Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: siS/mna+hxFJ+9MMZpFIsnOHMaMJkP92crUJrnj+zjg=
Subject key identifier: 08:12:FE:E1:E4:BE:07:0B:E1:2F:33:9B:9F:13:B9:B7:9A:0E:C9:3B
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019EC149688FEB7567937C942BBD4F99972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 125E
Signing time: Sat 13 Jun 2026 14:01:14 +0000
Manifest this update: Sat 13 Jun 2026 14:01:14 +0000
Manifest next update: Sun 14 Jun 2026 14:01:14 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: upqr5H1K3diZjYw9/ahVD3x8oPLeJzQDooBO6oqNa0w=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:68:8f:eb:75:67:93:7c:94:2b:bd:4f:99:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jun 13 14:01:14 2026 GMT
Not After : Jun 14 14:01:14 2026 GMT
Subject: CN=0812fee1e4be070be12f339b9f13b9b79a0ec93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:72:57:12:03:5e:95:63:7e:9f:f2:33:8f:
b2:86:9f:b3:0e:bb:da:3f:00:b5:3d:30:16:48:21:
17:c9:a2:b9:14:87:7d:ce:47:df:e0:d1:7a:6a:28:
59:6e:30:8b:83:9e:b8:f3:76:c7:af:6d:bd:7c:7f:
28:a3:f9:6f:3c:fb:d0:71:4f:dd:22:10:49:75:5b:
3d:53:82:f1:9d:dc:f1:92:fe:b3:75:38:2f:2b:6a:
d7:a9:9c:91:f6:7f:46:d3:95:b7:b0:01:da:0e:25:
bc:af:14:37:4b:14:e2:12:4c:dd:6f:ce:94:94:14:
52:11:ec:f2:67:37:45:f4:5c:98:ed:fa:bb:70:66:
0f:fb:cd:a8:31:4e:bc:29:3b:0d:52:67:9f:6a:d5:
7c:f0:07:60:dd:32:72:fc:60:c7:63:d0:1b:01:f4:
53:38:e7:aa:b7:5b:7f:da:2a:40:37:eb:63:5b:74:
3f:18:62:c2:94:5b:b7:8b:fb:3b:b5:5e:54:79:b8:
f0:f7:17:72:3c:2b:56:88:e1:2f:1a:9e:c7:47:94:
72:17:c5:97:62:0d:2c:a4:c9:7e:25:98:76:ce:50:
8c:a9:7d:de:b5:0e:8e:c9:0a:c8:45:ae:15:a8:a4:
b4:57:48:09:b2:c8:21:db:b4:8e:87:c5:83:f0:0b:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:FE:E1:E4:BE:07:0B:E1:2F:33:9B:9F:13:B9:B7:9A:0E:C9:3B
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:69:ba:4b:bf:82:f8:13:bd:3d:fc:51:2a:8d:99:46:b1:
68:8e:6d:3c:40:8b:b4:10:20:99:b6:0b:1c:d3:da:99:32:43:
15:f7:98:c9:e0:42:1a:55:88:f3:44:50:70:9c:75:2f:9b:bc:
c9:4c:6b:f2:9e:cb:db:69:f5:fc:3c:d0:a8:89:d2:e4:1e:d0:
c7:91:f7:3d:fb:ad:2d:e5:0c:65:f0:81:f6:90:1c:87:26:b6:
c0:70:77:3b:3c:7d:aa:fd:0d:a2:88:41:9d:96:17:3d:0e:f9:
12:8c:1c:2b:31:40:b6:d6:3d:8b:b9:76:d1:c8:00:1f:fc:7a:
3b:98:7c:03:10:71:af:5c:74:b8:bd:b4:eb:a8:68:87:83:d5:
4e:e9:04:26:87:67:82:ae:52:b7:11:85:19:c1:db:e2:f2:56:
af:48:a9:a5:69:8c:fc:e3:1f:99:eb:30:00:0d:fb:ed:42:0c:
59:cd:5d:5e:26:3d:84:5f:41:bb:9d:4d:a3:20:a2:21:51:98:
16:13:29:47:67:28:11:0e:8e:2d:26:0e:27:ae:cb:ee:9e:76:
e3:9f:2f:2a:59:59:af:6f:c5:b6:f9:34:c5:92:f0:7c:8d:22:
02:c3:3f:92:d2:10:27:1f:b1:5c:76:33:0d:ef:60:96:b4:79:
46:7c:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:33 2026 by rpki-client