Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: GpShABGtVli54Pg+mNj2wtTURRBWVF9iFPr25fuvgQw=
Subject key identifier: 53:88:58:47:5F:55:1C:EE:0F:5C:E2:17:CA:A4:D7:D1:C9:DF:C7:72
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019CAAFD2606CA752794543B08C0F2A39A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: GGSDnQOGk9Zua8kJ+Mb5RAF6oZuLL88LAt0Gu1Liv8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:26:06:ca:75:27:94:54:3b:08:c0:f2:a3:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=538858475f551cee0f5ce217caa4d7d1c9dfc772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:d3:11:fb:b3:2d:5f:55:1d:f0:bd:9b:fd:
71:a4:e7:30:42:14:e7:1a:f9:55:e6:58:c7:f8:0f:
a0:b4:8f:fc:64:7f:df:fe:60:94:02:3a:31:69:b5:
af:ab:81:dd:39:f9:35:59:40:96:e9:31:9c:61:88:
84:36:df:de:7b:64:38:cf:a6:eb:d1:b6:5f:4d:72:
e3:6b:4d:06:89:68:20:d8:eb:ee:a9:79:e1:98:14:
c4:30:6d:65:0c:31:cd:59:a0:44:f1:e0:44:74:fd:
55:79:09:7f:cd:e7:b0:d0:e9:27:c5:46:32:a0:8d:
b6:e3:fa:f1:84:ae:14:6a:78:f7:12:7e:3f:43:12:
f7:ec:5d:53:67:b3:2b:05:e0:fb:a1:3a:4e:5a:d0:
ba:ff:57:a9:0f:6d:0d:0b:04:e8:5f:d1:66:85:9d:
13:b0:5f:92:b8:3f:9a:b2:b2:62:ea:67:99:2a:de:
98:21:e4:f5:c8:f4:52:65:c5:8d:cc:52:88:dc:e5:
02:ab:18:37:40:6a:6c:74:c2:12:ca:26:e1:76:6e:
a8:c2:ab:4b:b4:a4:ae:fa:5e:73:b3:22:3b:e5:6c:
ab:55:db:14:6d:18:92:a9:7c:c0:d3:0f:39:5a:65:
b9:ad:ae:12:8f:99:ed:ff:a3:ec:03:8d:13:ce:59:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:58:47:5F:55:1C:EE:0F:5C:E2:17:CA:A4:D7:D1:C9:DF:C7:72
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:2a:35:2e:7b:81:82:72:8b:ec:30:c0:27:eb:29:95:90:
34:cb:65:9a:92:aa:90:95:a2:0c:38:be:70:47:6f:1d:fc:09:
30:ad:ce:98:60:11:9a:8d:bd:41:27:bc:c5:13:8a:c8:4d:db:
54:90:9e:2f:80:0e:2a:32:ff:76:13:0d:0d:5d:8b:7b:7f:b9:
47:ff:e8:88:ed:fe:f7:24:fd:42:e6:a4:48:7b:a5:9b:1f:19:
0d:75:d7:16:1e:81:4e:da:e5:ea:56:a5:1c:03:05:74:91:28:
12:79:7b:6f:b2:f4:a9:37:16:bc:8f:31:27:be:d7:0b:87:0f:
57:46:79:f5:11:a5:1a:57:c2:d9:55:ca:eb:15:a9:1c:8c:d4:
f0:99:73:81:ed:67:51:62:cf:1e:6b:a2:3a:ca:46:14:4f:3a:
5d:4e:d1:c2:b8:82:39:98:ee:3a:7a:4c:fc:ec:09:fa:6f:b8:
1d:57:59:c0:d3:ff:18:01:6c:23:05:b8:34:67:dc:34:fa:6f:
cd:77:de:ab:9f:34:db:f3:eb:90:5b:22:24:0a:09:66:59:55:
99:c1:62:01:b4:b2:f9:80:1c:79:68:bf:d5:f2:a5:ca:34:3d:
7c:6c:d3:5f:5c:b3:ef:32:25:b6:c6:da:de:64:25:ff:57:cd:
0f:fe:ec:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SYGynUnlFQ7CMDyo5ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjYwMzAxMjAwMDQyWhcNMjYwMzAyMjAwMDQyWjAzMTEwLwYDVQQD
Eyg1Mzg4NTg0NzVmNTUxY2VlMGY1Y2UyMTdjYWE0ZDdkMWM5ZGZjNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnHTEfuzLV9VHfC9m/1xpOcwQhTn
GvlV5ljH+A+gtI/8ZH/f/mCUAjoxabWvq4HdOfk1WUCW6TGcYYiENt/ee2Q4z6br
0bZfTXLja00GiWgg2OvuqXnhmBTEMG1lDDHNWaBE8eBEdP1VeQl/zeew0OknxUYy
oI224/rxhK4Uanj3En4/QxL37F1TZ7MrBeD7oTpOWtC6/1epD20NCwToX9FmhZ0T
sF+SuD+asrJi6meZKt6YIeT1yPRSZcWNzFKI3OUCqxg3QGpsdMISyibhdm6owqtL
tKSu+l5zsyI75WyrVdsUbRiSqXzA0w85WmW5ra4Sj5nt/6PsA40TzlkM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOIWEdfVRzuD1ziF8qk19HJ38dyMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF4qNS57
gYJyi+wwwCfrKZWQNMtlmpKqkJWiDDi+cEdvHfwJMK3OmGARmo29QSe8xROKyE3b
VJCeL4AOKjL/dhMNDV2Le3+5R//oiO3+9yT9QuakSHulmx8ZDXXXFh6BTtrl6lal
HAMFdJEoEnl7b7L0qTcWvI8xJ77XC4cPV0Z59RGlGlfC2VXK6xWpHIzU8Jlzge1n
UWLPHmuiOspGFE86XU7RwriCOZjuOnpM/OwJ+m+4HVdZwNP/GAFsIwW4NGfcNPpv
zXfeq5802/PrkFsiJAoJZllVmcFiAbSy+YAceWi/1fKlyjQ9fGzTX1yz7zIltsba
3mQl/1fND/7sFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:46 2026 by rpki-client