Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: et9qrDxuBazuoUtbA8Hgsr/Ho8X1eeUpiF9PJZ1Bj4Y=
Subject key identifier: AF:27:03:B1:13:10:50:20:60:05:2B:26:F9:9C:47:E1:23:62:66:DD
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019F913584A68C42FCF4A3D1C9519FD5F8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 11C5
Signing time: Thu 23 Jul 2026 23:00:31 +0000
Manifest this update: Thu 23 Jul 2026 23:00:31 +0000
Manifest next update: Fri 24 Jul 2026 23:00:31 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ZY781h31kVLWeccyOI6p43GJ6/eIH5rV03O97Zw/3ZI=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:84:a6:8c:42:fc:f4:a3:d1:c9:51:9f:d5:f8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jul 23 23:00:31 2026 GMT
Not After : Jul 24 23:00:31 2026 GMT
Subject: CN=af2703b11310502060052b26f99c47e1236266dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:9d:fc:35:f6:21:41:b5:74:a3:26:77:25:
b6:5e:18:05:f6:2b:d5:a2:da:ad:7c:c1:d7:c7:3f:
b8:97:97:f1:1a:21:86:16:2b:87:6a:81:38:e2:4b:
e4:88:f6:1e:ba:db:d2:80:14:66:dd:d6:06:d0:20:
2c:45:e5:59:9e:33:a4:85:13:a4:bd:c3:64:05:e3:
d0:55:d7:01:d9:64:22:5a:cb:85:8a:da:32:cd:01:
54:9a:91:8e:ae:c2:06:5b:6f:22:05:a1:81:c9:85:
3c:94:7b:d2:d0:1e:44:da:b1:e8:a8:db:a8:5a:e0:
42:2f:4f:63:01:dc:6a:20:f3:f6:17:38:f0:62:42:
8c:c0:66:f9:37:ef:5f:37:11:fb:8c:61:0c:52:a1:
5f:fa:6e:8e:b6:1f:31:b5:30:ae:a3:37:39:c4:78:
56:43:f7:41:61:dd:2c:86:f1:7d:ca:dd:8a:8f:b9:
11:af:62:b4:69:a1:4c:c5:f1:5b:cd:81:4b:11:8f:
af:99:73:1b:c2:99:5b:0f:b0:f3:50:6a:d1:16:34:
f3:81:75:98:6a:c5:c4:24:91:7f:9e:28:81:ec:53:
41:c5:1d:1c:50:c2:d6:ef:2f:48:a0:df:3e:25:35:
a1:fd:90:c8:33:0b:f5:55:47:37:76:9b:58:86:28:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:03:B1:13:10:50:20:60:05:2B:26:F9:9C:47:E1:23:62:66:DD
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:75:c1:a4:c7:9f:2f:f3:7c:23:e7:92:b8:4a:66:07:90:
75:02:7f:e7:de:03:7e:cb:69:aa:b6:5c:57:b4:af:99:75:ec:
88:4c:10:67:48:c1:9d:0c:63:a8:6a:7c:fe:da:cf:96:d2:5b:
f8:5a:3c:25:ef:36:61:df:76:be:ee:12:70:29:83:d8:5a:5d:
9b:e1:df:ee:81:ec:36:55:38:5c:b9:9f:af:c5:2b:4e:b7:21:
d4:68:4d:35:e7:7a:28:d1:6e:5c:35:a6:c7:d0:b3:db:f2:34:
06:83:52:13:7b:ba:28:84:6d:59:ed:3f:f2:4c:36:b7:a8:7c:
24:79:8f:34:5f:fa:ad:c2:19:83:a9:18:ba:cb:15:46:18:99:
e1:43:64:e4:48:b5:3f:68:26:d9:1e:80:53:1e:6f:b2:65:d1:
b2:81:bf:b7:97:e8:02:0a:b9:5a:1a:4e:c2:f8:53:01:98:00:
4a:60:bf:37:b0:07:f7:e2:73:0a:1f:47:11:92:49:26:68:f4:
ee:73:0e:08:a3:ab:2a:36:85:d5:0b:20:8c:b9:bc:8d:0b:2d:
aa:1d:0d:51:6c:86:00:51:d5:da:dd:15:48:d6:02:4a:e4:1e:
6f:40:69:38:bb:36:be:6f:f4:a2:cc:30:c1:d9:d6:cc:e8:40:
d5:8f:44:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNYSmjEL89KPRyVGf1fizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjYwNzIzMjMwMDMxWhcNMjYwNzI0MjMwMDMxWjAzMTEwLwYDVQQD
EyhhZjI3MDNiMTEzMTA1MDIwNjAwNTJiMjZmOTljNDdlMTIzNjI2NmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fud/DX2IUG1dKMmdyW2XhgF9ivV
otqtfMHXxz+4l5fxGiGGFiuHaoE44kvkiPYeutvSgBRm3dYG0CAsReVZnjOkhROk
vcNkBePQVdcB2WQiWsuFitoyzQFUmpGOrsIGW28iBaGByYU8lHvS0B5E2rHoqNuo
WuBCL09jAdxqIPP2FzjwYkKMwGb5N+9fNxH7jGEMUqFf+m6Oth8xtTCuozc5xHhW
Q/dBYd0shvF9yt2Kj7kRr2K0aaFMxfFbzYFLEY+vmXMbwplbD7DzUGrRFjTzgXWY
asXEJJF/niiB7FNBxR0cUMLW7y9IoN8+JTWh/ZDIMwv1VUc3dptYhiitCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8nA7ETEFAgYAUrJvmcR+EjYmbdMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6l1waTH
ny/zfCPnkrhKZgeQdQJ/594DfstpqrZcV7SvmXXsiEwQZ0jBnQxjqGp8/trPltJb
+Fo8Je82Yd92vu4ScCmD2Fpdm+Hf7oHsNlU4XLmfr8UrTrch1GhNNed6KNFuXDWm
x9Cz2/I0BoNSE3u6KIRtWe0/8kw2t6h8JHmPNF/6rcIZg6kYussVRhiZ4UNk5Ei1
P2gm2R6AUx5vsmXRsoG/t5foAgq5WhpOwvhTAZgASmC/N7AH9+JzCh9HEZJJJmj0
7nMOCKOrKjaF1QsgjLm8jQstqh0NUWyGAFHV2t0VSNYCSuQeb0BpOLs2vm/0osww
wdnWzOhA1Y9EkA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:58 2026 by rpki-client