Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: dWp+fbQUEo544BNn56IM/ge9Y1m2ISkGsH0s8VkBWEw=
Subject key identifier: 80:D8:01:B2:86:3D:D6:F4:64:20:3C:BE:45:71:30:EE:F9:16:44:D1
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 01A13FDE29301B5139D34B9D6B8D62C903C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 12A4
Signing time: Thu 15 Oct 2026 14:01:26 +0000
Manifest this update: Thu 15 Oct 2026 14:01:26 +0000
Manifest next update: Fri 16 Oct 2026 14:01:26 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: j9+inAKcl5JcLA4X2zb0R5WDo8XtFUf2k4BFo55CAMU=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:29:30:1b:51:39:d3:4b:9d:6b:8d:62:c9:03:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Oct 15 14:01:26 2026 GMT
Not After : Oct 16 14:01:26 2026 GMT
Subject: CN=80d801b2863dd6f464203cbe457130eef91644d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:4e:25:6c:cb:d8:39:a2:d2:94:de:9c:a9:
02:a5:0e:8f:d2:d3:15:f9:8b:1d:8a:6e:57:d5:95:
9f:28:c0:d7:a5:c3:40:c7:f4:35:23:d2:50:67:90:
d0:bc:d2:80:2f:d0:dc:7a:cf:1c:62:1f:30:f9:f3:
87:59:bb:5a:17:44:b3:5c:af:5b:f2:1d:60:75:25:
dd:18:c6:e4:2b:cf:3b:8d:93:29:76:93:88:4c:f1:
47:b0:1f:b2:40:25:31:8a:1c:5f:e0:5b:96:db:06:
23:2a:6c:ad:66:68:d9:3c:6b:73:ce:4f:4d:80:84:
e3:f3:34:c6:73:51:6a:5c:c8:5f:e3:cc:41:9d:1d:
29:c6:f7:bf:64:ba:d9:8a:b9:55:b4:0c:29:cd:4c:
a8:65:6d:de:02:73:3a:c1:4e:b3:c5:bf:a1:12:5b:
81:26:34:bf:a1:9e:c2:98:8e:23:8f:ee:5e:82:7a:
5b:70:40:6f:d6:df:14:26:a1:81:0a:6c:65:9b:a0:
59:ce:19:3e:da:5c:c7:79:4e:49:2a:95:88:97:90:
79:08:d0:97:72:97:0d:8b:54:a3:13:2d:25:5c:6e:
df:b7:74:00:3f:18:71:19:fc:6f:82:9e:7d:ba:96:
c0:f7:20:0d:9c:c0:89:de:8b:4a:53:09:b9:6c:ab:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:01:B2:86:3D:D6:F4:64:20:3C:BE:45:71:30:EE:F9:16:44:D1
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:78:8d:02:a2:10:2a:ce:6a:e7:0e:7d:ed:2b:10:54:a3:
96:c6:8b:e3:c7:91:42:7d:0b:ad:c8:6b:b3:0f:4d:04:1b:16:
9d:81:cd:c6:12:8b:e0:db:46:be:f5:07:cc:61:3f:cd:3e:6e:
e9:20:cb:f1:40:81:4d:47:d5:d8:69:af:4d:41:2e:2c:09:72:
f4:8a:03:64:1c:db:aa:61:0f:48:ee:4f:4d:9c:85:05:a7:29:
fd:e7:0d:00:6e:d5:e3:04:c4:25:71:34:54:6d:e9:d0:92:be:
6d:e5:df:a6:0f:61:2a:93:a1:1a:52:18:a4:86:ab:37:ba:c2:
e0:fb:28:8b:50:11:a2:e5:9f:cb:85:44:95:ca:86:80:e8:09:
77:49:c8:fd:25:cf:25:b4:fe:97:8c:f4:42:0b:89:ac:f2:41:
6f:72:7d:3b:17:7b:86:fd:65:7e:ec:94:44:66:80:13:9f:e4:
cb:c6:34:07:a9:f5:70:de:d7:72:18:ad:82:e5:a0:d9:ee:86:
b7:db:6f:c6:c3:25:31:81:6c:74:f2:a8:8f:9d:ec:ae:c8:25:
1c:49:a6:41:17:60:e4:3a:84:f8:eb:d6:f0:6e:4f:44:a9:5f:
45:89:ca:04:77:5e:3d:5e:c6:d5:60:3a:0a:b5:6f:5e:ae:86:
dc:31:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:50:59 2026 by rpki-client