Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: Xncho0UIsbHwQrq3x7V2fChvs5ZJP38yKRu7EcOoC7c=
Subject key identifier: 04:BB:10:F9:6D:90:A6:BE:C4:8A:67:9C:CD:B2:CC:31:3C:22:D7:4D
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019D38D3C07D742CBBFD39636E9D88934C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: WodY34cWtkhM5eSTIrS8vRK67BoSnFWUWmR1L+lq480=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c0:7d:74:2c:bb:fd:39:63:6e:9d:88:93:4c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=04bb10f96d90a6bec48a679ccdb2cc313c22d74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:c2:8f:ca:7b:39:82:d0:ee:13:6d:06:ad:
34:28:42:64:1b:dc:f9:77:c0:47:5a:51:ac:31:94:
ee:47:96:73:77:56:e8:1e:0a:02:f8:00:ef:a7:f2:
75:ae:1b:15:66:43:e4:42:85:b3:11:ef:d6:a9:ec:
4a:c5:1e:ad:7f:41:b0:75:e9:f1:4b:4f:a8:7d:84:
c4:98:2d:52:67:39:ab:3c:7c:a6:31:d0:52:f5:fd:
9b:a9:aa:05:e7:46:62:b3:5f:4c:e8:fe:ed:37:4c:
31:24:f8:c0:cb:d8:ed:50:97:7f:f7:a4:7c:42:66:
76:0f:b4:fa:c6:e1:c1:ed:04:61:a9:98:58:9c:bd:
ca:50:a2:fb:34:82:a0:31:d4:79:77:2a:b2:93:df:
87:ae:e2:98:87:9f:9d:76:77:b3:16:d1:6c:1e:73:
cb:6b:a5:61:38:f5:40:a8:73:fd:18:7f:7e:02:d5:
c4:37:9e:0f:90:6a:77:c5:18:ba:31:77:ec:97:90:
71:df:75:2c:c7:2b:f5:24:9a:db:c1:0c:23:d7:e1:
1e:81:9c:79:00:0d:8b:28:4b:93:1e:bf:e0:43:78:
61:46:c9:60:2b:b1:80:e8:ce:ab:ef:16:26:57:0a:
f7:7a:91:19:2b:a4:75:f8:3d:a6:ce:77:c8:15:02:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:10:F9:6D:90:A6:BE:C4:8A:67:9C:CD:B2:CC:31:3C:22:D7:4D
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:87:dd:e4:5d:bc:f1:2e:e5:dd:4b:c8:9b:5c:5a:8e:75:64:
02:0d:c7:d3:25:17:99:f1:dc:15:0e:41:18:be:d0:e4:23:bb:
6f:40:4e:ec:e5:c7:cb:ed:6a:98:20:a9:18:5d:6d:ae:a8:67:
d6:c6:2f:54:51:4d:01:45:d0:b0:de:9f:48:a7:cb:f0:95:5b:
39:92:89:e3:e4:9f:dc:e9:c3:5b:20:f4:a1:55:a1:73:88:b5:
aa:8b:f3:be:1a:ce:21:e2:7b:98:97:c1:6d:72:9d:79:d7:b1:
48:4e:5b:8f:cd:f4:80:75:81:b6:5b:e0:34:65:5e:4a:74:28:
c5:c0:5b:b7:80:a0:5e:64:08:51:68:ca:f0:b0:3c:09:94:89:
f8:b4:75:12:18:d0:ec:a8:dd:72:82:e9:df:cb:d2:c1:e4:e5:
c9:dd:9b:fe:e9:8d:5a:8b:a7:f3:5f:f5:90:65:9e:cf:60:87:
6c:72:91:df:77:26:fd:5d:a3:70:11:be:e6:9d:de:e4:6a:e1:
7f:f4:ea:9e:c1:69:27:5f:d7:8c:3e:db:45:4a:d5:5e:84:0e:
c5:9f:fd:1b:92:73:78:d2:14:42:8c:bd:07:f6:14:1e:83:a7:
4f:46:8b:90:c9:20:c5:6a:7f:1f:f9:e7:68:79:09:d5:74:50:
a7:86:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:30 2026 by rpki-client