Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: uLiv2h9KdDSR5PniZwaiyN3R671Bk4OaLFkGck+2WV8=
Subject key identifier: A3:66:ED:57:6E:04:2B:7C:82:9F:DE:64:A2:B5:B1:2F:0A:B7:0F:AF
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019A258AAC18269465F1678881847658D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 12:00:36 +0000
Manifest this update: Mon 27 Oct 2025 12:00:36 +0000
Manifest next update: Tue 28 Oct 2025 12:00:36 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: kwJN7Iq6gVDvF3/s44g4p8OssKEoRPIfcvSywzGLmAg=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:ac:18:26:94:65:f1:67:88:81:84:76:58:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Oct 27 12:00:36 2025 GMT
Not After : Oct 28 12:00:36 2025 GMT
Subject: CN=a366ed576e042b7c829fde64a2b5b12f0ab70faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:ca:0c:e0:30:30:62:fc:31:f2:6d:bd:45:
51:04:97:a0:83:0b:b3:36:19:86:cf:5b:c2:da:d8:
80:f4:cd:91:7e:24:96:08:e9:03:cf:33:72:7e:4f:
54:25:22:a8:93:70:e9:1b:64:7b:38:dd:76:ed:ea:
a1:ac:10:f5:12:9d:ce:3a:8e:71:40:3b:4e:ec:a8:
e9:fe:b1:a6:1e:74:17:32:69:5d:47:d7:96:49:64:
c9:61:06:f3:fd:ae:b4:a9:27:75:dc:cb:a0:fa:af:
49:cf:eb:8f:5f:4d:ef:8e:1a:18:7a:2d:fa:00:d1:
c2:a5:c3:b6:6c:7a:92:1a:59:22:4a:f9:3d:6e:01:
c3:ca:dc:db:99:69:f6:65:74:65:82:a4:ec:00:4b:
99:97:12:d1:3b:41:7d:18:be:b7:cd:00:97:1c:80:
28:90:3b:0e:53:74:f1:f3:2b:09:f0:e2:d7:92:b0:
c6:2f:4d:14:5c:b8:c9:77:a6:2d:18:1f:37:5d:ad:
76:a5:56:ee:ba:cf:bc:95:5e:79:07:b0:90:f6:f4:
fd:99:52:9b:7a:84:df:3e:a1:1d:cc:fa:39:8f:44:
3d:39:9f:9f:33:e3:5c:db:66:3b:b5:87:81:dc:57:
15:4d:c0:cf:ae:13:91:47:cc:b3:d9:2b:3d:5e:d9:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:ED:57:6E:04:2B:7C:82:9F:DE:64:A2:B5:B1:2F:0A:B7:0F:AF
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:d9:72:35:66:30:64:41:01:6c:0d:72:08:98:1d:29:3a:
2b:76:f9:e9:24:46:0f:82:ed:e6:6e:8c:45:ce:f0:9f:54:25:
89:3b:59:35:4c:71:36:4a:b7:8e:37:e5:4a:b0:6d:65:3e:2e:
86:ca:1a:d6:2c:a0:a8:c6:7a:76:43:1d:d2:83:02:ed:a3:b9:
84:75:21:12:d6:47:c5:7c:fd:e4:66:03:fd:67:b4:78:bb:e9:
cb:49:fd:7a:c1:bd:2a:58:75:c5:e7:aa:af:90:aa:ef:69:97:
eb:a5:d6:61:05:eb:ce:7b:0e:b8:ab:ff:22:13:9c:24:22:9d:
7b:23:b8:c1:1c:7f:cf:43:18:06:e6:a6:7b:ac:6b:95:d4:77:
c0:89:9f:55:41:7b:5b:ea:5d:39:f6:53:a9:18:d6:8c:2c:d3:
a4:01:cc:f8:b1:42:4c:26:4d:b9:ce:c0:f9:01:14:35:f8:80:
4f:eb:21:f4:11:e4:26:2d:f9:38:85:31:9a:8e:81:a4:38:88:
a9:ae:02:d2:58:a9:6c:c0:3c:15:d9:21:e9:c0:21:d9:d3:3e:
6c:54:9b:b5:0e:8a:7f:c2:f8:cd:47:2f:00:80:3a:5e:19:6b:
ed:fe:bf:b5:ac:cb:ef:96:ee:c6:a7:ea:a4:9a:48:79:b3:66:
95:55:1b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoliqwYJpRl8WeIgYR2WNg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUxMDI3MTIwMDM2WhcNMjUxMDI4MTIwMDM2WjAzMTEwLwYDVQQD
EyhhMzY2ZWQ1NzZlMDQyYjdjODI5ZmRlNjRhMmI1YjEyZjBhYjcwZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zTKDOAwMGL8MfJtvUVRBJeggwuz
NhmGz1vC2tiA9M2RfiSWCOkDzzNyfk9UJSKok3DpG2R7ON127eqhrBD1Ep3OOo5x
QDtO7Kjp/rGmHnQXMmldR9eWSWTJYQbz/a60qSd13Mug+q9Jz+uPX03vjhoYei36
ANHCpcO2bHqSGlkiSvk9bgHDytzbmWn2ZXRlgqTsAEuZlxLRO0F9GL63zQCXHIAo
kDsOU3Tx8ysJ8OLXkrDGL00UXLjJd6YtGB83Xa12pVbuus+8lV55B7CQ9vT9mVKb
eoTfPqEdzPo5j0Q9OZ+fM+Nc22Y7tYeB3FcVTcDPrhORR8yz2Ss9XtlEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNm7VduBCt8gp/eZKK1sS8Ktw+vMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvDZcjVm
MGRBAWwNcgiYHSk6K3b56SRGD4Lt5m6MRc7wn1QliTtZNUxxNkq3jjflSrBtZT4u
hsoa1iygqMZ6dkMd0oMC7aO5hHUhEtZHxXz95GYD/We0eLvpy0n9esG9Klh1xeeq
r5Cq72mX66XWYQXrznsOuKv/IhOcJCKdeyO4wRx/z0MYBuame6xrldR3wImfVUF7
W+pdOfZTqRjWjCzTpAHM+LFCTCZNuc7A+QEUNfiAT+sh9BHkJi35OIUxmo6BpDiI
qa4C0lipbMA8Fdkh6cAh2dM+bFSbtQ6Kf8L4zUcvAIA6Xhlr7f6/tazL75buxqfq
pJpIebNmlVUbPw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 19:35:48 2025 by rpki-client