Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: ZaeQFRx2v7e4PQ0y/QbuJhycpenkFTefc5GqQ5zyV2Q=
Subject key identifier: CC:EE:82:A9:14:AF:54:43:B2:90:3D:51:7D:0D:AF:DB:8A:F4:4F:0A
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019EB98FA35A38EA8B854F56E1A198A1A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 125A
Signing time: Fri 12 Jun 2026 02:00:58 +0000
Manifest this update: Fri 12 Jun 2026 02:00:58 +0000
Manifest next update: Sat 13 Jun 2026 02:00:58 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: 6kEql83bgBl3AdCTY/b1tEMSiXDxHbFuTHe2ZhNvoa4=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:a3:5a:38:ea:8b:85:4f:56:e1:a1:98:a1:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jun 12 02:00:58 2026 GMT
Not After : Jun 13 02:00:58 2026 GMT
Subject: CN=ccee82a914af5443b2903d517d0dafdb8af44f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:95:8d:e6:81:07:3e:50:8e:83:91:18:d9:
dd:b0:5d:7e:3a:02:1e:f9:a0:e1:0d:0d:67:00:b5:
60:63:7c:64:9a:df:49:86:24:b1:73:63:88:a8:0c:
8b:e9:52:4e:d6:b9:69:3e:49:ed:15:75:e9:23:2f:
89:20:ab:8d:4a:18:3a:3e:66:0b:5a:0f:f7:a6:b1:
fa:b2:ac:36:10:3c:cb:d2:aa:43:46:19:f4:6e:6a:
da:a8:14:2f:55:c1:88:4a:aa:57:16:40:95:22:b8:
b0:c0:27:7a:a0:98:e1:3d:ff:e1:6b:2d:61:9d:51:
d3:46:60:ad:7c:15:23:9d:42:64:5c:16:87:39:19:
c6:5c:4b:ba:bf:78:c7:7e:8e:78:8d:57:d3:c7:a9:
45:63:b1:a6:51:8b:35:d8:0a:83:f9:5e:94:38:0d:
96:4e:1d:a4:fe:ed:6e:4d:b1:d1:6b:f5:28:67:aa:
e3:03:b5:2f:59:6c:41:47:d3:b4:28:b1:0d:77:43:
fa:27:45:a8:54:5f:94:65:81:ae:00:1c:14:2b:d2:
b5:3a:ce:00:24:37:7f:2e:83:0b:76:4f:91:af:c3:
10:b5:24:d6:91:ba:af:72:e2:c5:a8:34:b1:93:a0:
91:c3:9f:46:33:81:81:26:4b:55:83:d8:8b:ee:93:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:82:A9:14:AF:54:43:B2:90:3D:51:7D:0D:AF:DB:8A:F4:4F:0A
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8f:a9:be:fe:6a:4e:22:50:c7:97:07:e6:ec:6c:1e:10:cd:
13:92:e4:6c:ce:d2:51:c9:91:ec:e6:53:c4:25:79:96:f0:1a:
f1:fa:34:5e:b2:1d:9b:c2:db:84:0a:e8:f0:38:7c:fc:19:c7:
e3:b0:48:59:90:76:d2:3d:f2:ea:b4:bb:98:3a:13:d8:bb:8e:
55:8f:18:78:91:f5:91:33:5f:4b:9c:34:4e:bf:7f:5d:13:60:
be:b7:9a:72:b7:45:3c:8a:00:23:98:d8:36:f8:23:11:68:69:
65:b4:86:f5:df:f2:a5:16:59:a0:f6:5e:43:9e:69:14:a3:59:
43:87:91:55:25:c1:40:c6:0a:9b:20:b2:49:fd:86:66:97:51:
62:89:85:14:5b:ba:50:80:b4:30:b6:ca:15:d4:a0:a8:c5:e5:
30:86:c6:07:43:56:17:30:f7:4a:60:1d:36:c0:da:6d:78:a3:
f4:f9:07:f8:34:a9:1b:a9:87:2e:66:f2:6e:a3:e1:bd:e3:10:
67:ff:b1:56:aa:84:46:ba:c2:2c:fe:f7:a5:27:0a:bd:3e:99:
d4:4c:88:4d:4d:d5:e5:51:14:41:b8:3a:28:95:4f:35:a9:96:
4d:16:84:5d:e8:11:15:89:7e:9a:a2:bd:46:59:d1:e9:a0:3a:
b3:f5:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:11:52 2026 by rpki-client