Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: 7Zpiwma6wnA3InVlJscvTLuznvszy+XDmVzuYOuKu/Q=
Subject key identifier: D7:93:9A:35:88:9F:85:0F:DA:DB:E8:71:82:D4:DD:4A:99:B8:24:2A
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019DA4C197870F53160AE1A8A360BCD62263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 10C6
Signing time: Sun 19 Apr 2026 08:00:43 +0000
Manifest this update: Sun 19 Apr 2026 08:00:43 +0000
Manifest next update: Mon 20 Apr 2026 08:00:43 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: gnXdrSiuatVVHofRXu8+evHYqlAQOUBeE1lwtqJuVU0=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:97:87:0f:53:16:0a:e1:a8:a3:60:bc:d6:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Apr 19 08:00:43 2026 GMT
Not After : Apr 20 08:00:43 2026 GMT
Subject: CN=d7939a35889f850fdadbe87182d4dd4a99b8242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:e2:52:97:a4:50:f0:4f:fc:18:92:00:73:
1e:6e:d3:3d:ca:32:51:1e:b5:b5:a7:08:b4:f3:bb:
71:27:e3:78:7f:42:a7:a9:3c:2a:25:c5:66:0b:ef:
83:26:38:56:59:96:8c:8f:b2:dd:38:7b:34:c0:d9:
67:f6:0a:38:04:d2:9f:76:ff:d4:4d:6d:79:04:94:
28:43:72:7d:7a:79:a2:38:6c:e9:60:fa:25:5e:62:
42:c0:36:b4:35:c1:eb:26:8a:cc:78:fa:2e:8c:2a:
15:a3:b9:b2:17:8b:d7:25:8b:f7:a1:8a:e6:06:97:
b0:2b:6c:83:81:d1:f4:47:f6:5a:8e:3e:1a:7f:89:
52:59:8a:8e:85:dd:df:d5:1b:7e:4c:af:56:5f:da:
a7:aa:b3:e7:24:c4:ed:3b:32:21:ed:65:2c:50:1d:
05:83:34:73:67:b9:c0:bc:3f:d6:63:cd:a1:e7:16:
a6:28:0e:bd:2c:93:86:0f:dc:2c:47:0a:bc:73:56:
4f:0c:3c:00:e4:22:34:29:82:e1:29:4b:d9:48:bf:
62:9c:90:ee:76:e8:bf:47:bf:73:84:2d:5f:cb:20:
2d:8b:0f:d2:f8:18:e4:cc:ef:ff:f1:a8:c3:7a:5f:
68:cf:88:d3:c5:c4:bd:91:e7:aa:8b:49:f6:96:ae:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:9A:35:88:9F:85:0F:DA:DB:E8:71:82:D4:DD:4A:99:B8:24:2A
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:93:11:63:34:3c:00:ca:f9:39:c6:dc:e9:1a:00:e3:62:
08:6c:60:78:96:20:43:82:2b:99:65:60:9f:63:6b:50:46:7c:
ef:27:09:28:f5:fa:35:e3:70:81:4b:f1:5d:2d:85:fb:d2:ac:
37:1f:6b:77:78:f5:6b:ad:fd:98:01:ac:7f:11:03:f3:9e:36:
22:06:99:0c:d8:a1:aa:eb:82:20:60:2b:6f:e7:95:5c:2a:63:
cc:1c:32:93:c9:b1:56:75:f5:7b:28:a6:8e:cf:fe:fd:c8:0a:
a4:1f:56:5f:99:26:93:d0:82:6c:7f:20:aa:da:3c:04:02:fb:
02:2b:28:19:78:11:ec:b2:49:fa:a1:ab:f5:75:52:a0:c3:91:
c4:2e:33:f0:ca:31:7c:a9:3e:39:5b:55:e5:34:44:2d:5e:74:
f3:67:c2:05:e5:ba:a9:b7:91:c0:37:b4:23:1e:bc:47:aa:27:
fd:61:f7:f0:d6:7e:be:20:69:ff:ad:65:a5:d8:21:90:75:3a:
05:a4:58:85:2f:60:07:a4:8a:37:26:9e:55:e3:9c:9e:56:70:
cd:50:48:19:bc:53:e1:c9:b4:70:1f:61:69:54:1d:2f:7c:75:
04:fa:77:a3:33:52:25:47:31:d1:13:0c:e5:a6:37:54:8f:63:
62:8e:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:09 2026 by rpki-client