Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: btiD3cQnfvA7rpwCfypQaYvZ7an2YooGWtufJygzFoU=
Subject key identifier: 68:C6:02:2D:05:4B:63:79:B4:DB:57:41:D0:97:8D:57:40:A0:2A:52
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 01A0CFDB33C0827F3E4E771F9FDF371E1439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 126A
Signing time: Wed 23 Sep 2026 20:00:44 +0000
Manifest this update: Wed 23 Sep 2026 20:00:44 +0000
Manifest next update: Thu 24 Sep 2026 20:00:44 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: +mLHFxQsvp1VkN9kaJ2MP9/FHqd4qEUfEEyP+nh2BJg=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:33:c0:82:7f:3e:4e:77:1f:9f:df:37:1e:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Sep 23 20:00:44 2026 GMT
Not After : Sep 24 20:00:44 2026 GMT
Subject: CN=68c6022d054b6379b4db5741d0978d5740a02a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:84:15:15:fd:cf:06:d3:c1:f5:85:5d:23:
16:16:ed:04:b7:d4:6d:a1:db:47:ce:c6:b7:03:6c:
8b:c7:78:18:03:f6:ed:ac:a7:17:d2:e7:da:e6:34:
56:42:1f:61:cf:10:de:3f:99:61:00:42:0b:e4:36:
de:6b:15:bc:bc:ca:9f:d7:6f:ca:b1:0b:a3:6a:0c:
b7:4c:1c:43:8f:91:69:89:88:13:1d:f1:23:a5:48:
30:48:f3:d1:89:a0:78:c0:40:68:33:4d:5f:f5:8a:
4a:ae:f0:a9:ec:ce:2e:70:34:8c:82:a1:f2:c5:bc:
2f:c2:35:ea:1e:61:f7:0d:24:a7:d9:e3:cf:43:5f:
c8:04:50:e4:08:d5:81:4b:c5:e4:48:12:f2:9b:64:
5c:ae:31:d3:d6:db:00:69:37:de:66:f6:8d:f6:57:
61:7d:17:fa:60:6b:f6:08:11:d3:64:59:71:54:58:
47:ad:b4:40:5b:23:e5:81:64:bc:8c:af:34:d4:72:
b7:82:43:54:a1:f9:49:40:4d:35:47:88:4e:f0:27:
a6:6d:e7:66:61:6b:ba:3e:5f:e8:96:be:53:19:98:
7c:bf:0a:2b:4b:d3:5f:c2:53:91:63:0a:46:67:f8:
9c:35:24:40:4f:43:1c:72:21:f9:bc:d7:30:f7:bd:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:02:2D:05:4B:63:79:B4:DB:57:41:D0:97:8D:57:40:A0:2A:52
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f1:51:31:61:9b:ff:4c:d3:25:e0:39:f9:23:9e:4e:9d:7e:
f5:f5:05:d8:6d:ee:16:08:7a:68:03:a0:1c:05:50:55:38:0e:
dc:8b:f2:65:da:f8:e9:52:05:ca:bc:9a:cb:57:fe:bf:5a:dd:
c8:28:5d:c6:54:e2:f6:c0:51:ac:9f:73:e1:3a:9e:12:7d:f6:
5a:69:18:98:0b:1c:5f:d2:e1:61:67:f9:0a:e6:ed:6b:9a:a4:
c0:38:b7:31:3f:9c:52:91:fd:61:ca:0d:c3:52:48:20:d4:d5:
7c:f3:af:2f:28:ee:d5:9e:a0:ed:c1:a4:24:0d:73:09:e7:c5:
54:75:6a:3f:a9:52:1b:41:72:56:bd:08:de:90:0d:20:49:52:
91:1f:5b:b5:d1:a4:01:1a:06:52:e7:fa:ec:7b:3f:5f:cf:f0:
63:06:0d:34:3d:93:26:1e:92:e1:fc:bb:7a:7b:39:ed:07:4f:
2f:cb:a2:e4:bb:a6:07:a0:87:59:7e:fe:52:6e:34:e4:78:f9:
e0:05:20:c5:90:31:73:98:38:5f:da:4e:b2:9a:cf:3e:39:ef:
0c:73:ce:5d:b3:f2:e1:0e:77:00:18:86:60:d0:13:08:69:2d:
ab:db:76:f4:64:f5:e1:00:aa:db:ff:8b:41:cd:28:84:56:70:
d2:45:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:55:22 2026 by rpki-client