Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: ObSI1XXh+8KKrxPeuN1WRYHtbY60Aj7zyxXYBPXdxhw=
Subject key identifier: 34:47:FE:2C:9C:12:CC:93:63:E7:7F:F4:1B:8E:24:44:F3:B5:08:82
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019E1C46D86607D2047CACFA2D27EAB0F9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 13:01:05 +0000
Manifest this update: Tue 12 May 2026 13:01:05 +0000
Manifest next update: Wed 13 May 2026 13:01:05 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 8Z/y+JowROx4p+Xl9JwzW/1TUspEZnnzCKfQtbkNgOM=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d8:66:07:d2:04:7c:ac:fa:2d:27:ea:b0:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: May 12 13:01:05 2026 GMT
Not After : May 13 13:01:05 2026 GMT
Subject: CN=3447fe2c9c12cc9363e77ff41b8e2444f3b50882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:50:69:37:ee:17:e1:0b:54:e1:82:78:cc:
67:53:a3:8d:03:a0:95:95:8c:3b:39:0e:f0:32:e5:
39:62:ee:aa:b7:27:c8:63:3a:0a:6d:fe:3a:c6:ba:
05:a8:00:ff:ec:24:d4:76:32:21:dc:ec:1a:5d:dd:
9f:2d:3c:d3:a0:a4:8e:db:58:80:ac:63:72:f4:44:
48:09:d2:30:42:d8:e0:59:af:4a:e3:ec:83:d1:da:
79:3f:6e:55:84:83:0b:45:e7:a6:ed:0d:b6:a0:ce:
25:91:da:99:a9:bd:72:7b:65:3f:55:5e:8c:69:72:
69:ec:df:26:88:2a:0b:9d:8d:8e:93:55:90:a9:9a:
08:81:0b:ae:33:1b:77:47:94:f3:63:f4:23:2e:60:
cc:16:3d:74:a8:ae:68:cf:47:a0:cf:4c:25:3c:7e:
a3:d8:1c:93:44:a8:5c:61:69:35:80:a0:02:51:f6:
aa:69:0d:b6:ef:ec:97:a9:f0:7c:17:e8:aa:69:c4:
c8:a1:95:d3:7f:e7:ba:71:65:91:82:95:82:ee:72:
d9:51:fc:54:33:38:a3:4c:6d:da:83:8c:8b:c0:03:
88:67:cd:09:cd:4e:8e:98:a8:ab:ef:db:28:90:99:
cc:c7:81:7b:17:b3:63:7a:96:e2:c6:30:14:e7:2a:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:47:FE:2C:9C:12:CC:93:63:E7:7F:F4:1B:8E:24:44:F3:B5:08:82
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f8:cd:73:00:7f:6a:1c:c9:5d:a8:80:e4:b7:cf:93:e7:f5:
e4:a9:be:4e:a2:cf:b4:f6:d2:22:4b:71:97:75:dd:2f:d3:b2:
d8:20:b4:eb:fb:81:16:d5:60:c2:22:c3:94:cb:dd:30:b1:4c:
fd:63:9b:86:a1:7d:fb:64:20:59:d9:2e:1b:0a:41:8e:a0:8e:
5b:b2:be:cb:b3:b0:da:cd:e4:80:1e:3d:7d:35:7a:0e:f9:f1:
41:21:b1:66:49:e2:57:ea:9f:4d:6f:4a:1b:f4:27:d3:4f:7b:
84:54:71:c3:90:ac:a6:cc:be:dd:45:17:a5:13:56:44:0e:ac:
4f:e5:4c:6e:dd:dc:c7:18:a3:41:14:5c:4f:09:ee:27:e3:55:
4a:c4:a8:bf:42:81:a9:22:ed:01:00:5b:b0:af:e1:08:54:ec:
c1:fc:54:00:ba:03:9e:3e:89:af:cd:43:08:87:83:68:af:57:
1d:83:56:28:1b:46:53:4d:88:b1:63:d4:17:9c:59:7e:67:e1:
9c:24:bb:72:fd:fa:04:de:5d:0e:74:df:e5:32:e1:be:22:5f:
bd:e1:bd:83:38:5c:6d:c3:b5:36:08:6d:b6:ed:d5:5d:cc:5e:
e5:db:c5:26:72:6c:be:59:c2:73:73:4e:26:42:66:68:b3:50:
ac:28:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:12:25 2026 by rpki-client