Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: VuSEE5vWO6yxCp30oW0irs3/BkH97tIfNFUlaV2s5V0=
Subject key identifier: A5:AE:2C:66:7B:7F:40:02:D6:AF:D4:1C:74:07:5E:F4:53:D4:D3:2F
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019FA82B061AA49A65BE9B7C7C1449C64039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 10:00:19 +0000
Manifest this update: Tue 28 Jul 2026 10:00:19 +0000
Manifest next update: Wed 29 Jul 2026 10:00:19 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: uHAY8GiW7lcw2I+0wkf05o/6Tu5rApDqBy8aVSOu8qc=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:06:1a:a4:9a:65:be:9b:7c:7c:14:49:c6:40:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jul 28 10:00:19 2026 GMT
Not After : Jul 29 10:00:19 2026 GMT
Subject: CN=a5ae2c667b7f4002d6afd41c74075ef453d4d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:3a:d0:f6:20:fd:88:f6:46:24:a9:77:69:
dc:1f:52:75:ca:05:f7:74:76:04:3d:97:8e:00:2c:
55:b8:65:8d:47:31:fd:39:ae:15:33:e9:59:80:46:
a6:bf:c2:ff:7d:62:73:ed:20:67:c3:f5:97:60:06:
db:ef:ec:ca:3b:ce:4b:21:c3:97:35:da:af:a6:67:
ff:0f:1e:b7:d3:70:de:ee:37:0e:45:af:0f:35:91:
78:ab:b9:e6:d7:47:a8:67:c0:dd:6c:e4:00:20:83:
fe:70:2d:d3:bc:00:ea:76:9a:4c:75:47:6e:a7:cc:
c6:b1:88:5b:68:13:40:74:e6:76:25:28:0d:6a:56:
64:04:e8:a9:d7:4e:22:63:84:ac:2d:f8:15:b0:9b:
60:9d:0c:0b:d3:5f:5e:44:7f:e0:ce:c9:19:d0:21:
7d:24:59:ae:39:fa:82:58:ec:d3:36:f6:62:f5:3c:
e2:d2:8c:00:88:56:8e:d9:ed:b0:8b:1b:83:65:d2:
55:ed:fb:ff:b8:8d:47:f2:35:44:3d:72:22:85:c1:
08:eb:f2:11:2b:4d:d0:1e:9e:c7:72:a8:22:db:d5:
87:4d:ac:fc:b8:37:56:cd:cb:33:8b:92:2f:86:c3:
0d:8b:99:e7:b7:65:ff:fd:e0:9a:11:55:1a:a3:a7:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:2C:66:7B:7F:40:02:D6:AF:D4:1C:74:07:5E:F4:53:D4:D3:2F
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:91:55:cd:5f:8d:a0:2b:ad:16:43:92:e4:7b:6c:00:ac:ad:
68:0b:0b:0e:f8:a9:81:11:5d:f2:76:27:11:3e:16:b3:fc:d6:
da:ac:7e:93:e8:94:62:fc:2e:ad:49:fa:0a:47:4c:2e:e0:02:
96:af:78:01:7b:43:79:26:d9:0a:24:e2:99:80:7b:89:65:a7:
94:41:8f:38:3a:49:0e:54:cb:68:54:f7:4b:02:58:2d:08:64:
96:4b:bc:17:bf:1a:9b:31:2b:b7:e0:0d:e0:ad:39:b7:15:46:
04:8f:3f:43:ca:b9:3b:36:bc:d2:4e:30:94:25:79:9f:9a:55:
47:a5:54:4f:3b:60:1f:94:ac:c3:46:fe:03:d8:d4:86:39:33:
a3:a7:c2:43:d8:8d:58:b2:53:eb:d7:5b:9b:49:a4:cd:2e:f5:
3c:2e:65:93:c6:67:41:af:f9:5f:c3:e9:9d:a6:77:f4:65:bf:
59:06:b8:3d:6e:db:4f:17:14:e9:85:57:2c:00:8e:35:c9:ae:
5c:6f:79:3c:2f:86:1a:b5:cc:ce:41:1a:5c:c3:b1:6d:3c:52:
63:ac:42:b7:62:b1:4c:90:ac:7a:f8:a6:33:aa:5f:43:a8:a7:
2f:81:54:d2:33:78:44:1f:aa:5b:d4:86:82:63:4e:0b:c7:d1:
05:1b:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:49 2026 by rpki-client