Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: nKnhxRhkC2a2JgralApyCFN5ElZUDgqGLM1ILMsQfGI=
Subject key identifier: 3F:E5:FF:C7:4E:EB:C2:B4:E6:A2:36:0F:79:AD:5D:E9:A1:9C:C5:AE
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019D269638D2831D4CBF8C0446F6FECEE8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: Vrj5KI33Sca7AD/bhEiB99DSlsr+WfHzcLngf76PLtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:38:d2:83:1d:4c:bf:8c:04:46:f6:fe:ce:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=3fe5ffc74eebc2b4e6a2360f79ad5de9a19cc5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:e8:6e:c9:d6:de:f2:8a:87:c1:93:ba:3f:
d2:8f:2a:3f:d0:78:a0:dd:92:4f:8a:61:97:42:0c:
b8:c1:39:f4:1e:8d:bc:7c:92:07:5e:01:60:fc:74:
44:c9:44:fe:03:5a:9b:81:c5:00:5d:49:10:16:42:
d2:40:0e:10:43:92:c8:61:b9:d9:cf:b4:2b:9b:24:
d3:1c:6a:0f:1f:0b:33:0c:6e:df:9c:02:04:fa:fc:
5d:1e:42:80:b2:ab:8e:57:e4:36:6c:ae:cf:2b:03:
4c:ab:1d:23:68:fc:4e:35:d6:c7:de:a9:ce:73:44:
09:f5:e0:af:58:e7:3e:d7:a7:90:df:55:27:a8:b2:
c5:87:3a:28:2f:5c:3d:1a:3d:bc:0a:cf:42:ce:49:
7a:cf:8f:61:34:fc:77:b0:4d:b9:27:7c:c7:48:f4:
e5:d0:f1:a4:aa:ab:72:61:50:7a:34:e9:56:fe:73:
a8:63:0d:9f:d0:ae:d0:0f:1b:1f:a0:37:0d:eb:38:
fa:32:b5:c5:e2:a0:c9:99:e9:2e:a0:65:aa:a2:a4:
44:41:6a:88:47:e3:32:fc:4b:ec:81:87:1b:bc:33:
47:e6:a8:84:61:b5:fb:4e:14:09:67:d5:34:52:87:
20:09:1c:76:c9:28:57:a5:d1:73:82:95:8e:d7:bc:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E5:FF:C7:4E:EB:C2:B4:E6:A2:36:0F:79:AD:5D:E9:A1:9C:C5:AE
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:66:84:9c:ee:ec:34:88:1e:70:81:ba:93:fc:47:70:f3:46:
1c:3a:1f:d6:ca:f1:b7:0f:73:5d:47:9c:83:88:05:db:28:31:
9b:d6:27:eb:30:8a:42:73:f1:81:74:af:8f:f7:a6:f0:ad:cb:
a4:5d:d1:9e:80:97:01:60:8d:97:a9:18:fd:ce:dc:60:d2:97:
13:e3:3f:a0:8c:12:b2:78:7d:3c:dd:ec:8f:57:02:ea:5e:e2:
58:71:35:1b:c1:72:0e:10:3e:eb:c5:b8:84:04:f9:b9:30:31:
6b:bf:f4:a7:b2:30:a1:80:f4:69:41:22:b5:38:64:5e:78:fb:
d6:a1:96:5f:ce:82:86:fb:e4:be:43:29:18:af:cd:4a:1d:6e:
96:01:3d:23:2c:18:ae:fc:1d:75:f5:b0:79:85:7e:3d:d9:a1:
93:b5:75:34:fe:35:03:8a:7e:f4:5c:2f:9f:a0:da:9f:ae:68:
68:3b:bd:0b:1c:23:55:f3:5f:ff:73:e6:1e:63:f2:28:97:bb:
97:9b:e2:9a:f4:df:ae:0c:eb:5e:cb:90:c0:ab:05:98:3f:41:
7f:33:7f:eb:ca:d7:88:0f:00:c1:b5:cc:c3:c4:cd:dd:52:5b:
a9:b7:25:42:ab:2b:f6:5e:9b:15:3c:02:74:70:91:0a:d5:3c:
92:1f:b3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljjSgx1Mv4wERvb+zuigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjYwMzI1MjAwMTEyWhcNMjYwMzI2MjAwMTEyWjAzMTEwLwYDVQQD
EygzZmU1ZmZjNzRlZWJjMmI0ZTZhMjM2MGY3OWFkNWRlOWExOWNjNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NjobsnW3vKKh8GTuj/Sjyo/0Hig
3ZJPimGXQgy4wTn0Ho28fJIHXgFg/HREyUT+A1qbgcUAXUkQFkLSQA4QQ5LIYbnZ
z7QrmyTTHGoPHwszDG7fnAIE+vxdHkKAsquOV+Q2bK7PKwNMqx0jaPxONdbH3qnO
c0QJ9eCvWOc+16eQ31UnqLLFhzooL1w9Gj28Cs9Czkl6z49hNPx3sE25J3zHSPTl
0PGkqqtyYVB6NOlW/nOoYw2f0K7QDxsfoDcN6zj6MrXF4qDJmekuoGWqoqREQWqI
R+My/EvsgYcbvDNH5qiEYbX7ThQJZ9U0UocgCRx2yShXpdFzgpWO17zhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/l/8dO68K05qI2D3mtXemhnMWuMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2aEnO7s
NIgecIG6k/xHcPNGHDof1srxtw9zXUecg4gF2ygxm9Yn6zCKQnPxgXSvj/em8K3L
pF3RnoCXAWCNl6kY/c7cYNKXE+M/oIwSsnh9PN3sj1cC6l7iWHE1G8FyDhA+68W4
hAT5uTAxa7/0p7IwoYD0aUEitThkXnj71qGWX86ChvvkvkMpGK/NSh1ulgE9IywY
rvwddfWweYV+Pdmhk7V1NP41A4p+9Fwvn6Dan65oaDu9CxwjVfNf/3PmHmPyKJe7
l5vimvTfrgzrXsuQwKsFmD9BfzN/68rXiA8AwbXMw8TN3VJbqbclQqsr9l6bFTwC
dHCRCtU8kh+zVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:04 2026 by rpki-client