Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: Ace6iU7wCYOenOLA5GjtOJrb2aLGs5LUK7uBb3z8SDI=
Subject key identifier: 34:8E:AE:21:9E:77:71:4B:AB:33:5E:26:E7:71:22:04:3D:D5:00:44
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019CABD92D938C8B61B7F9AFB7471C054FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: gMJBj0GlGrGnLweUSxcpAHVT9Hd0kaFi/a17DCOeoFU=)
2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2d:93:8c:8b:61:b7:f9:af:b7:47:1c:05:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=348eae219e77714bab335e26e77122043dd50044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:47:a8:4a:d5:e4:66:a3:b5:54:52:4d:cd:
9f:22:b8:8a:fe:dc:a6:80:1c:f3:18:38:7e:7b:37:
f6:a9:b1:d4:1d:37:14:a8:ed:8a:86:43:c2:5a:76:
66:0d:9b:49:99:fa:2b:3e:c4:39:a4:49:84:44:63:
41:f3:51:7e:13:d8:93:c7:05:b2:50:af:d4:01:50:
95:99:81:70:e5:80:57:33:01:39:95:53:50:dd:b0:
fd:58:a0:24:46:bd:e7:51:76:47:e6:21:68:77:dc:
fe:d2:71:b6:d6:ef:dd:d8:7b:fb:9b:10:9d:a0:c0:
2e:d3:66:79:d7:cc:6a:49:cc:4b:a6:12:2c:a0:1d:
57:e8:e7:99:60:50:83:3a:70:f9:3b:b2:cd:90:6e:
7d:0c:54:49:31:52:c3:25:d8:ea:2e:58:59:b6:eb:
b3:c5:35:96:3f:97:6e:71:0c:3c:30:4d:45:ac:32:
23:56:56:12:c5:9c:7f:ff:f6:72:76:32:a8:ad:31:
5b:86:1d:17:30:aa:93:e2:06:57:a9:3a:2e:6f:32:
b5:5f:0f:4f:6b:86:8a:a5:d1:7e:80:55:01:d8:da:
63:e7:86:a6:69:1d:5d:a8:7d:3a:2b:ff:d2:6b:fe:
29:54:66:b0:e5:80:63:7a:49:10:2c:9f:4d:15:6c:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:AE:21:9E:77:71:4B:AB:33:5E:26:E7:71:22:04:3D:D5:00:44
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:01:cc:dd:ab:60:d1:e1:dc:01:bd:b0:b5:31:b6:ea:c7:64:
44:45:14:ff:5d:3d:c2:87:59:44:3e:93:88:72:92:fc:d9:f6:
cd:68:42:6f:19:5c:9b:79:34:d2:c8:41:fe:49:52:00:c1:f3:
47:1d:28:b2:a5:61:bf:d9:a3:4d:08:df:61:b8:d0:08:ad:cc:
12:0d:e4:37:29:61:d0:cc:18:a2:b7:c1:3b:b3:60:ee:24:04:
bc:03:8a:67:53:22:6a:aa:c3:72:f1:3e:3a:c2:52:8a:29:7f:
fb:6a:ad:00:5e:59:67:70:68:3f:5e:1a:a4:94:00:da:7a:1b:
7a:d7:0b:a2:8f:79:63:fb:92:d4:8b:61:12:c3:09:ad:6b:84:
12:f7:dc:be:bf:01:0e:b2:9b:35:68:b8:a4:ce:60:cb:1d:61:
dd:18:ae:9b:d4:46:47:2e:6e:83:aa:25:c7:a5:6b:1c:f4:50:
9f:63:2b:25:99:79:2d:81:3b:16:bd:b6:d2:29:6d:53:19:01:
2e:3d:ee:11:75:65:7f:ec:00:90:d2:34:a0:21:37:fe:bc:47:
35:0f:d0:df:15:9b:c8:75:4f:d7:c7:16:c1:6a:23:00:bd:85:
2c:81:0f:fc:5a:72:9f:e0:2e:98:6d:68:18:ef:21:9e:4e:24:
83:69:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:30 2026 by rpki-client