Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: k/bSN+VpdQ93diEk8d9v2YvWB3zByCuN6GiQU6hS5bE=
Subject key identifier: 3D:67:3D:B1:E8:E3:E4:4D:44:35:D9:F2:DF:B5:88:9F:65:EB:2A:98
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019F90FEDA6B44BB8DB891354146AB03FC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 22:00:48 +0000
Manifest this update: Thu 23 Jul 2026 22:00:48 +0000
Manifest next update: Fri 24 Jul 2026 22:00:48 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 4gwfXbA21b/1LKYPEhbM8zhZy8/1sPGMac4Ugzc9PTg=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:da:6b:44:bb:8d:b8:91:35:41:46:ab:03:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jul 23 22:00:48 2026 GMT
Not After : Jul 24 22:00:48 2026 GMT
Subject: CN=3d673db1e8e3e44d4435d9f2dfb5889f65eb2a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8d:74:5e:f2:ba:6b:91:b2:68:e0:57:ee:ed:
b5:83:8d:7d:39:fa:3a:9b:0a:bd:b9:d9:7d:07:59:
50:d9:ee:9f:0e:c0:1a:f4:33:13:b8:99:40:d4:8f:
0f:f8:20:94:4b:1c:06:86:81:4c:52:d5:7e:58:f3:
22:c8:78:12:fe:31:a5:7d:eb:5d:b9:f1:de:79:04:
26:d0:94:d0:51:86:63:e4:d3:d7:5b:a7:22:2d:35:
7e:13:6b:60:39:7f:7e:68:97:a2:bc:9e:7e:a1:a0:
4a:62:7d:bf:cc:e6:3b:6f:6a:2d:63:76:8c:a3:53:
59:a3:98:d5:9d:14:1a:ae:27:23:ca:cf:d6:85:39:
a4:ba:9f:d4:8c:46:41:e0:68:62:ae:f4:e6:12:b4:
ec:c2:c1:b7:23:61:6d:a0:f7:1c:26:b9:0a:ed:dc:
58:9a:03:ea:b4:d8:cb:27:a5:9b:fb:37:71:a5:85:
e9:1d:a9:1e:37:f4:f0:7a:8d:c9:6f:0e:a1:2f:f4:
71:4d:fe:33:ca:d1:52:3d:e5:ea:a8:fa:22:aa:f8:
8c:36:e2:ba:6e:49:23:14:d4:79:84:f3:43:b6:34:
df:ec:3e:f6:da:76:3a:91:ab:af:c9:d5:ad:1d:ee:
f3:80:5d:98:b4:45:64:99:d9:bb:e9:00:76:c5:23:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:67:3D:B1:E8:E3:E4:4D:44:35:D9:F2:DF:B5:88:9F:65:EB:2A:98
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:e5:ef:73:73:ac:02:57:73:0b:ae:c3:03:14:4a:72:d8:
52:65:9b:ef:97:65:30:ff:e3:2e:10:92:55:0f:8e:d0:51:84:
46:b0:3e:38:83:c2:ba:bf:21:9d:cf:ea:82:b7:18:b8:18:d6:
81:41:89:bd:aa:61:b1:ff:1f:4d:99:f0:16:9a:de:e0:2f:9c:
af:df:93:e4:fa:2a:88:94:f6:81:f8:0e:2c:f3:14:ca:3d:d4:
6a:20:4e:31:f2:b6:31:74:04:3b:00:31:93:eb:ca:87:f1:7a:
18:a8:3c:4f:f3:c6:77:dc:d3:da:65:51:0b:23:20:83:14:b9:
26:d8:31:d6:59:80:71:ca:60:e4:e6:b2:5d:67:dc:a7:4f:fd:
a7:89:42:80:c5:32:e4:9a:03:01:4a:50:ac:8e:f3:94:fb:a4:
b4:f6:d1:fa:42:aa:9c:e7:27:f7:c8:59:99:26:18:b0:29:94:
bb:f9:52:24:70:9f:ec:d6:51:67:4b:13:2f:a0:9e:b9:a5:0d:
b9:5a:86:ab:b3:91:17:c0:b6:bb:34:f4:1b:5d:04:11:08:ea:
fb:04:bf:57:f8:01:b2:ac:dd:83:9f:f6:a0:dc:83:f9:aa:61:
2d:cc:ba:ca:80:f5:06:d9:50:16:50:76:91:57:3c:5f:74:a3:
df:b0:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:55 2026 by rpki-client