Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: KJf/5go9N8dcp9JhCqsggt6Zfy/09TQoUGy5mo1YGzI=
Subject key identifier: D1:15:28:8F:43:12:6E:27:B0:84:4C:9E:52:F8:15:D7:A0:A4:47:24
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 01A180E2298C8032274D0E21850DCB582D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 05:01:07 +0000
Manifest this update: Wed 28 Oct 2026 05:01:07 +0000
Manifest next update: Thu 29 Oct 2026 05:01:07 +0000
Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: C8P4A7PcPvORsJl/TNNffA2A6vnLQoKOdh+hOeR8hms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:29:8c:80:32:27:4d:0e:21:85:0d:cb:58:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Oct 28 05:01:07 2026 GMT
Not After : Oct 29 05:01:07 2026 GMT
Subject: CN=d115288f43126e27b0844c9e52f815d7a0a44724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:40:db:b0:a5:3d:be:49:f1:4c:54:e6:b6:
9a:94:54:1c:d3:fd:99:07:4e:9a:99:fb:38:db:27:
64:86:ba:f1:e7:af:af:f2:09:91:99:aa:a4:0b:11:
b2:a0:30:e3:d5:08:b5:10:48:a8:5e:ea:30:1b:4f:
66:5d:d1:b7:64:75:62:a0:a8:e1:3c:96:4a:62:77:
fc:76:84:ce:d1:1d:d8:4a:2f:0b:20:72:7c:81:81:
49:15:7e:1f:e4:55:b4:09:fb:3f:e1:19:17:ae:51:
a0:8d:be:bc:8f:b4:94:8c:8b:f9:0f:d0:e7:fb:9b:
d6:2e:b7:ec:ae:e4:6f:72:64:c2:96:11:a6:99:50:
89:d1:71:d4:e7:79:cd:1c:f7:80:61:cf:51:c4:17:
45:2d:b0:5e:a7:99:5b:ae:00:cd:1e:46:ca:3a:01:
5c:83:b6:b5:a2:aa:a0:b6:0e:a4:5f:d9:2d:7f:25:
1c:b4:ca:5d:98:85:80:b6:bf:30:60:9c:05:19:93:
7c:b1:f9:c0:35:35:26:a3:47:c4:83:e2:d1:2e:86:
a2:02:3f:3b:ca:a5:9f:7e:4c:3b:75:e8:3b:07:da:
f2:ee:60:53:24:6e:22:89:21:55:f1:34:23:0d:70:
e5:a0:27:3a:96:a5:b8:e2:aa:b8:a7:1e:0c:2e:00:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:28:8F:43:12:6E:27:B0:84:4C:9E:52:F8:15:D7:A0:A4:47:24
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:29:30:95:e0:f6:8b:3f:69:c9:e3:b4:4a:63:14:fb:8a:
bf:e7:20:8a:78:a7:0f:f3:20:62:a7:3f:12:3b:d1:39:82:3f:
57:96:d8:85:59:12:83:dd:ad:95:f0:0a:1e:bf:e0:f8:2d:6c:
28:10:07:aa:51:44:d4:8b:32:96:ac:48:0c:ae:8a:96:d5:96:
a4:9b:22:50:ec:c6:d7:72:8f:6d:bf:18:dd:b1:41:ef:89:cf:
d7:5e:69:5e:1d:69:1c:81:5c:79:6c:6b:fc:1e:63:cf:ca:64:
98:5d:f4:0f:ab:09:75:74:5b:5f:6d:b1:f5:b7:32:38:1a:de:
b8:2c:0d:07:0c:ec:c7:4c:ce:46:01:33:79:5f:a7:b8:a1:4e:
f2:9b:00:c3:f8:6d:ec:5a:61:d7:cd:02:e4:87:86:5c:4b:fc:
96:45:69:42:35:b4:96:d9:1d:40:c8:7d:b4:c4:b0:24:0c:53:
c0:e9:73:42:c6:df:5e:27:04:53:45:1e:3a:67:5f:88:b0:ac:
b6:22:c8:4b:f5:bd:1a:f8:51:e8:24:6b:47:c0:bc:70:7c:f2:
84:fc:d1:30:c6:ba:40:3b:93:45:3c:02:30:03:60:af:5d:fd:
e1:fa:7b:30:2d:d3:18:8e:8d:50:2f:8b:ec:a6:a2:4f:aa:c4:
60:7c:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:36 2026 by rpki-client