Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: 3bcFRPLbnuMF9pVNFqIwig94up9Ei+Cpxztbdjci4qc=
Subject key identifier: C6:55:45:FF:D7:43:22:9B:4B:38:2D:A9:75:D7:66:57:2F:52:31:B0
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019E2FCDADA5B5C29099835BA5810DBB6617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 110E
Signing time: Sat 16 May 2026 08:01:08 +0000
Manifest this update: Sat 16 May 2026 08:01:08 +0000
Manifest next update: Sun 17 May 2026 08:01:08 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: 5mDLy+MT6UnvWbDJ/i8yO9SgE4CX1XtRAGHJN8jwSsU=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ad:a5:b5:c2:90:99:83:5b:a5:81:0d:bb:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: May 16 08:01:08 2026 GMT
Not After : May 17 08:01:08 2026 GMT
Subject: CN=c65545ffd743229b4b382da975d766572f5231b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:c9:5e:ea:f3:db:e6:c4:c5:ce:b4:12:44:
3c:2b:35:de:98:a3:41:e1:fb:fb:db:ff:b4:f0:e0:
a8:04:c8:4b:3f:e9:4b:de:cd:07:c9:4b:14:24:36:
9f:6b:12:47:95:86:2a:a1:36:d8:94:ee:d7:f3:4d:
69:64:4f:bd:df:fd:e0:ef:31:60:05:9a:69:01:60:
9b:67:0c:2e:11:65:21:2b:ff:a2:f3:46:15:3d:fd:
f4:f3:e2:9a:c1:92:d2:90:ea:9f:8f:a5:1d:c2:20:
11:1d:e0:0e:e2:6e:29:44:cd:92:fe:d2:98:63:4e:
fa:7c:2a:52:7c:c5:d2:34:e7:2c:a0:6a:b6:1a:19:
01:36:28:19:48:aa:37:84:17:fd:35:f2:62:bb:be:
87:cc:38:df:7b:10:ea:b8:3b:d4:56:01:df:57:cd:
22:a7:8c:70:36:99:53:33:f1:25:20:9f:d3:01:8b:
9b:7f:ad:3c:5c:aa:f0:49:60:ff:e5:18:a2:35:11:
18:de:35:a0:0e:6b:83:e5:31:2b:1f:19:ee:d6:59:
00:9a:15:45:70:21:ad:77:15:98:3c:2a:2a:c7:23:
7a:5e:ff:2c:ef:4c:09:a1:fc:7e:63:41:de:68:d9:
98:68:ab:dd:b7:9a:6f:dd:3a:52:a3:7c:61:1a:43:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:45:FF:D7:43:22:9B:4B:38:2D:A9:75:D7:66:57:2F:52:31:B0
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:93:2b:9d:7b:e9:3b:d9:73:78:76:91:c6:14:fd:af:f0:
65:c8:99:7a:aa:9c:b7:0f:19:4f:0b:df:fe:2a:69:d6:42:30:
e9:cd:22:f0:3a:e4:13:51:46:6d:81:4b:86:dd:ac:54:4f:e3:
cc:8c:79:fe:42:c5:9e:3c:cb:b1:ba:59:a2:cc:8a:ed:c7:6a:
7b:4e:c9:95:08:d5:58:97:a6:f0:3b:ff:db:b2:2d:89:47:36:
4f:c8:d1:5c:87:64:98:a4:59:5f:bf:aa:bd:cf:4f:01:f1:ee:
bb:58:33:a9:c0:c8:0e:91:bf:b3:d3:5d:8a:dc:83:aa:fc:7d:
40:d0:9a:b8:55:ac:4e:0c:dc:93:e8:e7:c6:35:48:af:60:14:
8d:5a:dc:35:7f:f7:7b:ee:21:0c:e3:f5:df:87:6c:c3:64:e8:
04:dc:b2:28:e1:94:f6:1e:ae:89:2d:18:2e:f0:1e:b0:cc:2a:
52:ca:9e:b7:dc:ca:8f:5a:44:49:ab:e4:8f:5b:aa:c4:84:eb:
34:46:4a:fa:f3:8a:25:fe:0f:60:e4:11:57:c3:29:0d:0b:d0:
e5:a7:a3:53:eb:2a:41:12:e2:96:7a:70:ce:b9:af:b2:1f:2e:
60:82:08:e5:23:b7:37:f4:8d:a6:c6:db:cf:3e:a7:4c:77:28:
7b:c0:66:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vza2ltcKQmYNbpYENu2YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjYwNTE2MDgwMTA4WhcNMjYwNTE3MDgwMTA4WjAzMTEwLwYDVQQD
EyhjNjU1NDVmZmQ3NDMyMjliNGIzODJkYTk3NWQ3NjY1NzJmNTIzMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6PJXurz2+bExc60EkQ8KzXemKNB
4fv72/+08OCoBMhLP+lL3s0HyUsUJDafaxJHlYYqoTbYlO7X801pZE+93/3g7zFg
BZppAWCbZwwuEWUhK/+i80YVPf308+KawZLSkOqfj6UdwiARHeAO4m4pRM2S/tKY
Y076fCpSfMXSNOcsoGq2GhkBNigZSKo3hBf9NfJiu76HzDjfexDquDvUVgHfV80i
p4xwNplTM/ElIJ/TAYubf608XKrwSWD/5RiiNREY3jWgDmuD5TErHxnu1lkAmhVF
cCGtdxWYPCoqxyN6Xv8s70wJofx+Y0HeaNmYaKvdt5pv3TpSo3xhGkPqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZVRf/XQyKbSzgtqXXXZlcvUjGwMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7+TK517
6TvZc3h2kcYU/a/wZciZeqqctw8ZTwvf/ipp1kIw6c0i8DrkE1FGbYFLht2sVE/j
zIx5/kLFnjzLsbpZosyK7cdqe07JlQjVWJem8Dv/27ItiUc2T8jRXIdkmKRZX7+q
vc9PAfHuu1gzqcDIDpG/s9NdityDqvx9QNCauFWsTgzck+jnxjVIr2AUjVrcNX/3
e+4hDOP134dsw2ToBNyyKOGU9h6uiS0YLvAesMwqUsqet9zKj1pESavkj1uqxITr
NEZK+vOKJf4PYOQRV8MpDQvQ5aejU+sqQRLilnpwzrmvsh8uYIII5SO3N/SNpsbb
zz6nTHcoe8BmBw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:13 2026 by rpki-client