Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: omRtWmcy48e8ri8diiMsC2MfP0OhAsNgoSUu/SeEEuo=
Subject key identifier: 35:6C:4D:43:44:1C:B4:65:D0:C9:AC:4C:DD:AB:32:2C:6E:10:81:07
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 01A109268FE521EFA217C4CEBA0CBC0B5DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 23:01:24 +0000
Manifest this update: Sun 04 Oct 2026 23:01:24 +0000
Manifest next update: Mon 05 Oct 2026 23:01:24 +0000
Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: mFJa8lMP8+rXmBw5Fc2qCK3IYppIkgnIGXWwFdzeRCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:26:8f:e5:21:ef:a2:17:c4:ce:ba:0c:bc:0b:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Oct 4 23:01:24 2026 GMT
Not After : Oct 5 23:01:24 2026 GMT
Subject: CN=356c4d43441cb465d0c9ac4cddab322c6e108107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:07:da:e1:5f:f1:45:1f:ba:7c:4b:c6:36:
8d:35:7c:69:c6:a4:d5:99:7a:7f:92:27:07:d7:17:
44:d1:26:86:0e:e9:1a:a5:bd:2e:aa:08:01:32:77:
ef:2f:a7:46:3e:9e:f0:fa:95:d3:67:40:1c:ca:b4:
8a:b1:ab:c1:1f:a3:18:90:d8:27:c9:5a:ce:18:30:
82:35:b3:87:5e:a3:69:79:cb:06:e7:3f:5a:5c:f7:
03:b8:77:8e:41:78:df:9c:5f:91:f9:88:bc:7e:ef:
bd:48:ec:2b:14:9f:3b:7c:b6:c8:a1:97:a6:42:a7:
e6:d3:c6:de:ad:02:81:c4:a4:8c:94:2c:1c:a3:07:
69:d6:6e:1f:21:82:3b:7c:12:32:5b:d3:d5:df:8b:
a8:c1:e3:bb:9d:17:36:e9:6e:79:68:5d:67:67:21:
70:c7:91:31:8a:7a:f7:b9:5a:6e:88:ac:22:e5:4a:
1c:fe:0b:45:17:6b:e9:2b:8b:92:47:bd:7d:76:1a:
b0:96:3f:0a:7d:a6:9b:80:82:0a:48:6b:67:a5:5e:
9e:6b:18:3e:a6:9d:ef:db:17:31:2e:8d:3f:50:0e:
48:94:53:41:ef:ef:9d:72:a9:07:58:bf:4d:d6:bd:
e8:3c:b1:aa:5d:72:e6:32:96:de:fc:20:9e:e0:14:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:4D:43:44:1C:B4:65:D0:C9:AC:4C:DD:AB:32:2C:6E:10:81:07
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ea:ae:4e:14:ff:52:4f:26:27:c0:bf:0d:e1:f6:af:96:e4:
2c:da:2e:6e:87:76:70:49:70:76:1d:b4:81:ec:8d:da:d2:12:
2a:59:71:26:18:50:51:3d:5e:53:ef:8d:95:94:3b:c0:d0:b2:
bb:cb:dc:fc:ba:94:d7:a5:a9:71:2d:25:1b:40:c6:1d:60:6b:
23:2f:c6:89:a0:4e:bb:e0:9b:bf:73:ec:8e:c7:5e:e5:37:e6:
e1:fa:bd:74:5d:55:93:80:40:a4:07:03:a5:1c:aa:45:05:58:
c7:0c:6e:b8:6b:45:33:78:c0:b3:43:91:5f:28:de:3b:d4:27:
43:66:1c:31:d2:66:d9:e7:9d:29:65:59:d8:35:40:ea:0d:54:
46:11:c8:77:06:54:52:07:25:dc:39:ee:e2:a4:31:af:1f:8e:
16:e2:69:e5:11:ee:3f:75:74:b3:63:24:bd:79:83:8f:f2:f5:
89:7c:d1:0e:a9:4b:04:2a:8c:c3:34:ec:40:80:e8:39:84:f6:
46:f4:ad:8f:83:bf:14:89:7a:5f:a9:8a:22:75:41:93:d4:2f:
49:2a:2d:5a:31:90:fa:0d:55:61:77:08:55:b3:24:ea:83:8d:
91:c3:f3:ff:dd:ad:25:e9:42:45:c4:56:fc:fc:d1:b2:80:2c:
53:1f:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:41:25 2026 by rpki-client