Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: ul87ITfE0JhhgCbH/SdM6JOKuBV7KAIqQ14/j4tIb+I=
Subject key identifier: 9A:BC:D2:49:52:B1:79:98:65:B2:78:38:21:9D:39:EA:CE:D9:2E:5A
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 01A0CCA2D12E8986698D9DDD65BE4AED0D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 08D2
Signing time: Wed 23 Sep 2026 05:00:17 +0000
Manifest this update: Wed 23 Sep 2026 05:00:17 +0000
Manifest next update: Thu 24 Sep 2026 05:00:17 +0000
Files and hashes: 1: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (hash: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=)
2: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: dKplDymOOfCgpUJi8SJxAsGvSGwYeybp1d/Oi0p5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:d1:2e:89:86:69:8d:9d:dd:65:be:4a:ed:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Sep 23 05:00:17 2026 GMT
Not After : Sep 24 05:00:17 2026 GMT
Subject: CN=9abcd24952b1799865b27838219d39eaced92e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:6c:6e:1c:28:8e:3a:f5:d4:b8:18:6d:1f:
33:e7:bb:48:68:1c:5b:c3:2c:1f:e0:79:bb:b7:ac:
a4:05:cc:07:5e:a1:ef:db:1a:71:ac:2b:ec:c3:e8:
3f:96:11:21:74:62:8e:e1:d5:02:f1:98:c2:fd:b2:
ae:3a:ca:80:9f:31:48:69:98:6f:8c:cc:2f:21:ab:
1f:35:5c:be:6a:80:e1:73:05:f3:e7:12:d9:a3:64:
2e:1c:9d:c3:29:18:57:68:23:b6:9b:4a:f0:55:4c:
42:93:27:f7:4c:76:64:fd:60:18:12:0c:bd:f4:af:
37:32:9f:f7:2a:88:ef:9e:f3:7f:b7:7a:ea:10:69:
56:b5:df:23:5b:ae:47:5e:ec:ce:f5:19:cb:4f:6c:
56:84:cb:5a:32:1e:b4:85:8d:d9:9a:5e:7f:4d:15:
fc:be:37:20:f7:37:d7:59:1e:3a:e2:32:f9:71:40:
f6:30:90:3b:32:95:eb:b5:59:cf:75:41:b1:4c:cb:
1d:e1:ca:8c:9c:9d:76:40:a5:0c:21:2b:6a:37:3e:
2a:22:0b:d1:a9:79:f8:09:d8:a7:1d:6d:87:f4:12:
8f:41:8b:86:e0:e8:10:e6:93:f8:8b:b7:a9:79:49:
9a:60:b5:c7:04:bd:bd:f2:72:3c:48:d0:3a:1a:73:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:D2:49:52:B1:79:98:65:B2:78:38:21:9D:39:EA:CE:D9:2E:5A
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:00:97:12:68:e4:66:75:75:8f:b1:e2:7b:68:f4:2a:ad:
d0:7c:a9:2d:b3:61:86:41:c1:0b:d3:f8:b1:f5:66:5a:19:49:
1b:ff:8f:24:f3:0b:35:24:a2:22:d7:23:07:43:e5:1c:1f:6a:
0f:96:d9:c1:f3:53:08:41:2b:d5:8a:0a:24:5b:de:52:bd:06:
8e:e3:65:9f:f2:86:e1:3f:31:f1:a5:9a:ef:85:1b:14:f7:8b:
fe:2d:1c:90:92:0a:10:e1:42:fa:a6:a7:62:b5:a2:8f:e6:b9:
73:2d:b1:dd:67:29:6e:13:6b:24:f5:c2:c8:c1:1b:98:66:d8:
4d:e4:ee:01:99:7c:94:44:28:1f:f9:b5:47:2f:74:ac:49:7c:
42:a2:7d:e4:21:4a:a9:06:d5:71:db:3e:17:3b:78:8b:ce:6c:
d7:2d:53:08:30:0f:d3:f7:34:26:9a:be:da:2c:80:c2:b0:35:
5f:47:b7:06:c4:ba:15:21:bb:c8:cf:b0:1f:65:73:17:1e:ee:
f1:fc:4b:5b:cd:ec:d1:f8:a3:97:04:bf:83:1d:bc:1f:34:c6:
db:38:f6:8f:c8:1b:47:1f:16:83:19:9c:4f:ec:b2:a0:b4:1f:
42:22:c5:7b:38:c6:08:d6:d4:c9:0c:b3:da:9d:d9:9d:24:3b:
4c:8f:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:45 2026 by rpki-client