Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: vMSuiWqdIt4DaWfiZz3J1qvdBDf08uK/OW/uOOxbo40=
Subject key identifier: 92:E5:69:FC:9E:9D:66:47:18:CD:A6:5B:5D:1F:C8:4A:F3:E7:10:75
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019F178BC3F1132CC85ADD76A5EB1176D040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 1186
Signing time: Tue 30 Jun 2026 08:01:03 +0000
Manifest this update: Tue 30 Jun 2026 08:01:03 +0000
Manifest next update: Wed 01 Jul 2026 08:01:03 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: hkSjeX1/gt9ucxjZsWqqo6ewru1YSzYWS2MDa+y8IhY=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:c3:f1:13:2c:c8:5a:dd:76:a5:eb:11:76:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jun 30 08:01:03 2026 GMT
Not After : Jul 1 08:01:03 2026 GMT
Subject: CN=92e569fc9e9d664718cda65b5d1fc84af3e71075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:72:3a:4f:5b:e2:9e:c4:2d:f6:49:70:f5:
66:d7:1a:bd:db:14:84:72:53:21:2d:80:0a:3b:f6:
fe:f3:cf:24:df:00:e1:dc:16:37:95:b7:68:e8:0c:
74:b7:b0:4f:3c:c7:02:69:1b:0a:2f:49:43:68:ef:
11:f3:94:91:62:b6:52:af:e7:84:b1:42:23:6a:be:
25:04:ad:6e:10:b4:55:ad:ff:fb:4a:2f:87:7e:78:
90:7b:d2:9b:17:73:80:fb:3d:3a:9b:fb:25:d0:c0:
1d:bf:0c:fd:4a:29:24:4d:81:10:6d:86:d6:f1:8a:
e0:d3:ae:50:87:15:84:8f:b6:97:2b:fc:30:aa:ae:
94:9c:aa:b3:79:d6:f7:f6:55:2c:bd:a6:15:80:cc:
40:15:4e:36:2b:5f:9f:8e:a1:e1:73:dc:c4:8a:bd:
8b:1b:df:cf:b5:14:9a:a9:66:2a:7d:ae:3d:5d:0d:
c7:cf:b2:a4:91:33:dc:ff:36:06:1a:53:01:05:b4:
09:80:0d:c5:cf:f8:9d:62:18:d3:73:cc:29:28:2e:
2d:54:98:53:f1:8b:14:ea:cc:9d:45:01:c1:dc:34:
f1:67:3e:4d:89:4e:d9:f7:85:5a:5c:ce:d6:f8:a8:
10:b3:b1:e4:3d:93:df:96:a9:53:0f:c9:e7:d2:5b:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:69:FC:9E:9D:66:47:18:CD:A6:5B:5D:1F:C8:4A:F3:E7:10:75
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:8a:4a:2a:a7:1a:aa:cd:25:16:f8:b4:5b:c0:4a:bb:bf:
ee:81:9b:64:94:89:5e:09:22:a9:ba:16:0e:52:e8:46:64:8e:
16:66:a0:eb:60:bc:60:6f:f3:fe:50:78:a7:d3:07:f7:29:ed:
bc:5f:97:a9:6e:8d:3f:3d:b3:4f:16:cd:56:ac:f8:67:41:7a:
e9:75:aa:28:b2:a4:38:81:c0:c9:92:a4:71:32:af:24:a5:46:
be:d9:42:8b:53:74:1d:89:78:81:ba:4d:25:a8:c9:80:32:74:
86:07:9e:c6:40:cd:f3:20:c3:bf:bf:8c:cc:f1:ab:6f:12:2a:
f1:4e:1f:2e:53:06:52:d6:59:97:6a:89:6b:c1:81:e5:bf:65:
9c:3a:64:a2:7b:22:51:72:cb:0d:2b:b7:0e:43:e8:d5:a5:a1:
a4:7f:e2:01:47:34:39:87:92:5f:66:0e:10:60:e1:84:e2:96:
e2:dd:61:97:9c:29:a2:8a:7e:fa:be:9a:91:c1:63:e9:68:02:
58:25:22:4a:0e:c2:6d:fa:1a:c5:10:b5:94:2e:85:a5:c1:07:
36:0a:83:c2:a4:f0:98:94:47:d9:11:6c:1e:39:1b:06:fc:b0:
1f:bd:89:aa:14:16:4e:28:56:6e:4a:6f:c2:56:28:18:25:07:
8c:79:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:04 2026 by rpki-client