Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: JyQECO2bsRMg6cazRr37xyEcgHZEcfVKcPgaGSBxkZc=
Subject key identifier: 71:07:54:D5:67:59:16:EC:C5:B6:12:1D:49:D8:E6:F5:3F:DB:C2:BD
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019F17C2807CDE10057708199B0641DD1C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:00:50 +0000
Manifest this update: Tue 30 Jun 2026 09:00:50 +0000
Manifest next update: Wed 01 Jul 2026 09:00:50 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: fAhompOd6bPOOP956wh9W7T7EDNtJAJ5rWuM+BXMwQA=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:80:7c:de:10:05:77:08:19:9b:06:41:dd:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Jun 30 09:00:50 2026 GMT
Not After : Jul 1 09:00:50 2026 GMT
Subject: CN=710754d5675916ecc5b6121d49d8e6f53fdbc2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:c5:e1:f4:11:49:93:d2:86:8e:78:7d:e1:
67:61:3f:6f:48:33:e5:8a:ab:1b:25:1a:86:e9:8a:
35:72:7c:cc:1f:e8:c2:5e:bd:89:a1:b9:01:5b:3a:
1a:f8:ef:51:a1:cc:3c:74:cd:db:4b:83:df:55:9d:
b8:ba:87:88:10:59:1e:10:13:42:a3:98:c0:a5:f9:
51:d0:b7:fa:a2:25:b0:cb:99:04:a6:da:1e:bb:e0:
7b:ac:79:db:d9:6d:f1:66:ac:c9:f0:55:67:14:63:
4b:75:93:2c:d9:2a:e2:64:17:07:2c:42:3c:ca:38:
a5:c3:3d:89:df:61:81:44:e7:a4:b3:74:12:90:d9:
04:ee:9b:63:4c:9b:5a:13:76:d8:b2:65:36:ca:06:
6f:91:9b:8e:5f:03:92:a5:87:8b:d1:26:a9:bb:32:
3d:2a:4f:03:11:66:77:3c:62:84:cb:1c:ea:fd:8d:
c5:c3:8c:68:e8:c5:d9:66:d2:10:b5:5a:a1:22:16:
cf:69:74:32:c0:2e:fc:97:f9:1f:23:c2:24:c9:0c:
2a:29:57:51:ce:41:b7:39:51:11:55:78:4b:1b:9d:
dd:93:74:61:bb:d5:09:65:4f:69:d6:68:d3:d9:a6:
74:5e:b2:a1:01:16:d2:2c:27:9c:9c:45:2a:b9:9f:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:07:54:D5:67:59:16:EC:C5:B6:12:1D:49:D8:E6:F5:3F:DB:C2:BD
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:c0:e3:d8:e4:5f:c6:10:42:9a:43:73:6d:94:3e:39:72:
e0:8f:8e:07:49:39:25:f6:48:78:6a:bd:2d:6d:0b:d1:e3:15:
3c:ca:16:eb:65:e8:a8:14:e0:d2:30:95:fd:3d:94:7b:6e:8d:
0b:88:53:5d:69:d0:33:48:0a:c7:34:32:41:8d:14:e1:ad:ba:
db:c8:bf:8b:6b:68:83:bb:50:ee:fd:d4:ee:72:81:f1:28:48:
98:f5:65:73:e6:e0:36:31:ff:7c:69:b1:f0:08:f9:03:46:4c:
57:50:55:22:eb:87:01:bb:4a:e4:23:fc:91:7b:fe:ea:30:60:
06:fe:7d:e1:9b:a3:50:99:6e:ee:2a:79:68:57:aa:55:aa:d1:
7e:07:47:6e:ff:5d:3f:9d:98:42:2f:9d:6a:8d:ad:8d:5d:82:
40:39:ae:c2:d9:f5:a1:c8:95:c4:36:61:b0:24:b2:2a:97:65:
f4:2d:90:59:fd:ea:f7:0d:35:ab:f4:1d:72:5f:aa:9a:b3:ed:
42:5e:0b:e1:1d:a2:7b:3a:a0:59:af:98:6d:82:45:03:1a:86:
23:b9:f4:e8:c8:02:08:96:ac:96:3f:94:0c:21:45:54:e9:44:
80:39:a3:02:c5:06:aa:53:33:07:01:63:cd:ce:f0:2f:ba:10:
96:cb:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:47 2026 by rpki-client