Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: 8k/nZU4rs6uZ8eHvLG70XRiVY/HL/mJsTTDaj2Otl2E=
Subject key identifier: E4:29:BB:8C:6D:ED:C5:96:F6:49:AC:5E:6C:D2:0D:32:94:28:06:C7
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019FACE3CDA51243C6A183703612FAB03666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 12D8
Signing time: Wed 29 Jul 2026 08:00:38 +0000
Manifest this update: Wed 29 Jul 2026 08:00:38 +0000
Manifest next update: Thu 30 Jul 2026 08:00:38 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: 7fXfyp5R2inxtTu12ND+8s5jUs5CvuGkAHEZTQIZJuQ=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:cd:a5:12:43:c6:a1:83:70:36:12:fa:b0:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jul 29 08:00:38 2026 GMT
Not After : Jul 30 08:00:38 2026 GMT
Subject: CN=e429bb8c6dedc596f649ac5e6cd20d32942806c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:f3:52:1f:a7:39:ea:47:d5:db:05:0c:48:
28:0e:b7:2c:2a:b7:5d:c0:a0:7b:63:1e:c9:97:bb:
6b:6c:0d:4e:41:1d:8c:1c:ce:e3:0f:54:e3:37:60:
41:07:13:7a:10:66:5a:11:e7:b5:02:e8:f1:1a:60:
58:51:6a:8b:ca:cf:8e:7b:08:b2:bb:b8:83:1f:b9:
29:12:48:0e:c0:77:78:6b:f7:3d:25:e8:3a:5d:74:
94:44:85:ab:9d:7e:9b:c3:47:85:c0:e9:dc:8c:2e:
f3:a2:c6:04:49:e3:9c:54:19:6f:9f:01:1a:b2:4d:
d5:39:98:1c:74:ad:ad:d1:44:60:98:fd:20:e1:9a:
cc:1d:43:6a:41:f8:17:b7:ad:75:ad:ee:b5:30:16:
b8:05:3e:1f:a3:84:0b:41:60:50:fc:15:61:07:de:
03:33:8c:07:51:7e:5c:cd:cc:94:2c:9e:08:1e:23:
8f:a6:29:f7:1e:de:4b:78:c5:b4:db:f9:8e:76:d6:
f5:b9:a0:36:4a:fc:cd:c4:0d:0e:30:53:da:a7:0d:
f0:84:1c:9e:85:a9:e5:94:6b:8c:04:a1:1b:1d:8f:
45:f2:eb:b1:d6:bc:be:c3:44:a1:1d:2a:1e:26:2e:
da:c5:bc:48:6a:63:01:67:02:3e:e8:fa:90:96:e7:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:BB:8C:6D:ED:C5:96:F6:49:AC:5E:6C:D2:0D:32:94:28:06:C7
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:28:3b:6b:17:7e:fd:03:41:c8:ff:f2:28:3d:87:4c:59:
0c:29:b7:60:a0:7b:c6:b6:5c:2b:83:fc:a4:04:9e:75:a3:30:
c1:e5:3b:f0:96:7a:5a:a2:16:d9:49:ff:d4:91:ad:f0:b2:66:
04:c1:0f:15:73:8e:db:71:17:44:22:54:9b:d8:c3:2a:34:e2:
02:95:29:f8:7c:7a:c5:06:66:7c:25:32:b5:68:c9:fe:57:76:
88:4d:72:b4:aa:2a:9e:39:a2:67:f9:15:20:2f:58:90:57:2d:
ec:28:c1:a9:06:25:1f:42:43:14:4c:de:3e:f3:04:66:94:20:
d0:8e:49:a1:27:e9:e5:cd:82:2f:72:13:01:4e:17:fc:85:8f:
39:e0:4f:bb:91:c3:ab:9b:f4:01:81:c1:ac:44:e0:18:97:ce:
76:be:d6:51:ce:80:cd:36:56:3e:b1:b3:83:c6:61:87:ad:2c:
21:6a:e2:32:a0:63:5d:2c:7f:c1:1e:24:a0:4b:35:ca:4b:f3:
fc:89:7b:17:7a:9c:7c:ea:6d:7f:aa:b0:d6:1a:0e:8c:d0:91:
cb:25:bf:b8:46:2f:2b:0d:b5:99:d7:89:d5:2c:7f:ad:a0:ac:
3f:52:1e:76:48:1f:da:ec:0b:4b:d6:86:a2:a1:eb:83:6e:25:
01:d1:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:18 2026 by rpki-client