Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: P2OQdmaT0+wYWCoOUpEzCXxavW5vOMUiyngf1pNud7Q=
Subject key identifier: 24:0A:F2:10:EA:56:2E:B8:6F:56:3D:0E:CF:63:62:7B:F3:0C:00:B6
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 01A001DCE15454C728933D591360619CAF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 0869
Signing time: Fri 14 Aug 2026 20:00:47 +0000
Manifest this update: Fri 14 Aug 2026 20:00:47 +0000
Manifest next update: Sat 15 Aug 2026 20:00:47 +0000
Files and hashes: 1: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (hash: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=)
2: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: K//IsFQE6mrb6qxWDH0GxsPORLDSqpS6kZqaaGZMzuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:e1:54:54:c7:28:93:3d:59:13:60:61:9c:af:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Aug 14 20:00:47 2026 GMT
Not After : Aug 15 20:00:47 2026 GMT
Subject: CN=240af210ea562eb86f563d0ecf63627bf30c00b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:68:50:05:68:8a:68:e8:f4:ba:5a:7f:92:
30:68:3c:70:7a:19:7c:27:9a:95:3c:41:f2:58:98:
c4:30:55:88:c6:1d:71:d6:2e:be:f0:ed:ea:68:65:
31:11:0a:b0:ef:3e:23:df:1b:15:3d:9d:a3:87:57:
e9:30:15:6f:bc:ab:48:cd:c3:5e:50:00:7a:d9:d3:
2f:e6:40:05:3f:dd:e6:9d:f6:39:51:53:5e:f2:cd:
4b:3a:8b:6a:ef:db:16:ca:62:76:c8:c3:29:5d:1f:
1a:a3:2d:93:58:bc:97:74:87:e4:19:45:1c:94:55:
33:cb:a6:f9:85:ab:85:e3:94:2b:10:91:5a:07:52:
ca:ed:eb:d1:f8:88:98:c5:87:0d:38:25:0d:cf:6d:
a5:7f:d1:a1:1c:7a:2b:a6:5b:66:c0:53:95:5c:c2:
de:e0:71:a3:97:ac:a3:43:00:9f:a2:e4:f8:6d:36:
d4:00:0f:4c:74:16:ba:15:6d:84:cd:f8:b8:d1:40:
8f:74:11:41:57:b3:fa:40:16:13:3a:f4:40:f5:3a:
d3:08:7f:ba:49:e3:7c:23:b6:ce:b2:5f:d9:b9:6b:
ed:85:4a:94:08:3d:3d:c8:0c:a7:71:70:9f:50:8a:
82:99:99:fa:e2:d9:c3:54:d7:c8:11:44:d0:bf:eb:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:F2:10:EA:56:2E:B8:6F:56:3D:0E:CF:63:62:7B:F3:0C:00:B6
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3a:9e:9a:cb:75:93:c9:aa:7a:63:7d:96:1d:11:6b:8b:0c:
d5:a6:8b:44:ce:6a:3f:f6:87:24:63:f3:8c:b6:42:2d:1d:08:
93:95:f9:f3:30:2c:9f:12:9c:7e:78:44:8b:ad:8c:a0:5a:1d:
22:dd:0b:1a:76:f0:95:58:3b:48:89:fe:0f:e9:7e:24:78:61:
ee:ce:eb:68:44:08:58:dc:b7:bf:82:83:8f:20:97:9a:b5:85:
ea:2a:5d:cc:1a:53:3a:bd:b9:58:eb:46:49:c9:9d:d4:e0:49:
6d:9c:31:5f:71:7b:16:70:90:20:5b:a1:99:93:73:76:3f:1f:
89:64:bb:86:a1:18:3e:ae:77:00:ac:12:f1:72:f7:f1:12:a7:
9b:52:f2:6e:5a:04:ea:00:a0:b8:5a:5b:69:25:8d:e6:1c:d1:
79:37:5b:99:38:34:60:77:5d:47:97:34:de:84:27:91:d3:9e:
ce:c1:46:81:bc:61:d3:9a:8c:dc:94:93:ce:20:f3:96:5d:b4:
96:0f:26:1d:b4:cd:66:51:06:88:60:f6:24:ac:02:12:f8:90:
ee:8b:f0:ad:e7:1a:1c:dd:fc:15:b6:8c:64:bb:19:e4:91:4f:
8c:57:44:1e:f2:8e:47:74:31:89:63:c0:a2:56:1e:60:5d:5a:
a5:19:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:25 2026 by rpki-client