Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: Qk1CDv9QzqtBBPJ8i8DaVIVlgy8txsq+dxTSXJP+J+4=
Subject key identifier: BF:DE:13:4F:43:EC:B5:E9:F6:53:6A:36:25:27:51:08:19:47:5B:98
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 01A0C66AC581CC574072B0ED96C25F5461DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 00:01:21 +0000
Manifest this update: Tue 22 Sep 2026 00:01:21 +0000
Manifest next update: Wed 23 Sep 2026 00:01:21 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: J0PSo/6auakjXh5jih+M1kVyfbjrINAeuKxcGqJO0rY=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:c5:81:cc:57:40:72:b0:ed:96:c2:5f:54:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Sep 22 00:01:21 2026 GMT
Not After : Sep 23 00:01:21 2026 GMT
Subject: CN=bfde134f43ecb5e9f6536a362527510819475b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:11:a3:4e:50:09:7c:bb:18:4c:0f:f7:60:
81:f8:dc:66:e3:d9:bb:bc:75:02:e4:65:6d:2a:3e:
7b:20:64:4a:6e:d7:6b:3f:a7:f9:8f:92:43:2a:94:
aa:02:2a:d2:a8:19:e3:9d:38:62:cd:f7:c9:92:4e:
4e:84:c6:07:b0:11:ed:dc:8e:6d:38:e6:90:30:c0:
f0:75:9a:a4:03:f2:21:62:f3:09:13:86:da:62:f1:
ca:b0:d4:57:02:9b:c9:53:7b:2d:69:ac:58:1b:bb:
dc:5f:73:68:72:f2:2b:78:c9:03:40:2c:d8:5c:a8:
50:ba:07:f7:b9:12:b0:8b:73:fe:75:e4:0d:92:9b:
a4:4e:58:80:8f:7f:3f:70:2c:eb:08:c9:38:b8:53:
1f:dc:3a:a0:18:95:e0:2f:94:72:b6:31:d3:2f:f4:
9c:59:9a:ab:3b:67:f5:04:8d:08:7f:f1:d4:c3:ec:
d0:3f:41:3b:7a:69:ce:66:27:36:b6:dd:e9:94:5d:
f9:aa:d6:2c:e8:2a:81:d0:a8:47:6e:ec:98:2b:1e:
45:51:7c:d8:10:db:8c:d0:39:5f:66:25:dc:40:3c:
ab:e0:0e:70:82:32:84:83:6d:6f:5c:1d:a0:ff:ff:
e7:be:41:c0:ba:ad:2b:c6:ac:d7:cc:2a:e8:a5:c4:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:13:4F:43:EC:B5:E9:F6:53:6A:36:25:27:51:08:19:47:5B:98
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:45:1c:04:8f:88:ac:63:03:47:e1:be:9b:ca:af:65:7c:da:
aa:26:37:26:ed:08:bd:cc:16:f8:eb:e2:80:97:f5:f7:45:1d:
6f:50:b7:e8:ca:f4:6c:d0:26:60:bb:db:d9:75:2c:ab:61:0d:
e4:19:4a:ee:6c:0d:2d:b3:34:a0:b9:a1:0c:2f:5e:2e:05:bc:
bb:06:41:eb:cc:2a:da:f9:6e:1a:ce:97:99:b2:35:80:46:22:
76:ba:d4:57:47:03:8e:d3:cc:e9:b5:53:0d:4d:fd:f0:7f:a8:
89:47:29:c3:00:23:01:ce:83:de:0f:11:e6:f6:7d:ad:ee:0a:
eb:12:44:0a:3c:9e:59:59:65:8a:5f:32:7c:2f:97:f7:3a:a9:
ae:2e:58:73:d4:fa:e7:fd:49:bb:ec:a2:b8:d4:2c:29:0d:a0:
7b:3f:cb:f2:bc:07:7c:cb:2f:1f:2b:b1:2a:39:87:90:6c:3a:
b8:46:cb:eb:36:71:82:0f:07:f0:54:ca:da:c9:11:6e:f5:93:
e3:13:45:14:b3:d3:01:f7:d8:30:75:ed:c6:1c:52:73:31:60:
be:fb:e4:7b:77:af:f8:06:77:7b:f9:a2:df:8d:eb:68:03:94:
56:2d:bc:bf:fa:c4:37:ac:01:66:02:d5:cf:9c:96:82:a2:5e:
1b:43:47:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGasWBzFdAcrDtlsJfVGHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw
MjcxNmMwHhcNMjYwOTIyMDAwMTIxWhcNMjYwOTIzMDAwMTIxWjAzMTEwLwYDVQQD
EyhiZmRlMTM0ZjQzZWNiNWU5ZjY1MzZhMzYyNTI3NTEwODE5NDc1Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyToRo05QCXy7GEwP92CB+Nxm49m7
vHUC5GVtKj57IGRKbtdrP6f5j5JDKpSqAirSqBnjnThizffJkk5OhMYHsBHt3I5t
OOaQMMDwdZqkA/IhYvMJE4baYvHKsNRXApvJU3staaxYG7vcX3NocvIreMkDQCzY
XKhQugf3uRKwi3P+deQNkpukTliAj38/cCzrCMk4uFMf3DqgGJXgL5RytjHTL/Sc
WZqrO2f1BI0If/HUw+zQP0E7emnOZic2tt3plF35qtYs6CqB0KhHbuyYKx5FUXzY
ENuM0DlfZiXcQDyr4A5wgjKEg21vXB2g///nvkHAuq0rxqzXzCropcTBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/eE09D7LXp9lNqNiUnUQgZR1uYMB8GA1UdIwQY
MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt
MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx
LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkUcBI+I
rGMDR+G+m8qvZXzaqiY3Ju0IvcwW+OvigJf190Udb1C36Mr0bNAmYLvb2XUsq2EN
5BlK7mwNLbM0oLmhDC9eLgW8uwZB68wq2vluGs6XmbI1gEYidrrUV0cDjtPM6bVT
DU398H+oiUcpwwAjAc6D3g8R5vZ9re4K6xJECjyeWVllil8yfC+X9zqpri5Yc9T6
5/1Ju+yiuNQsKQ2gez/L8rwHfMsvHyuxKjmHkGw6uEbL6zZxgg8H8FTK2skRbvWT
4xNFFLPTAffYMHXtxhxSczFgvvvke3ev+AZ3e/mi343raAOUVi28v/rEN6wBZgLV
z5yWgqJeG0NHUQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:11:03 2026 by rpki-client