Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: cv8kO429wikD0xUk/UD+1/5gArDUMMpeuG/LILGAuJE=
Subject key identifier: E6:F9:FA:67:06:D8:E6:74:62:4C:5C:DD:25:91:24:12:3F:73:D0:6B
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019FA33C113935E94A48AA4CE1BBAE424098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 12D3
Signing time: Mon 27 Jul 2026 11:00:50 +0000
Manifest this update: Mon 27 Jul 2026 11:00:50 +0000
Manifest next update: Tue 28 Jul 2026 11:00:50 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: hkSPFk1dJcV2zqSPIkMYwFDm12r16PHA2C5gefLvRms=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:11:39:35:e9:4a:48:aa:4c:e1:bb:ae:42:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jul 27 11:00:50 2026 GMT
Not After : Jul 28 11:00:50 2026 GMT
Subject: CN=e6f9fa6706d8e674624c5cdd259124123f73d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:0e:18:8d:e4:be:97:de:a7:cb:f4:ae:52:
ff:f0:5f:15:c4:b9:7d:c4:e2:3c:5d:7a:fe:c6:3e:
66:7d:7b:54:26:10:d9:c2:73:19:f5:e0:14:8d:c7:
ea:e7:e1:0e:45:77:03:70:bf:56:ab:5e:09:f7:51:
ec:7c:09:75:64:e7:96:ca:5b:b4:6b:4e:88:fd:cf:
23:b2:85:f4:fe:99:5d:d8:0e:e9:f5:48:19:18:21:
53:97:4f:a6:02:aa:cb:0b:e3:af:2c:cb:c0:f8:6c:
c8:6d:17:31:5f:99:e3:da:41:cb:f3:22:11:6d:6c:
6e:a3:ab:e8:a1:6b:de:97:7c:a9:6b:1c:f1:52:6f:
1e:dc:b5:53:d4:ee:4f:13:e8:a5:24:58:0b:79:ef:
b5:ee:52:4c:db:3b:41:91:87:8b:cd:17:91:21:a2:
92:ed:0b:dc:b2:3c:7f:e6:a8:f2:24:39:20:f8:25:
c6:58:e3:d3:61:1b:6e:81:78:20:d5:53:3c:7f:93:
9f:95:4a:1f:a9:36:72:80:72:9a:e4:12:21:8d:ee:
92:8b:e3:ee:b8:21:60:d9:f8:a3:e8:22:0d:66:30:
16:c2:d9:75:92:de:92:86:1f:cd:22:50:78:6b:71:
ba:c6:1e:f1:01:69:2d:1e:e7:cc:ff:1d:da:15:f5:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F9:FA:67:06:D8:E6:74:62:4C:5C:DD:25:91:24:12:3F:73:D0:6B
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:21:aa:12:9b:c3:67:a5:80:f5:7f:80:6f:b1:7f:fe:79:79:
95:16:0c:41:10:df:ea:27:7b:78:07:bf:8a:e4:1f:9d:1a:09:
2b:b0:ab:fb:ad:2f:2b:af:7b:8f:cc:b5:1b:d8:f0:15:5a:60:
76:d4:83:6f:b5:96:bc:80:9d:a2:3f:63:01:3d:0b:8e:3d:b8:
a1:f4:3f:d9:02:e2:f8:7a:2b:58:5c:30:ce:8f:2f:9b:6e:ee:
aa:fc:3f:ba:94:d5:76:21:44:4e:a5:6a:db:fd:66:c5:69:20:
b7:87:fe:59:6c:f5:a5:71:7d:ec:90:00:5b:5c:63:17:b1:17:
7a:84:7e:77:ff:2f:21:7b:be:e6:c2:b4:b3:03:fd:1c:46:2d:
06:33:41:f0:a0:60:fc:e0:b5:04:66:e0:9d:74:53:da:40:10:
b9:bd:87:c0:4d:8c:90:b7:61:c5:70:31:a5:c0:56:84:1a:f5:
fa:ab:5e:61:27:09:1b:ca:ec:33:e9:f9:cc:95:14:b1:88:83:
22:77:8a:5d:49:6a:a1:d9:79:d0:a9:76:1d:28:27:e5:d6:f8:
0a:39:31:a3:66:b2:2d:7e:62:3b:15:17:2d:ad:31:f6:17:ae:
e9:8c:d8:b5:72:a4:6f:2e:a3:54:0e:91:96:f6:1e:37:2c:02:
f7:27:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:26:43 2026 by rpki-client