Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: epTl6bhgtN2nzmbxtoOgYj8IKHKp54Ns3i1Y1nPxDxg=
Subject key identifier: C0:F8:E1:B2:D7:EF:DC:29:00:FC:AB:2D:C7:E0:F8:6A:62:10:10:D7
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019EBEB62EEA523BCD07E86EEBAE7E64D87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 1158
Signing time: Sat 13 Jun 2026 02:01:11 +0000
Manifest this update: Sat 13 Jun 2026 02:01:11 +0000
Manifest next update: Sun 14 Jun 2026 02:01:11 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ZfBykax1UH2W0zVTZiuF8yusNp8MbRW9qMPxCdolABc=)
2: Ojae1ouaKFFFpJbsHiir3b5d2j0.roa (hash: EXi3DwcM0sJFI6Y/icQCPwpZmm7txU2RCMI6k5WdsgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:2e:ea:52:3b:cd:07:e8:6e:eb:ae:7e:64:d8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jun 13 02:01:11 2026 GMT
Not After : Jun 14 02:01:11 2026 GMT
Subject: CN=c0f8e1b2d7efdc2900fcab2dc7e0f86a621010d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:a5:de:b8:1c:a6:33:9c:76:22:21:9d:5e:
4a:75:d0:20:67:ae:38:10:d5:76:be:98:0b:27:48:
7f:22:68:d4:a1:49:54:6d:ad:13:11:45:b6:01:96:
50:af:25:6c:15:4d:a6:98:5f:f2:6d:61:ad:a2:db:
dc:34:08:95:3e:ab:5e:fa:8e:d6:11:b2:3a:72:c2:
35:9f:8e:29:fb:13:5b:2a:85:83:d7:5b:5e:36:de:
1e:c0:3c:9c:07:f8:5b:f1:d9:cb:26:3d:8a:90:56:
15:5e:28:76:9f:bd:49:39:b6:01:9d:94:00:d5:59:
8e:f7:8e:43:77:34:21:63:b2:85:15:9e:d3:46:e6:
4d:d2:98:85:e4:b9:d0:eb:36:62:b9:35:b0:95:64:
ba:f4:71:14:3d:a5:ba:e0:a1:e0:59:8a:43:6a:4c:
73:1e:43:ce:e5:57:a4:ba:fd:64:30:e8:89:68:ee:
a7:b8:07:16:6f:d8:a5:4f:aa:ca:58:5c:f2:c9:13:
ce:73:9a:6e:26:26:ad:be:97:e1:14:7c:14:2b:4f:
67:2a:59:fc:48:20:5e:40:45:df:41:6c:1b:f5:64:
0c:9e:4f:ad:f8:66:3d:69:7e:d7:c5:89:e6:56:6e:
ba:c3:a6:f6:0c:2b:27:3b:e4:38:56:ad:ba:31:43:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:E1:B2:D7:EF:DC:29:00:FC:AB:2D:C7:E0:F8:6A:62:10:10:D7
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:35:15:cd:1d:e6:fc:67:aa:45:6c:25:7c:c3:bb:f3:13:
1e:f6:e9:bb:09:4b:3d:d6:8b:55:93:ee:62:6c:fa:68:b5:cf:
29:23:40:2e:ec:75:f2:17:3b:2e:7d:1e:8b:ba:38:44:8b:51:
42:e8:e5:bc:06:4e:2f:4d:d3:2d:b7:27:7b:7a:c0:d5:49:74:
f8:4f:25:a1:76:c7:8d:d1:4d:b7:55:e8:6c:14:79:01:1e:3a:
a4:1a:34:7d:9e:f2:5f:c9:a2:3f:05:e2:36:67:ca:d6:a5:ba:
44:0d:39:ce:6d:a8:4d:b3:c1:b4:11:58:d8:f8:d4:d9:75:73:
4e:c1:5b:6e:cf:6b:57:b3:02:64:96:33:29:69:49:87:eb:75:
cb:85:5e:08:22:55:e2:c9:52:fd:51:c2:6b:61:3b:16:eb:f1:
a4:6d:af:2f:5b:9d:f0:bf:32:89:2e:4a:70:45:98:bd:b3:65:
c6:07:f1:86:b2:c7:23:be:ef:48:20:b4:8f:ea:26:d9:1e:3e:
e6:ea:11:8a:99:48:0a:67:dd:38:4d:a3:1c:66:3d:e8:62:e6:
64:77:d4:3f:4e:e9:8f:32:3e:2d:8f:ed:35:86:12:a6:bb:e2:
09:c2:b3:57:e4:e7:41:47:95:80:5a:f3:8e:b6:e4:32:71:5d:
7c:21:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:29 2026 by rpki-client