Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: /P83hRxv1fT2Xvez6X3lZl9UBmTo90Whkz6RDqiqNxc=
Subject key identifier: 24:74:4C:BF:BA:01:C3:E8:6E:87:C5:8F:FD:29:66:6C:01:C0:2A:FB
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019CAC4788F8225574F417119E05767BF7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 114A
Signing time: Mon 02 Mar 2026 02:01:35 +0000
Manifest this update: Mon 02 Mar 2026 02:01:35 +0000
Manifest next update: Tue 03 Mar 2026 02:01:35 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: 0I2mckugDDZJEM2PhuvsY2e/6ybVm11rtqrnqmjyJxU=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:88:f8:22:55:74:f4:17:11:9e:05:76:7b:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Mar 2 02:01:35 2026 GMT
Not After : Mar 3 02:01:35 2026 GMT
Subject: CN=24744cbfba01c3e86e87c58ffd29666c01c02afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:b3:8d:12:85:f7:fb:0a:9d:0c:38:ff:7c:
a3:34:02:37:3b:b3:07:65:af:dc:46:88:f1:bb:48:
05:ce:ac:90:5b:e9:4f:b9:09:59:f2:d9:4d:26:03:
4e:96:1b:d8:9f:d9:fa:9f:3c:58:18:f3:3a:fc:24:
d2:55:df:96:a5:10:b3:42:19:b4:e5:72:63:b0:76:
4c:01:9e:35:ad:69:cf:54:a3:a3:1a:2c:a1:d6:ca:
57:3a:ed:2e:42:64:7d:0f:8b:cb:a3:da:25:23:d9:
ba:77:be:53:51:aa:5e:98:65:45:8b:ac:1d:c9:bc:
c1:a2:89:b8:2b:a6:ac:70:9f:f4:e2:be:0d:de:d2:
8b:6a:8d:17:ec:a7:74:09:22:a6:f3:89:74:a0:46:
fc:11:10:05:92:35:23:7f:0a:44:36:93:6d:66:46:
bb:3b:3e:8f:42:73:fe:3d:30:d8:b1:b9:c5:ad:f2:
01:38:2b:11:bc:48:df:5b:b1:a8:9f:0b:30:22:6a:
0c:49:ea:9f:03:d1:8d:65:5f:d9:5a:92:a4:4d:ac:
d2:d9:c2:88:f4:4e:55:73:c7:fe:06:5f:f5:a0:6d:
08:6a:a6:00:d1:d7:30:90:13:10:10:b4:de:31:f3:
bc:7a:b1:08:14:4b:00:d9:57:75:97:3a:58:ce:ca:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:4C:BF:BA:01:C3:E8:6E:87:C5:8F:FD:29:66:6C:01:C0:2A:FB
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8b:a5:33:4b:88:c2:b3:e9:3f:28:e6:b0:ac:e2:c8:51:ea:
0d:f0:2a:c8:78:bc:a2:31:3e:a3:c4:d4:90:b4:41:d4:ba:50:
fb:31:25:3e:e1:20:48:5c:da:3f:6f:2c:a7:50:d9:11:50:38:
4e:dd:69:fa:59:6e:8e:bf:d1:52:1e:fe:72:b4:1c:0c:96:15:
d4:99:0d:3b:50:54:e7:22:ba:d8:21:6a:f0:0b:0e:2c:aa:1e:
a0:b9:6e:ec:94:26:0f:4f:df:35:1c:95:61:85:dd:ab:e3:ba:
af:ac:6e:c4:ea:22:8a:84:37:f4:41:ee:ce:b4:60:11:e0:30:
3d:a1:d2:7f:b9:61:91:e4:ec:f4:38:9e:a2:1d:c6:0d:80:fe:
f0:b9:fe:f6:e2:2c:3f:b3:d8:09:7a:56:4f:87:f6:49:12:ef:
89:56:c5:46:78:c8:a5:a9:f2:18:f5:22:2a:46:2e:44:5c:3b:
96:5a:9b:bd:a4:6a:bd:9d:0b:66:77:28:7a:dd:c4:cd:cd:44:
7d:07:e3:7d:03:b6:de:cf:4d:b5:8b:c4:c7:e9:59:a1:43:c8:
c9:26:db:b9:da:03:4e:eb:d4:1b:41:6d:65:6b:8f:22:bd:a8:
d0:bc:b0:e0:85:c2:98:57:c6:54:68:63:a7:2f:7c:e5:f3:85:
70:e7:d7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4j4IlV09BcRngV2e/fhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1
ODRmY2QwHhcNMjYwMzAyMDIwMTM1WhcNMjYwMzAzMDIwMTM1WjAzMTEwLwYDVQQD
EygyNDc0NGNiZmJhMDFjM2U4NmU4N2M1OGZmZDI5NjY2YzAxYzAyYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrSzjRKF9/sKnQw4/3yjNAI3O7MH
Za/cRojxu0gFzqyQW+lPuQlZ8tlNJgNOlhvYn9n6nzxYGPM6/CTSVd+WpRCzQhm0
5XJjsHZMAZ41rWnPVKOjGiyh1spXOu0uQmR9D4vLo9olI9m6d75TUapemGVFi6wd
ybzBoom4K6ascJ/04r4N3tKLao0X7Kd0CSKm84l0oEb8ERAFkjUjfwpENpNtZka7
Oz6PQnP+PTDYsbnFrfIBOCsRvEjfW7GonwswImoMSeqfA9GNZV/ZWpKkTazS2cKI
9E5Vc8f+Bl/1oG0IaqYA0dcwkBMQELTeMfO8erEIFEsA2Vd1lzpYzsqb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR0TL+6AcPobofFj/0pZmwBwCr7MB8GA1UdIwQY
MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt
ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk
LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoulM0uI
wrPpPyjmsKziyFHqDfAqyHi8ojE+o8TUkLRB1LpQ+zElPuEgSFzaP28sp1DZEVA4
Tt1p+llujr/RUh7+crQcDJYV1JkNO1BU5yK62CFq8AsOLKoeoLlu7JQmD0/fNRyV
YYXdq+O6r6xuxOoiioQ39EHuzrRgEeAwPaHSf7lhkeTs9Dieoh3GDYD+8Ln+9uIs
P7PYCXpWT4f2SRLviVbFRnjIpanyGPUiKkYuRFw7llqbvaRqvZ0LZncoet3Ezc1E
fQfjfQO23s9NtYvEx+lZoUPIySbbudoDTuvUG0FtZWuPIr2o0Lyw4IXCmFfGVGhj
py985fOFcOfX3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:14 2026 by rpki-client