Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: q/ZuUQ/A1NWQQACiFkmTSF++C97/PojNIXEUOmCfgb8=
Subject key identifier: D3:09:D7:0E:A2:FC:E5:DD:47:36:C9:9D:73:81:29:71:5B:A3:7F:75
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019D382DF5B22DDA7B13C496E30ED6BA0BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0A11
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: yh5eq6fgWMhGVsJsqwmi6KLq26iF5sMCAYO639Jsers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f5:b2:2d:da:7b:13:c4:96:e3:0e:d6:ba:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=d309d70ea2fce5dd4736c99d738129715ba37f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:df:e1:cf:36:a7:bb:24:82:e0:74:ad:4e:
fc:28:d7:05:dc:df:94:20:7a:09:62:24:db:a3:02:
44:7e:40:b8:eb:55:48:28:a8:84:f6:26:27:89:4f:
e2:4a:69:f0:ac:fc:15:ff:9a:43:2e:68:ae:8e:ad:
6b:62:54:5f:47:ea:56:6b:65:7b:f3:f9:f1:da:53:
f0:c4:5c:f5:6b:e4:f8:8f:52:de:1b:2c:fc:60:84:
0c:f9:c8:43:b2:1b:bf:14:25:a6:f8:6e:77:33:82:
5f:49:99:31:87:ad:3e:ea:25:54:b9:08:b8:40:f2:
70:47:a8:61:39:bc:c5:32:ff:b0:4c:fd:ce:a0:5b:
78:d1:33:88:37:90:cc:c4:42:44:bd:7b:18:f9:26:
3f:76:31:27:94:64:28:ad:76:8c:e9:f9:ec:06:c2:
1e:71:15:12:23:23:44:ba:9a:97:b1:7f:2b:26:1d:
29:d0:ab:fe:b2:30:f0:61:c0:74:b6:e8:4b:17:1b:
1d:fb:9b:62:45:b5:d2:9e:1e:18:01:ad:b4:a5:68:
4f:c6:ea:5f:ae:2a:27:96:5e:cc:9d:36:4d:e6:09:
56:a6:a8:b5:19:f2:63:86:f9:5d:12:eb:2c:12:c9:
ba:a0:78:31:b0:9b:e9:24:78:36:cc:c6:72:34:42:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:D7:0E:A2:FC:E5:DD:47:36:C9:9D:73:81:29:71:5B:A3:7F:75
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:46:b0:2f:c7:b1:d5:13:eb:f1:fd:d1:cd:1c:33:37:7b:e5:
3b:23:2c:51:63:46:42:0b:2e:77:38:3f:fb:a5:f3:86:81:f2:
66:00:b1:93:53:64:52:16:bc:cc:de:f7:b7:dc:f5:0f:76:7d:
52:e3:7f:58:7c:ae:84:73:9f:73:db:d0:a1:2e:89:e9:51:10:
12:86:fb:d7:bc:1b:18:d4:b2:7e:6d:0b:93:92:02:18:1b:e9:
6c:c8:83:0e:59:af:1b:89:23:2a:2a:d4:1e:8c:22:ee:a0:d0:
bd:da:ed:b2:b1:27:c3:dc:df:8e:05:9a:02:2d:f8:a9:d3:d3:
08:d7:64:23:da:79:82:60:eb:bd:0a:9e:62:c4:a9:c6:5e:14:
82:ed:97:80:fb:ca:ad:e5:9e:d8:b1:db:52:b6:e9:10:91:16:
62:4e:99:62:63:52:d3:eb:1c:fd:ab:04:35:28:4c:44:de:0f:
e0:3a:ec:ca:7f:5c:92:e3:c1:79:ac:13:78:e2:af:79:90:73:
9d:b7:8f:b1:54:a1:ff:48:09:3d:e4:04:10:1e:d8:75:90:bc:
ef:83:8b:f3:35:8d:86:1e:d4:f6:34:35:d8:fd:82:5a:d2:eb:
ab:26:b8:89:73:a1:51:be:6b:ab:0f:b5:27:b5:80:11:c6:e4:
0e:8a:66:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfWyLdp7E8SW4w7Wugv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTdmZThkZDcyYzUwYzYyOGRlYTk3MzE1OGQwZjk0MjMy
NmRhOGYwHhcNMjYwMzI5MDYwMDI5WhcNMjYwMzMwMDYwMDI5WjAzMTEwLwYDVQQD
EyhkMzA5ZDcwZWEyZmNlNWRkNDczNmM5OWQ3MzgxMjk3MTViYTM3Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsPf4c82p7skguB0rU78KNcF3N+U
IHoJYiTbowJEfkC461VIKKiE9iYniU/iSmnwrPwV/5pDLmiujq1rYlRfR+pWa2V7
8/nx2lPwxFz1a+T4j1LeGyz8YIQM+chDshu/FCWm+G53M4JfSZkxh60+6iVUuQi4
QPJwR6hhObzFMv+wTP3OoFt40TOIN5DMxEJEvXsY+SY/djEnlGQorXaM6fnsBsIe
cRUSIyNEupqXsX8rJh0p0Kv+sjDwYcB0tuhLFxsd+5tiRbXSnh4YAa20pWhPxupf
rionll7MnTZN5glWpqi1GfJjhvldEussEsm6oHgxsJvpJHg2zMZyNEJ5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMJ1w6i/OXdRzbJnXOBKXFbo391MB8GA1UdIwQY
MBaAFIsX/o3XLFDGKN6pcxWND5QjJtqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUt
ZjViYWVhZWU4NjVhLzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUtZjViYWVhZWU4NjVh
LzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEawL8ex
1RPr8f3RzRwzN3vlOyMsUWNGQgsudzg/+6XzhoHyZgCxk1NkUha8zN73t9z1D3Z9
UuN/WHyuhHOfc9vQoS6J6VEQEob717wbGNSyfm0Lk5ICGBvpbMiDDlmvG4kjKirU
Howi7qDQvdrtsrEnw9zfjgWaAi34qdPTCNdkI9p5gmDrvQqeYsSpxl4Ugu2XgPvK
reWe2LHbUrbpEJEWYk6ZYmNS0+sc/asENShMRN4P4Drsyn9ckuPBeawTeOKveZBz
nbePsVSh/0gJPeQEEB7YdZC874OL8zWNhh7U9jQ12P2CWtLrqya4iXOhUb5rqw+1
J7WAEcbkDopmqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client