Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: ynNdokbaYJPkznqxNaXdIJR8DOGt51r8lF8qzrbLOCE=
Subject key identifier: A2:77:2C:D1:FB:93:F1:6C:36:A1:49:8B:30:8B:FF:E9:79:39:D5:FE
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019D389C478F188689E9C6EC58FB5B972CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 108E
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: MTspDaWlKBHI8bgjuj90U2j8LZBJ5RQ05AUSPDcWMw0=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:47:8f:18:86:89:e9:c6:ec:58:fb:5b:97:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=a2772cd1fb93f16c36a1498b308bffe97939d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:bf:89:04:c4:e1:35:1f:24:2c:e1:d0:1c:
77:ea:aa:49:ac:04:25:7a:1f:41:d8:fd:0f:2f:b0:
8a:03:ac:85:a5:42:70:ac:39:97:18:1f:f6:19:60:
a5:5c:18:e7:d9:ab:37:36:e9:c0:62:e5:a9:62:4d:
73:6a:06:b8:af:cd:90:1a:9c:16:ce:bb:5f:0e:2b:
d5:e3:c2:3a:91:fa:bd:c1:12:76:54:70:c7:7d:71:
96:39:a6:9b:a9:75:78:29:fb:9d:68:ff:34:8e:bc:
98:08:de:91:09:84:51:c8:4e:ba:74:4c:4d:3b:90:
73:92:7f:7b:0e:ee:be:fb:11:1c:64:08:e9:4b:06:
4a:41:81:c3:e9:da:42:89:6a:94:ab:ec:62:ca:bc:
78:a3:0e:40:18:30:33:0b:56:cf:8d:66:62:48:8d:
31:e9:c9:3b:7f:39:7b:ea:4a:fb:6f:82:d6:df:6d:
ee:81:60:7e:18:41:90:49:09:e0:9f:d2:de:32:b6:
50:20:28:6b:7f:3f:44:29:6e:e8:bc:df:c8:19:ab:
f9:31:bf:75:86:4a:cd:7b:86:cf:56:d1:2e:f5:b2:
bd:20:ff:a1:22:80:fd:ce:93:65:6f:ed:a0:58:67:
18:d6:56:fa:9e:29:4f:d3:5e:43:84:9e:32:ad:56:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:2C:D1:FB:93:F1:6C:36:A1:49:8B:30:8B:FF:E9:79:39:D5:FE
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:79:cd:7f:f4:05:7d:a1:c2:05:f5:8a:62:b9:22:44:e0:
f7:8e:d2:1b:1f:df:9e:ae:9e:23:1d:97:9b:82:b6:ba:d3:f8:
e3:fe:08:8b:c9:a4:ba:28:19:af:10:91:53:9a:71:b6:0f:1f:
5a:3e:33:41:ef:c1:28:9d:cf:d6:48:e8:68:44:d0:70:55:ec:
1a:8f:44:d3:f7:67:b4:fb:e7:f7:d6:08:5b:9f:99:7c:61:9e:
02:98:70:88:04:71:96:14:50:09:1f:4f:16:67:45:ea:2f:fa:
f6:ed:1e:63:6c:69:a5:ae:4f:b8:de:6b:11:26:4b:3c:36:5b:
8e:d6:75:86:1d:91:09:04:c9:fd:39:b7:3d:f0:8f:7d:ff:d7:
ec:c8:3b:7f:0d:c1:c0:22:83:cb:69:b9:1f:84:cf:6b:e4:65:
72:63:f7:70:bc:3d:42:8e:f7:44:f6:26:35:b8:1f:47:1a:09:
a9:d4:ca:90:df:29:7b:c3:5f:70:7e:43:ae:60:b1:f6:7b:8a:
d8:a5:6a:e6:fe:fe:f8:8e:ad:1e:5a:cd:6d:cc:09:52:63:bd:
fb:9e:e7:da:7d:d3:a2:32:82:65:50:0d:e4:62:9a:1a:c6:54:
42:bf:a6:a2:f2:97:1f:64:7c:11:28:09:5e:f4:88:b4:54:ad:
42:12:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:27 2026 by rpki-client