Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: JvCAAhTEo/gJ+M31agKhqIZ4KJu1UDXCyTWLoc8NzyU=
Subject key identifier: 54:2E:6D:67:2F:5F:E1:F6:27:C8:25:BC:B0:9B:3D:4D:40:BF:9F:9E
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019DCE99887570DB0930C73BBAEF219E55E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 11:01:01 +0000
Manifest this update: Mon 27 Apr 2026 11:01:01 +0000
Manifest next update: Tue 28 Apr 2026 11:01:01 +0000
Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: G9SkbN1AYlD2xBzxiWvcr/YYYzlGPWO0YTgX+1JdzJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:88:75:70:db:09:30:c7:3b:ba:ef:21:9e:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Apr 27 11:01:01 2026 GMT
Not After : Apr 28 11:01:01 2026 GMT
Subject: CN=542e6d672f5fe1f627c825bcb09b3d4d40bf9f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:19:df:96:25:a8:15:97:83:11:58:32:bb:
d4:7d:58:90:29:2f:34:0d:3e:b9:68:c5:5e:57:9f:
8e:66:9c:4e:85:b4:f9:a2:9d:3b:40:04:10:5c:cc:
c1:34:95:0a:30:47:4d:a0:77:50:c4:6e:12:61:e3:
87:1a:07:51:00:e0:8d:3a:96:e3:f5:69:f1:2e:91:
b6:51:7b:93:64:fb:1e:1c:0f:ea:b7:56:d1:17:fd:
13:cc:a9:ab:c6:e8:5a:df:83:aa:1e:13:c4:04:33:
13:8a:d9:37:36:26:c3:1f:21:7e:b2:2b:28:79:21:
60:e7:15:de:6b:52:08:a7:6d:5d:c0:a5:ba:5b:d3:
4e:5e:e9:f1:97:bd:be:44:80:17:15:5c:37:ed:64:
41:b7:29:71:cb:66:b2:27:f0:05:f8:ce:34:10:01:
80:9d:4d:34:fd:e9:d4:7b:7a:95:bc:67:6e:1c:16:
08:f1:d5:58:86:fc:c3:b6:d2:0b:2a:4b:d1:b0:de:
9f:e8:05:9f:b9:ca:ac:81:c3:fc:6e:2d:75:9b:2a:
8a:84:bb:6c:54:7a:b9:db:3f:ff:4b:af:b7:c9:e7:
d8:34:bf:63:1d:68:c5:ad:14:fe:fa:cc:6e:15:a1:
3d:39:8f:7d:14:bd:e1:f7:7c:29:0f:5d:08:bd:5e:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:6D:67:2F:5F:E1:F6:27:C8:25:BC:B0:9B:3D:4D:40:BF:9F:9E
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3f:11:cf:83:d3:57:f4:a6:41:5c:dc:04:12:53:eb:58:46:
eb:d7:e0:45:c7:40:b2:64:3b:15:d0:99:f8:89:e4:6b:7d:66:
d9:75:32:fb:bb:29:9d:90:1f:a1:0f:e1:43:e7:96:b1:90:c5:
4c:0c:60:56:ff:f5:9f:2d:42:37:49:3f:d7:20:13:e0:79:13:
a5:c8:c5:31:01:2f:9b:72:98:25:ec:af:24:55:3d:28:83:87:
ef:3d:08:8b:27:38:30:b2:b5:47:5c:90:07:93:17:5c:f2:07:
c4:94:73:b1:b5:d1:6b:ae:1c:11:58:18:2f:ec:4e:e9:0c:06:
79:ae:04:ea:5b:70:5b:fc:1b:60:3f:bc:98:2c:56:b7:17:c0:
50:b3:13:ed:4e:b2:70:35:3a:f4:e7:df:83:e5:0a:59:35:0b:
85:d2:c3:1c:5e:33:d2:d0:05:c0:a1:2f:ec:7a:a7:72:8e:b3:
cb:21:0b:ef:70:6a:65:55:6f:7c:16:ea:f0:8c:48:18:b1:56:
2e:26:c6:40:8f:3e:9b:73:ac:0c:69:75:c8:ab:a6:62:34:ce:
6d:34:98:8c:3d:36:0d:9e:9f:cb:ba:35:bd:ac:d5:50:79:6c:
90:32:67:cf:b6:bc:7d:4f:c0:f4:1a:87:32:5e:57:4d:9c:b3:
7e:21:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:49:09 2026 by rpki-client