Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: xQVqVULZHUHD/+Evds6Ksjt1XwSNSGGqO5CT/1L7cXQ=
Subject key identifier: 7A:8F:C3:8D:38:38:78:CB:7D:90:71:74:7C:81:C5:E3:18:93:83:B8
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019D3752F2BC57EB9F5B5536A750A6744011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 1192
Signing time: Sun 29 Mar 2026 02:01:16 +0000
Manifest this update: Sun 29 Mar 2026 02:01:16 +0000
Manifest next update: Mon 30 Mar 2026 02:01:16 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: DY7g/Pw5L/sfATktUJJy4OEvjLirwbifty6+E5oom6Y=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f2:bc:57:eb:9f:5b:55:36:a7:50:a6:74:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Mar 29 02:01:16 2026 GMT
Not After : Mar 30 02:01:16 2026 GMT
Subject: CN=7a8fc38d383878cb7d9071747c81c5e3189383b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:d9:9f:f9:02:aa:af:44:e1:7c:9d:64:e9:
67:2b:d7:08:4d:45:64:c7:aa:39:70:c6:d8:d7:63:
e4:54:07:a3:6a:f2:da:fa:f9:f0:09:bf:dc:03:f8:
16:21:47:29:e2:2a:78:79:9e:81:93:01:df:67:aa:
80:67:75:6c:44:f0:cc:5b:04:7b:38:5a:de:e3:e9:
2c:c3:06:30:74:77:4e:b3:0b:2d:fa:9d:46:0a:73:
04:64:8a:3e:90:51:e2:aa:b6:7d:49:4c:f5:c3:b9:
6e:50:3b:4d:1b:b7:02:f3:92:02:c0:71:99:3f:df:
bd:48:2a:4a:4b:50:4a:ba:75:f4:e1:dc:01:df:7c:
fb:bf:f7:45:50:43:43:ea:ff:d2:57:e7:08:2c:bd:
34:29:ea:e5:7a:92:2c:f7:1c:df:38:d4:48:c1:81:
de:b8:9b:74:46:c5:f1:43:ef:69:76:db:89:5b:de:
90:80:71:3b:ed:96:89:8c:65:8e:0b:7e:c8:c9:b1:
0c:84:e4:d7:e4:67:2b:83:cb:67:45:32:8f:ef:bc:
b5:9d:f6:60:61:ec:82:8e:ad:05:27:f4:6f:c1:21:
21:65:e9:c8:67:4b:55:b4:bc:7d:f4:9c:7f:67:b5:
80:d2:63:a7:dc:1d:7a:eb:b1:94:a7:df:3f:39:67:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8F:C3:8D:38:38:78:CB:7D:90:71:74:7C:81:C5:E3:18:93:83:B8
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:11:9f:27:77:1e:27:eb:91:d2:77:93:c0:ee:1d:e1:1c:
fa:d6:d8:36:50:07:d0:93:ba:c1:c2:23:09:bb:ae:ff:fb:d2:
7a:a1:17:3e:54:48:af:5d:b0:c4:cc:31:2b:02:d5:bb:18:2f:
0f:49:37:2a:2a:16:90:dd:0c:86:24:03:07:ca:1c:73:f8:46:
c8:03:94:03:a2:d4:94:45:33:78:f5:ce:2a:3d:5e:e2:34:d0:
8e:cc:27:25:d7:ec:4c:e7:47:b7:37:00:ac:9c:8d:76:3e:ca:
bb:70:f4:0f:d5:f0:d6:12:4e:9e:78:15:92:ce:61:1e:ae:cc:
0e:11:60:d6:b2:c9:4e:eb:04:c0:7c:4f:52:e9:c6:36:0c:ca:
80:50:d5:f7:60:32:c9:25:d7:cf:23:d1:fe:c2:7d:90:51:b4:
a5:af:9f:9b:81:bf:a7:fd:9e:d3:05:09:c5:da:3b:70:18:63:
15:a9:d8:4d:8d:f7:a9:4c:06:9c:92:46:4f:ed:2b:88:89:1e:
cf:92:45:d6:81:f1:a2:e1:2f:3f:b3:0c:af:dc:af:b9:93:d3:
c3:71:18:77:63:e2:2d:83:dd:72:48:93:0d:c0:eb:c3:63:0d:
f2:0d:3a:f3:4d:18:62:9b:78:89:22:b5:25:0d:c7:9e:40:f8:
e8:2c:40:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UvK8V+ufW1U2p1CmdEARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1
ODRmY2QwHhcNMjYwMzI5MDIwMTE2WhcNMjYwMzMwMDIwMTE2WjAzMTEwLwYDVQQD
Eyg3YThmYzM4ZDM4Mzg3OGNiN2Q5MDcxNzQ3YzgxYzVlMzE4OTM4M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+LZn/kCqq9E4XydZOlnK9cITUVk
x6o5cMbY12PkVAejavLa+vnwCb/cA/gWIUcp4ip4eZ6BkwHfZ6qAZ3VsRPDMWwR7
OFre4+kswwYwdHdOswst+p1GCnMEZIo+kFHiqrZ9SUz1w7luUDtNG7cC85ICwHGZ
P9+9SCpKS1BKunX04dwB33z7v/dFUEND6v/SV+cILL00KerlepIs9xzfONRIwYHe
uJt0RsXxQ+9pdtuJW96QgHE77ZaJjGWOC37IybEMhOTX5Gcrg8tnRTKP77y1nfZg
YeyCjq0FJ/RvwSEhZenIZ0tVtLx99Jx/Z7WA0mOn3B1667GUp98/OWdmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqPw404OHjLfZBxdHyBxeMYk4O4MB8GA1UdIwQY
MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt
ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk
LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgekRnyd3
HifrkdJ3k8DuHeEc+tbYNlAH0JO6wcIjCbuu//vSeqEXPlRIr12wxMwxKwLVuxgv
D0k3KioWkN0MhiQDB8occ/hGyAOUA6LUlEUzePXOKj1e4jTQjswnJdfsTOdHtzcA
rJyNdj7Ku3D0D9Xw1hJOnngVks5hHq7MDhFg1rLJTusEwHxPUunGNgzKgFDV92Ay
ySXXzyPR/sJ9kFG0pa+fm4G/p/2e0wUJxdo7cBhjFanYTY33qUwGnJJGT+0riIke
z5JF1oHxouEvP7MMr9yvuZPTw3EYd2PiLYPdckiTDcDrw2MN8g06800YYpt4iSK1
JQ3HnkD46CxA5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:25 2026 by rpki-client