Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: 6bMgiNRIkaqV/FZUGNdR62AIdGqR0MH3k2TEz22jgzQ=
Subject key identifier: 13:8C:AA:D0:65:62:37:D4:3A:47:40:30:AC:E1:6D:0F:C8:58:3E:0F
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019EBA6B2A474474D258C28DEBB6687818D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0AD9
Signing time: Fri 12 Jun 2026 06:00:45 +0000
Manifest this update: Fri 12 Jun 2026 06:00:45 +0000
Manifest next update: Sat 13 Jun 2026 06:00:45 +0000
Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: RgLiLCB6R3aj0cR1NXyRUZN07Ti6CMY5h9LElJuAPTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:2a:47:44:74:d2:58:c2:8d:eb:b6:68:78:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jun 12 06:00:45 2026 GMT
Not After : Jun 13 06:00:45 2026 GMT
Subject: CN=138caad0656237d43a474030ace16d0fc8583e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:a4:75:f5:a3:e6:78:e7:c8:78:dd:fc:ce:
2b:a8:3d:47:12:a3:a8:d2:51:7e:32:ed:71:9f:5b:
fb:73:d5:24:f9:91:e5:be:78:42:2a:83:9c:ca:2f:
3a:64:4e:f2:37:69:1a:b3:7a:e8:3d:c7:fd:79:c7:
9a:44:10:c0:d7:e9:b2:0b:64:e4:86:96:30:0b:ee:
57:ba:76:ac:3a:b3:33:21:9a:40:ee:72:85:49:d2:
21:b9:ef:74:09:cb:e6:c5:fe:94:c2:1e:fc:65:e8:
98:21:82:a7:7f:67:7d:8b:13:15:ce:78:4c:0a:6e:
c8:5e:7f:7e:23:26:2f:90:46:15:a4:54:40:2b:7d:
09:d9:cd:45:18:9c:9b:c0:bf:08:27:14:b2:43:d1:
b6:2b:96:6a:e8:71:d0:05:ad:77:66:09:c5:f4:2f:
7f:9e:c2:62:4f:e1:d5:8e:c9:be:1c:77:08:16:6d:
f8:23:dc:ab:08:6c:ee:38:8c:ec:ab:44:b0:0c:3a:
fe:db:69:b9:cd:f0:2b:3d:92:0b:26:d9:c1:08:fb:
65:69:cb:6f:ed:c5:d9:8b:ac:3e:2f:d3:8f:5c:57:
99:2d:7d:76:0e:18:cf:67:f5:1d:55:ab:72:26:b3:
86:69:75:e5:7f:c8:5d:2f:ae:bd:af:28:a7:a6:f9:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8C:AA:D0:65:62:37:D4:3A:47:40:30:AC:E1:6D:0F:C8:58:3E:0F
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0a:0d:f0:44:60:23:c2:f3:26:ca:f2:ab:03:b5:67:5b:ef:
1f:2d:85:6f:69:5c:03:e1:0f:cd:b3:e0:b6:bb:41:80:88:0a:
8d:52:3b:4e:d7:21:4d:84:cb:71:7f:2a:ca:19:f9:7b:90:60:
05:95:b2:79:b3:3f:f4:2f:96:d2:de:01:51:3c:74:84:48:94:
d8:5a:07:6b:f5:e4:4a:3a:84:5b:4a:bf:45:e5:da:ad:73:62:
27:f6:c4:a6:9d:9f:bc:5b:13:cb:bb:97:37:3e:a1:bc:e8:f7:
cc:2f:a0:16:dd:2e:91:6f:10:29:34:8b:09:68:81:da:c6:3f:
4b:c7:7e:05:0a:57:b7:f8:b1:14:4e:00:00:67:76:0d:2d:99:
9b:bb:ed:f1:e2:6f:49:47:be:0d:31:4d:26:38:98:98:ed:a9:
08:6d:81:6c:20:23:25:d8:f8:29:b9:1e:29:20:0b:f4:be:0a:
50:73:9d:23:7f:15:85:b3:9f:b4:8f:8a:8e:fa:ba:0e:a4:f7:
a2:88:9b:78:e4:69:6d:d2:79:69:ab:68:0b:1f:77:ef:f0:30:
04:af:a2:64:cf:ff:0a:97:91:4d:e2:4a:bd:b1:1b:65:07:15:
c1:91:61:94:32:b2:54:b5:46:72:9d:4f:42:ba:5b:9a:63:7f:
07:eb:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:52:07 2026 by rpki-client