Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: YARTvpMGfG5tL71j5gzyYqtoKJlVbxM7jW0OgQJCOPs=
Subject key identifier: A0:AF:4E:52:22:00:07:81:EB:32:C4:C3:F1:E4:95:6E:09:13:C1:DD
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 01A0016F8D81A66EF82C26F9405A2DF4D759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:22 +0000
Manifest this update: Fri 14 Aug 2026 18:01:22 +0000
Manifest next update: Sat 15 Aug 2026 18:01:22 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: 9t81eV9T0OSqwpoyEZ59D+WAYojqujzyYMXZxirvu0I=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:8d:81:a6:6e:f8:2c:26:f9:40:5a:2d:f4:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Aug 14 18:01:22 2026 GMT
Not After : Aug 15 18:01:22 2026 GMT
Subject: CN=a0af4e5222000781eb32c4c3f1e4956e0913c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:88:8d:d8:8f:53:7b:18:64:67:61:86:df:f7:
9c:ff:83:40:f2:f8:6d:45:dd:89:ce:5a:d4:dd:d7:
dc:b2:41:6d:ef:97:3b:e3:3c:f1:e0:51:b7:b3:90:
b3:bb:c2:c1:f6:87:74:d8:a7:91:73:ef:ec:cb:94:
ed:a4:4d:55:b7:94:b6:d9:9e:54:a6:b7:40:f2:1f:
17:60:9f:cf:4e:b5:78:e0:45:64:61:42:99:9b:bd:
db:b1:3a:dc:bc:bb:60:48:96:ba:75:b0:4c:bc:45:
84:35:3a:d2:c6:09:7d:05:cc:cb:a6:64:1b:ef:82:
62:7f:99:1a:7a:74:d9:ff:85:b2:aa:5d:98:86:a7:
f3:cd:f2:80:bb:f7:d6:80:f2:14:8d:d8:6a:56:6c:
e9:83:96:b8:4b:5e:67:ef:ee:87:58:d6:e0:1e:15:
7d:26:6d:e5:0a:5d:23:e9:76:8a:98:b8:e9:d7:74:
f5:ed:1b:33:b8:14:89:9e:e7:6f:5a:0b:1f:4a:c5:
7e:82:ff:9f:34:78:6f:0d:46:b6:1b:d6:96:18:94:
a3:4f:54:80:33:78:69:0b:d7:17:5d:b4:3c:fc:02:
59:08:89:1e:14:28:59:b2:0c:55:a3:50:75:9c:b1:
ed:a8:c3:16:49:53:75:c2:8d:40:8a:49:04:52:a6:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:4E:52:22:00:07:81:EB:32:C4:C3:F1:E4:95:6E:09:13:C1:DD
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ab:2d:cf:58:8f:23:17:2e:7a:1f:da:59:e6:9d:9f:a0:2c:
85:34:5a:47:1b:15:83:f2:bc:dd:5c:02:50:46:85:56:68:5b:
71:e4:dd:8f:85:77:9e:d8:9a:6c:da:01:08:21:26:ab:ba:89:
c3:fe:08:f3:3b:29:dc:ce:5e:28:71:7a:28:b3:b6:8a:de:2d:
57:4e:53:11:4f:6d:6c:95:bf:5f:d9:cf:bb:4f:fd:2e:10:21:
08:a7:8d:ee:1d:58:f2:d5:d2:be:62:e1:76:19:8c:14:d4:f9:
5b:4f:a9:16:5a:4d:30:18:30:1c:ab:9c:47:bc:b7:a1:cd:94:
e1:c4:bf:1b:e2:65:30:84:86:1c:7b:da:84:e5:2d:95:8d:e4:
75:bf:d6:4f:4c:80:ff:83:7f:9b:fe:0d:31:df:08:05:55:5b:
80:bd:88:1a:35:eb:7e:ae:86:6c:98:5e:50:bb:b2:33:f8:8b:
ea:8d:41:1c:25:8c:b4:4e:a8:cb:4d:34:ac:63:04:b6:9a:39:
6d:1e:bf:6d:40:4f:2d:1d:6d:f6:47:71:b1:24:2b:ae:70:50:
a4:a4:ca:1c:d9:c1:97:99:cf:31:42:fe:87:07:7c:10:20:49:
58:16:ed:9d:f6:fb:e9:f7:d7:6e:97:3b:68:21:e6:18:e5:23:
a6:c9:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:42 2026 by rpki-client