Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: R0/M1xEGefqgnJ+RBF3SNr5zw4W8EErAeLtFA5wRF4s=
Subject key identifier: 59:72:28:D4:5B:41:AE:EB:1D:D7:53:05:D3:9D:A7:91:50:CE:29:7A
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019F93C8D359F80294ED03AA3711C72FC222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 12CB
Signing time: Fri 24 Jul 2026 11:00:39 +0000
Manifest this update: Fri 24 Jul 2026 11:00:39 +0000
Manifest next update: Sat 25 Jul 2026 11:00:39 +0000
Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: pFHhTseD6JLxQRmy66Db/zA4mOPSXy9MbV5Igsvln6E=)
2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:d3:59:f8:02:94:ed:03:aa:37:11:c7:2f:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jul 24 11:00:39 2026 GMT
Not After : Jul 25 11:00:39 2026 GMT
Subject: CN=597228d45b41aeeb1dd75305d39da79150ce297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:0e:f9:4d:58:bf:06:3e:7f:21:82:6f:b9:
35:95:b1:c7:6b:d5:42:bf:e0:57:7c:b9:64:1b:53:
5f:69:a6:68:e6:e8:83:89:ce:1f:42:a4:9a:0f:4d:
c8:9a:44:48:73:4a:5d:f5:8c:99:41:68:fd:83:09:
5b:f6:61:04:3c:d9:cd:e7:ed:be:30:36:dc:00:03:
3b:26:23:39:24:e4:df:a9:d7:53:e2:91:50:ad:19:
bc:2a:77:22:de:40:71:ce:df:5d:d2:0b:e5:ec:99:
04:fc:40:be:9f:f5:2b:71:3b:8c:99:ff:08:95:88:
d4:78:2d:63:5f:29:c6:c6:84:ee:53:ce:85:f8:3a:
a6:64:1c:dc:74:f6:78:34:44:7f:57:2e:d4:0a:d1:
a9:2e:09:f6:31:60:2f:f5:62:ba:f4:be:60:db:a6:
70:52:e2:52:72:10:e9:25:b7:62:77:23:b8:57:0e:
15:5f:6f:a1:69:b8:90:09:06:46:e5:bf:48:2b:ff:
a0:b7:6f:37:b0:cd:a6:67:71:03:2b:fe:3f:a3:66:
6f:1e:32:82:87:9f:30:75:2a:c9:93:d4:39:87:90:
f3:8e:43:04:b3:7d:5d:07:36:3b:b1:90:d1:39:39:
4f:d2:ef:87:46:f3:a4:1d:36:56:a0:49:e1:64:31:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:28:D4:5B:41:AE:EB:1D:D7:53:05:D3:9D:A7:91:50:CE:29:7A
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:e7:ad:c5:7c:55:91:c3:b1:f3:6b:99:02:5f:e5:b7:bd:
4c:35:83:cc:35:31:a9:64:1b:71:16:a5:97:a7:bf:2d:5a:b8:
4c:29:30:e5:fc:8d:3c:e1:4c:f3:43:71:8d:be:b2:e7:57:40:
98:f6:36:80:a6:db:22:37:ca:7c:ed:95:1e:09:0d:c2:69:75:
27:19:bd:f9:d2:eb:90:61:a6:89:b3:6d:41:8d:c4:fd:2b:d7:
67:4c:5b:ae:95:61:33:06:9f:74:9c:f5:90:4a:23:54:20:24:
90:67:52:49:4d:fa:38:b3:c9:02:62:63:00:b9:9f:bf:26:2d:
ba:c5:7b:26:9a:d8:02:b4:4d:72:89:2e:d6:09:57:97:ba:77:
46:33:f5:f4:9e:ca:3f:2b:7d:f0:41:69:65:d3:fc:9f:7b:9e:
5e:50:44:5c:20:87:68:0a:09:bb:c6:bb:50:8e:15:32:cb:a4:
cf:db:c3:c2:46:5a:e3:15:db:52:9a:ba:60:19:6b:fc:06:79:
66:7f:e5:d4:a0:03:89:8c:ca:2c:4f:83:ee:61:2e:fa:56:b0:
d1:8a:7e:49:92:a2:46:b4:66:53:21:2f:97:56:1b:7a:43:64:
9d:89:9e:dc:8d:55:1e:45:30:17:a8:35:4a:03:11:59:e4:cb:
c4:f4:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:51 2026 by rpki-client