Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: 7mAsWjj413mqYQb7PaL88JoLmh/vPatzVJQrFVLiM+c=
Subject key identifier: 84:07:34:8A:14:1E:2C:47:82:B5:E4:06:04:4A:49:B3:6F:FE:B6:9C
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01A0CBC720922A652A357B4D22320689AA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 01:00:19 +0000
Manifest this update: Wed 23 Sep 2026 01:00:19 +0000
Manifest next update: Thu 24 Sep 2026 01:00:19 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: WRbCJB21Shd7hZ9Ji8mUvn8LENS7DpjuzUiCIt5w3hg=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:20:92:2a:65:2a:35:7b:4d:22:32:06:89:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Sep 23 01:00:19 2026 GMT
Not After : Sep 24 01:00:19 2026 GMT
Subject: CN=8407348a141e2c4782b5e406044a49b36ffeb69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:e8:69:81:32:71:fb:1f:8d:ac:a0:51:63:
d2:62:ff:b2:af:2c:ef:29:35:25:d1:e9:05:6c:5a:
57:a8:ec:7f:a8:91:bc:27:a1:b9:d1:f5:b4:f4:73:
4d:93:5a:af:1f:bf:03:c5:5a:e3:8a:e9:cf:14:73:
c6:4e:28:7d:51:92:9e:9e:cc:be:6e:7e:57:53:75:
0d:64:36:e9:d3:e6:79:cc:a4:6d:03:7a:16:a0:c5:
f4:85:2d:79:a1:07:0b:bf:ca:df:81:a6:a6:cc:61:
c7:ed:8d:b8:e5:1e:bd:be:53:70:05:09:66:6f:7a:
4a:ea:a8:02:85:09:ec:fd:50:d7:46:1b:34:0f:7a:
f4:57:b8:47:e2:65:c0:a3:e6:18:be:66:f1:d9:be:
fe:1f:ec:71:17:49:7d:02:f4:df:ed:0f:c4:61:e9:
5d:59:22:72:d7:40:12:19:7a:4a:d8:24:2f:68:68:
2a:59:3c:c0:d3:0f:d2:b6:46:4d:86:58:2a:14:a4:
9a:01:53:68:ce:8a:1d:e9:64:7d:08:cd:75:19:ce:
d6:a5:0e:de:6e:9c:20:c9:6c:30:2d:7d:e7:f4:63:
00:ed:db:4d:a2:0a:60:15:01:35:14:f2:1f:07:19:
17:ad:b0:8c:4b:59:bd:89:27:63:4a:d1:98:ab:ba:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:34:8A:14:1E:2C:47:82:B5:E4:06:04:4A:49:B3:6F:FE:B6:9C
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f6:af:4f:ed:e0:96:63:de:46:e7:9d:aa:f0:3c:61:0f:60:
b0:42:52:3c:95:33:20:b6:43:e0:b6:f1:39:9f:c8:4f:f5:12:
15:b5:b7:63:47:4f:62:ac:5a:0f:43:8f:0c:57:9d:5d:f5:c1:
8d:a1:63:c1:68:1b:e0:8c:cd:ce:c1:9b:9a:42:96:94:00:d5:
0c:9b:db:76:6a:13:d1:6a:73:9b:a9:41:06:7e:31:f9:54:58:
c1:7c:4d:5e:db:a8:08:2d:17:a0:22:af:4a:2f:0a:49:b6:b6:
63:23:f7:11:e5:46:b4:fe:c4:8f:21:65:cc:65:73:76:81:0a:
69:dc:7d:c2:0e:fd:e4:69:58:e1:69:e9:20:4f:67:99:19:29:
34:6f:47:75:79:eb:8a:91:3c:3f:79:aa:f9:f0:02:2d:b2:d7:
05:d2:40:6c:27:45:6b:bd:81:f2:12:aa:25:cb:72:0a:92:e4:
77:62:8d:a0:c6:68:e9:a5:01:4f:e4:08:36:ce:42:7e:78:35:
49:e4:43:71:ca:08:dd:70:1b:7f:a3:bb:b4:ba:ab:46:ae:c5:
78:eb:a6:39:bc:83:54:15:16:3a:c7:f1:08:9a:47:b0:66:9f:
dd:cb:29:fe:c8:20:93:1b:60:a2:97:c5:31:e4:11:df:fd:b2:
9c:ec:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:38:39 2026 by rpki-client