Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: 1DohsRiwfBrOrgPL9HEZK7miKXusHr2RYVr/rpDWv+o=
Subject key identifier: 59:1E:68:06:C7:FB:42:DD:43:75:8C:47:AB:51:CE:B3:22:21:C1:9E
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 01A1DB01DBAB29ACCEBB3BE39502B9623270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 095E
Signing time: Sat 14 Nov 2026 17:01:34 +0000
Manifest this update: Sat 14 Nov 2026 17:01:34 +0000
Manifest next update: Sun 15 Nov 2026 17:01:34 +0000
Files and hashes: 1: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (hash: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=)
2: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: 7j0aqtTQL76x1DlhES/NmSVAelCWZIENASmBMkaYCZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:db:ab:29:ac:ce:bb:3b:e3:95:02:b9:62:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Nov 14 17:01:34 2026 GMT
Not After : Nov 15 17:01:34 2026 GMT
Subject: CN=591e6806c7fb42dd43758c47ab51ceb32221c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:4f:d2:00:82:ff:91:d7:59:38:83:79:d9:
ec:fe:18:61:b7:7f:ba:52:21:d4:b5:45:a4:a7:d9:
84:08:58:0a:f4:22:d3:ff:b7:0c:b2:15:f2:04:76:
5f:2e:b0:3c:97:15:5c:ec:1b:e5:ea:d7:d6:b5:4c:
b1:2a:3e:b8:f7:d1:38:97:15:45:4b:14:a6:fc:d4:
1b:86:1e:37:ba:0a:95:82:ec:25:5b:64:af:c4:c6:
51:4d:d2:62:85:3f:f6:6b:10:dc:a9:d8:7e:9d:15:
83:b0:12:74:fd:12:33:8c:ca:c1:38:30:ed:07:7c:
db:9f:03:be:62:87:42:e9:09:0e:06:d2:e3:22:61:
3f:fb:cf:7c:24:17:bb:ab:b0:18:e2:5a:fe:32:06:
bd:d5:57:c8:84:19:0e:6c:3d:85:83:07:21:bf:11:
fd:6d:ca:93:79:f5:b6:ab:0b:6a:9e:9a:27:94:96:
e8:dc:d5:bd:44:2d:cd:43:4a:ed:89:e8:ec:75:90:
d7:9a:d0:35:79:9b:56:d9:ea:4c:4e:dd:b4:df:c5:
f9:97:8b:8f:0b:62:f1:a2:9d:64:a4:c5:0e:f0:68:
1a:24:b2:d1:6b:35:d9:da:be:bf:6c:13:c5:d7:11:
fd:25:32:1e:11:b5:c4:fd:e3:9d:8c:49:59:b1:30:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:68:06:C7:FB:42:DD:43:75:8C:47:AB:51:CE:B3:22:21:C1:9E
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:b7:a3:c0:89:97:24:7f:80:19:53:7c:8f:70:c9:36:01:
24:05:3a:56:e2:7d:f4:c0:9b:56:34:fa:3b:16:95:43:ba:2b:
7c:43:70:36:cb:c0:d4:26:30:44:03:7c:8e:bf:4e:74:21:53:
da:18:fe:62:5a:36:ee:04:68:46:7f:bc:31:ca:83:84:b0:b5:
b9:ad:a5:c7:32:74:54:28:d1:36:0d:9e:4d:27:98:60:d7:44:
60:9a:d2:e8:1a:d9:ad:20:2d:4f:71:6d:81:d9:2a:5c:62:52:
9d:a4:0f:76:5c:62:57:91:44:2f:d1:34:74:65:83:cc:40:34:
bf:94:d6:6f:15:a0:7b:f3:e9:e7:ac:64:25:01:bf:46:a3:5d:
db:4c:9b:b3:37:13:02:da:ed:80:40:2a:a3:2a:6b:ce:cc:a5:
be:78:8a:db:9f:fa:59:d9:83:f4:70:1a:82:79:88:e6:db:20:
70:35:cd:a9:4e:a7:9b:4b:30:c0:2d:78:c1:5b:4f:44:42:82:
fe:0c:5f:21:b8:0e:f0:26:b0:d8:45:91:db:d0:c7:d1:e3:9e:
70:da:04:55:0c:21:8d:28:35:e2:17:4f:00:c2:24:a1:19:01:
23:a7:1f:25:92:6d:60:a3:00:9c:ed:26:3f:42:71:09:3c:33:
9a:67:c5:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbAdurKazOuzvjlQK5YjJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3
ZmIwNzcwHhcNMjYxMTE0MTcwMTM0WhcNMjYxMTE1MTcwMTM0WjAzMTEwLwYDVQQD
Eyg1OTFlNjgwNmM3ZmI0MmRkNDM3NThjNDdhYjUxY2ViMzIyMjFjMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjRP0gCC/5HXWTiDedns/hhht3+6
UiHUtUWkp9mECFgK9CLT/7cMshXyBHZfLrA8lxVc7Bvl6tfWtUyxKj6499E4lxVF
SxSm/NQbhh43ugqVguwlW2SvxMZRTdJihT/2axDcqdh+nRWDsBJ0/RIzjMrBODDt
B3zbnwO+YodC6QkOBtLjImE/+898JBe7q7AY4lr+Mga91VfIhBkObD2FgwchvxH9
bcqTefW2qwtqnponlJbo3NW9RC3NQ0rtiejsdZDXmtA1eZtW2epMTt2038X5l4uP
C2Lxop1kpMUO8GgaJLLRazXZ2r6/bBPF1xH9JTIeEbXE/eOdjElZsTC/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkeaAbH+0LdQ3WMR6tRzrMiIcGeMB8GA1UdIwQY
MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt
ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh
LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRu3o8CJ
lyR/gBlTfI9wyTYBJAU6VuJ99MCbVjT6OxaVQ7orfENwNsvA1CYwRAN8jr9OdCFT
2hj+Ylo27gRoRn+8McqDhLC1ua2lxzJ0VCjRNg2eTSeYYNdEYJrS6BrZrSAtT3Ft
gdkqXGJSnaQPdlxiV5FEL9E0dGWDzEA0v5TWbxWge/Pp56xkJQG/RqNd20ybszcT
AtrtgEAqoyprzsylvniK25/6WdmD9HAagnmI5tsgcDXNqU6nm0swwC14wVtPREKC
/gxfIbgO8Caw2EWR29DH0eOecNoEVQwhjSg14hdPAMIkoRkBI6cfJZJtYKMAnO0m
P0JxCTwzmmfFYA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:47 2026 by rpki-client