Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: rxP71t7e4plZ158YtlGia82STEwuexINuvsv0lEjOys=
Subject key identifier: C6:18:36:54:1A:89:A9:2D:6C:A5:46:0E:4A:CB:9E:0C:52:46:CF:F4
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019D99622DF4794525E0CE9B7CC7B14F36A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: FqjeJcNxubpxA9b/BDyXZ+GV/hAO+JSnjxgQpXPCznU=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2d:f4:79:45:25:e0:ce:9b:7c:c7:b1:4f:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=c61836541a89a92d6ca5460e4acb9e0c5246cff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:06:aa:90:8c:fa:17:6f:5b:82:9c:f5:8e:
5b:16:e7:40:fc:f3:b3:f9:00:ce:26:b9:1b:35:e4:
76:60:7a:c4:34:e2:70:0e:ed:bd:14:12:b7:c8:9c:
ef:9a:04:ca:80:cb:38:27:6f:05:58:90:f0:c6:61:
90:c4:90:4f:fd:fa:65:80:45:d6:35:87:30:16:c3:
01:6f:9f:80:fc:d9:6e:14:65:08:0f:39:0e:19:3c:
6b:1e:4a:9f:00:37:df:e9:e1:d3:42:d0:c4:af:08:
ac:54:bb:33:91:f6:bf:ad:89:06:4c:82:2c:30:35:
78:cb:61:75:84:39:7c:65:f7:78:bc:b3:0d:da:00:
97:12:90:e1:f3:9f:55:22:ab:83:8e:b3:1c:9c:b5:
2a:85:cc:b5:ac:e2:70:fe:3e:a3:c7:3e:e2:54:a0:
2b:96:d4:6b:0c:92:05:3f:2e:7c:4c:30:75:9f:05:
dd:b9:7d:8a:cf:5e:42:da:16:cb:b3:3f:e2:8a:cc:
a7:0f:cb:3e:8a:30:a3:04:0c:9d:8c:62:27:0d:db:
f2:30:ee:db:81:0b:5f:e9:1e:b9:57:4e:20:79:1b:
37:2a:70:4d:03:db:da:5d:3d:dc:74:20:8f:a7:42:
8e:64:2a:9f:96:97:0d:75:95:d3:d5:63:70:d7:17:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:36:54:1A:89:A9:2D:6C:A5:46:0E:4A:CB:9E:0C:52:46:CF:F4
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:bb:ad:6b:28:43:ea:c3:4f:b5:37:8f:8b:be:ae:5c:8c:
3f:ca:88:57:25:b4:39:72:7c:cd:20:b4:cc:e9:b0:9f:3e:8f:
1e:a9:45:bf:18:b5:d0:6a:cd:36:df:a2:45:c3:ec:71:71:80:
54:7e:00:df:b0:eb:d9:7a:a1:9b:ea:f4:99:d4:5f:ae:14:2d:
c6:d9:ff:25:c0:61:14:71:6d:f8:98:b9:0e:9e:8a:e1:0c:cb:
69:64:67:8f:b0:ee:3d:f3:fa:71:b6:0d:47:63:42:a4:76:c3:
1d:a6:52:e3:fb:c5:02:1d:18:97:2d:4c:5d:04:fc:ad:17:91:
f4:58:ea:73:8b:93:e0:cf:de:79:5b:2f:e7:6f:87:53:3c:53:
da:52:45:7a:f0:71:50:00:fa:f2:24:29:a1:b7:e8:da:a2:69:
10:18:c8:d2:cd:89:ac:2a:d0:1d:a2:11:cf:9c:6e:dd:45:ce:
61:c6:17:27:b5:18:c5:d8:b9:93:f6:8f:ce:0b:0e:8c:a7:6b:
11:d0:e5:4e:f8:d4:f2:4d:2e:34:0e:11:c3:e1:d1:0a:d2:db:
b9:a1:c5:e1:db:53:1b:d7:63:27:98:27:4e:42:dc:43:0d:8c:
08:0a:32:1e:00:90:40:69:3b:67:d7:d7:54:3d:3b:6d:74:49:
92:a2:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:36 2026 by rpki-client