Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: 6kW/FtpK76R7CgsmmQtD46oJGJSm2AZWehKLGy00eNY=
Subject key identifier: 93:4B:2E:A5:28:B7:4B:94:E4:09:4E:37:54:2E:C7:1F:21:C4:F4:9A
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 01A17E4F3DEEDB81B68DB7D1D183B85631BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 13C9
Signing time: Tue 27 Oct 2026 17:01:24 +0000
Manifest this update: Tue 27 Oct 2026 17:01:24 +0000
Manifest next update: Wed 28 Oct 2026 17:01:24 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: ZbunUeWWE9FjOmu1NujRztevl/s3njCdu11KD0hgurQ=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:3d:ee:db:81:b6:8d:b7:d1:d1:83:b8:56:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Oct 27 17:01:24 2026 GMT
Not After : Oct 28 17:01:24 2026 GMT
Subject: CN=934b2ea528b74b94e4094e37542ec71f21c4f49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:16:94:0a:d5:17:ec:ad:ae:f6:5c:e3:0a:
c9:b4:b7:33:e4:6a:d7:f4:ce:59:77:9d:13:9a:67:
e6:9d:62:9b:96:25:a8:b4:98:1d:fc:d3:5d:01:92:
2c:ca:df:b0:7b:7d:d5:ad:1f:d8:37:5a:4a:7c:06:
82:4c:b0:a1:2a:63:d5:ad:41:86:46:10:e1:ab:0c:
77:cc:e9:b3:6e:3c:06:66:4a:11:27:e8:68:ac:11:
ca:e4:ee:f6:21:2a:d6:32:d2:63:19:d6:39:46:1c:
2d:04:9c:2a:77:27:53:43:2f:e1:c1:15:cc:0a:dc:
96:3f:b6:79:e8:b7:5f:c3:b4:57:2d:f7:14:38:e0:
07:61:c6:92:6a:b6:8c:66:ee:a0:ab:8c:1e:32:25:
4e:9f:d4:42:7f:8b:a2:f7:77:d5:02:bd:03:86:1e:
77:31:7b:15:5d:70:4b:e6:6e:2f:0f:03:86:27:15:
49:b9:b3:2e:7b:81:e0:d3:c1:bc:67:28:1c:2d:4d:
ed:86:e3:36:01:be:42:76:8e:7e:57:9d:4b:92:56:
e1:2a:9f:6f:1b:74:78:93:31:16:8f:9a:63:da:3b:
14:c3:d5:1a:68:56:55:6f:68:e2:f4:ad:71:3e:d1:
8d:16:20:1f:84:bb:86:44:2b:0a:d3:81:f9:ac:57:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:2E:A5:28:B7:4B:94:E4:09:4E:37:54:2E:C7:1F:21:C4:F4:9A
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:44:bb:01:be:43:f3:83:e4:a9:dd:be:a3:0b:23:6f:d0:79:
09:87:8c:65:d3:52:e4:82:9b:f9:74:2c:53:17:4d:7f:e3:ef:
26:5d:ea:f3:d4:b7:5b:38:6f:c9:67:55:cb:57:66:56:36:cb:
96:0c:94:da:15:ea:ef:43:cc:76:73:24:a9:ba:3b:61:04:1b:
e8:81:4b:82:73:55:55:73:ea:90:18:42:b3:40:65:95:ee:83:
1f:3e:21:f4:ff:3e:6a:4d:7f:bc:03:96:1d:66:31:b6:5f:d3:
1f:c3:3e:bf:c7:12:fa:27:4f:b8:c0:31:ba:6e:d0:96:c5:25:
90:71:86:ea:a3:88:aa:9f:a6:c9:0b:7e:bf:b5:76:8b:9f:b1:
e1:7f:34:1b:97:c9:b4:a3:7e:5f:6f:6e:23:49:a9:81:b3:b6:
7b:23:9d:91:5e:c7:3f:8f:66:6e:aa:21:ff:37:dd:22:18:d4:
cc:72:4b:83:3b:aa:72:c0:60:83:37:d5:9f:ff:c4:42:ee:1a:
2c:1d:9c:c2:5a:5d:7d:5f:f3:b1:5d:86:38:5c:3f:6b:f5:d5:
4d:ce:cb:a8:48:05:1e:bb:00:5d:26:1c:d0:98:89:1a:ef:de:
46:92:a7:ec:ca:2c:66:e8:af:9e:ac:a1:85:36:46:53:b2:00:
93:db:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:32 2026 by rpki-client