
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: ABA8UQZlYTd8CuZD98JB1maa0bIuIYkTDHm3C7dLn+Y=
Subject key identifier: B5:67:E2:BE:58:07:28:61:BB:B0:EA:E7:4B:0D:82:05:44:11:7B:8E
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 01A0CE243F5686F3AF54AC3E095135447761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 12:01:16 +0000
Manifest this update: Wed 23 Sep 2026 12:01:16 +0000
Manifest next update: Thu 24 Sep 2026 12:01:16 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: 9c6fuc1LXaBYFAWgiwZEXnVzad82JS/YKvqBIOkooik=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:3f:56:86:f3:af:54:ac:3e:09:51:35:44:77:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Sep 23 12:01:16 2026 GMT
Not After : Sep 24 12:01:16 2026 GMT
Subject: CN=b567e2be58072861bbb0eae74b0d820544117b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:be:56:47:f5:ad:3f:83:c7:f6:8a:04:40:
0e:ca:59:53:1a:28:69:d0:12:50:c1:4d:5d:f5:e5:
56:ec:4d:8b:a9:c5:46:94:c0:0c:a4:01:bc:73:55:
4c:0e:46:fb:32:45:aa:e5:84:b9:61:be:19:bf:8f:
e5:a0:32:e5:dd:95:f6:13:a7:77:ea:54:73:7a:25:
fe:42:6e:01:0e:28:a5:40:a2:b5:92:2b:03:e0:a4:
92:cb:32:8f:47:92:b4:4b:5c:ef:ba:5e:f2:d6:c6:
0b:00:bb:7e:97:3e:8e:28:17:98:88:1b:b1:89:9f:
b2:e3:4d:f4:0c:f9:ac:49:ca:dc:fc:ad:e9:d0:21:
1b:05:e0:cb:1a:73:b9:0a:a4:cf:a4:2e:33:dc:d7:
61:d6:be:39:1e:d4:9d:b6:1a:79:d3:8f:02:2e:ad:
58:be:8d:33:5a:16:85:f2:84:ca:6a:01:f4:f7:ad:
d0:b0:39:26:07:a2:29:6c:5e:40:68:0b:f7:96:6d:
c0:57:5a:e5:75:64:ba:f4:b2:e1:08:c5:fc:0c:6b:
25:4d:ad:64:4c:0e:e3:3d:be:cf:b5:9b:d4:3b:9f:
b5:68:53:ed:dc:8a:e7:74:81:89:42:6d:c3:7b:45:
95:57:50:98:62:a3:f9:f0:27:7a:90:bb:2a:11:85:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:E2:BE:58:07:28:61:BB:B0:EA:E7:4B:0D:82:05:44:11:7B:8E
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:3d:90:3c:f0:05:d5:ac:08:0d:4d:44:35:1d:63:a6:d4:
a5:09:4f:f5:9d:20:17:4e:d6:7b:21:ca:3c:fa:a6:78:b9:b0:
53:5a:56:30:28:62:83:74:dc:d4:c7:bd:60:cb:21:21:cc:7c:
dc:ec:27:be:61:2a:b4:ee:6d:97:55:35:99:75:91:7b:b2:e2:
58:98:0d:66:48:50:23:dd:0a:a9:10:9f:37:e2:e2:fc:ce:48:
21:72:d0:25:13:48:a0:80:dc:c3:96:f5:47:9c:54:3a:83:ff:
cc:b6:7d:b4:1a:74:b2:56:d9:4e:a8:77:e4:1d:93:0e:c7:1b:
2d:e2:ae:28:81:23:a2:9c:68:a0:e2:c7:cf:72:55:2b:1f:b0:
28:9e:41:5c:b0:12:e9:6f:d2:7d:b3:56:3a:26:dd:8b:b9:20:
04:ed:6e:92:56:68:e6:a8:02:d2:44:cd:b0:d7:1f:eb:05:9a:
43:39:b8:20:83:c5:44:05:da:1a:5f:c4:1a:22:5c:09:7f:0f:
44:42:cb:6e:c7:da:63:61:22:38:43:18:1f:59:40:35:23:37:
af:42:4a:9b:77:f8:fe:8d:8e:e0:ad:6a:14:4a:e0:8e:70:04:
8a:63:2c:54:e8:de:64:b5:41:ec:44:52:91:f6:60:e8:1a:fe:
6b:ec:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:46:55 2026 by rpki-client