW4cIxUIwQgiicSs91fwO
nQpHoX15orNXy6jVgTBIS0zFgk/xpLuiDwpupn4zrGtH1mwr7qqxXa0fmW0xh597
u1+xyn/Cc3MptZmLjvOTY7Rzj1ZiLFe3He2FYNxMEoEPshYnfVeAPXhcRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7EwBjNM/7iC+HZLUn4ctZEhDiMMB8GA1UdIwQY
MBaAFIsX/o3XLFDGKN6pcxWND5QjJtqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUt
ZjViYWVhZWU4NjVhLzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUtZjViYWVhZWU4NjVh
LzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8+K3GWQ
GscQGIaEwU9zsRUC/0M/p9xsLSrUvxi8XGtx4vPvWkAIUaLBAMipXiTcaTXtcn1E
BWpECkqvzXI4WfPJ0aZQu4gJZl2S/VMWm46PC/x19C1yVCUDD5MKkysDBVV6rqo8
MXgfSsfoHIRrf32OUa+Q7FL7VteuKhDy2cXv3P5FVdirZo849BRib3f+On6ED5sg
9K7vFahLHgP/CXbpJZgNmGCtAXlh3c+4pSNpA/jTR3/NJ3j3aH7JkdVGzq/2iJ78
873HGDTN8S2MW23HzssuleOrvPy+KL1nnLrLaYoh5ZA1t1ICA+IbtgkT+SCItME9
MoQptOzmLbkUwg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:21 2026 by rpki-client