Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: 7g66md0JU0pO7tcD8y3a7b7r7YQFGxNROApMc0kjWpM=
Subject key identifier: 48:25:38:C1:19:F3:D0:77:34:C4:1D:B0:DC:BD:9A:45:94:B2:DB:15
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 01A0C444EB208DE643678518AD6A584EBF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 1264
Signing time: Mon 21 Sep 2026 14:00:45 +0000
Manifest this update: Mon 21 Sep 2026 14:00:45 +0000
Manifest next update: Tue 22 Sep 2026 14:00:45 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: xg7Vp80i01Ywn9OiOMO3BJpUplTj8UFakyo8f4/DFV8=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:eb:20:8d:e6:43:67:85:18:ad:6a:58:4e:bf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Sep 21 14:00:45 2026 GMT
Not After : Sep 22 14:00:45 2026 GMT
Subject: CN=482538c119f3d07734c41db0dcbd9a4594b2db15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:f3:98:4a:32:98:34:f0:41:fd:8c:83:ea:
d4:ad:9e:ce:1e:70:79:1d:a8:65:82:74:3a:b6:3a:
88:15:d7:53:46:12:14:0e:37:8c:ee:03:8f:ca:66:
3e:fd:31:d1:14:38:fb:26:7f:67:a1:d0:37:a0:2c:
2e:80:35:0d:ba:90:46:cd:77:c1:e6:89:ca:8d:89:
a7:cc:26:64:85:1e:13:de:85:a0:e6:9b:5c:3d:64:
cf:f1:8b:f6:fb:8d:82:f4:15:38:38:b0:de:31:b5:
e0:54:66:77:ed:e6:aa:97:ba:cc:13:bd:1e:af:37:
f2:82:0a:83:1a:57:4a:74:f7:7b:b2:2c:96:d8:7a:
72:af:21:fa:a9:09:e5:7c:b4:cb:71:69:4f:0e:23:
f8:a2:0b:7d:ab:05:bc:ed:62:93:0b:a3:fb:53:9a:
51:10:53:af:b7:78:06:94:04:44:08:e3:17:fe:d0:
68:c2:de:02:a4:00:eb:5c:9a:2e:0a:23:76:70:d4:
08:f7:21:70:8b:af:e3:53:dc:13:6d:93:f9:29:36:
8a:82:45:0a:55:7c:7e:d6:ba:29:3c:28:de:10:6c:
ab:0d:d5:71:db:ad:86:2c:65:ec:44:26:3e:e4:7a:
78:e9:8f:6c:b6:98:9f:c5:89:f0:93:4d:1a:2e:93:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:38:C1:19:F3:D0:77:34:C4:1D:B0:DC:BD:9A:45:94:B2:DB:15
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:78:de:d3:12:40:76:46:57:dc:77:7f:e0:be:03:51:7c:
6f:f9:f0:cf:9c:be:0a:97:0f:fa:bb:c7:33:e2:f9:bd:ca:63:
91:06:8d:54:9e:35:a0:b2:7b:d5:b9:6b:60:ad:a7:7a:2a:72:
0b:9e:02:89:92:c6:7b:6d:e8:82:0f:39:19:05:04:2d:ff:0c:
ff:42:49:5d:4b:c0:81:44:71:bd:76:14:ab:1c:47:87:91:84:
8b:a9:54:d5:96:80:c9:1f:98:7f:c1:f8:c7:2e:b9:24:fb:3d:
b2:6e:4e:46:e2:da:2a:45:15:db:8f:b7:98:39:b6:a4:63:ba:
fd:11:64:24:c3:74:29:23:e3:37:e5:f7:39:e1:d2:b4:ee:d7:
c3:5e:0f:16:7a:03:7a:26:37:a0:91:33:4f:8e:39:15:70:a9:
64:cb:97:fd:8a:40:3c:36:b2:f1:e4:be:c7:6d:03:02:49:9c:
2c:20:ac:a2:0d:1c:7d:13:c4:3c:3e:36:2c:bd:16:dd:b4:a5:
b9:3b:ca:d4:5e:96:62:d2:76:e4:b4:0b:6b:90:1f:d1:30:28:
c3:30:f5:4a:11:37:0e:5e:a1:c2:43:43:a0:76:be:d6:3e:e6:
ad:a5:8c:bb:32:b7:55:6c:21:f1:7f:39:01:98:41:28:27:45:
90:f5:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:23:15 2026 by rpki-client