Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: vtdhsZy5mrGvGjifc1Wb44cb3FY7J7CKWn6LlVa4nOc=
Subject key identifier: A7:C5:77:A7:27:4C:1D:82:9C:21:31:2B:8E:64:FA:1A:2F:4B:94:91
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019CAB6B973A883242F1D4CB3E9F89B991CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: MeRgjjwutzEKL0LfZp5XlRLshaxFghUlkmJPptas/3w=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:97:3a:88:32:42:f1:d4:cb:3e:9f:89:b9:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=a7c577a7274c1d829c21312b8e64fa1a2f4b9491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:5b:70:04:33:e3:32:ac:14:5d:d9:48:b8:
92:17:bd:bc:20:d2:c3:c5:34:de:89:45:6a:34:94:
40:d2:c1:c9:9d:e2:49:f2:04:ad:a6:88:bb:c7:4e:
c4:af:b7:d4:84:ff:94:0e:6f:67:ac:23:45:e5:04:
b1:5f:ab:97:ad:64:4e:ae:c3:5a:7e:1b:02:52:9d:
55:11:4c:f2:d3:aa:b4:cc:f9:a7:c2:a1:61:31:36:
cb:39:d6:1a:bf:4d:19:e8:96:d0:07:f9:f0:3e:14:
77:fb:64:b2:6b:bc:9a:9a:b4:22:6c:77:49:14:4a:
a1:a9:49:bb:a6:b0:be:de:26:c7:e5:6d:f9:92:8b:
39:f4:80:76:d5:9b:1f:b3:d6:82:17:bc:6f:ec:97:
e3:4d:97:a6:ec:d0:70:0f:2a:30:74:30:47:08:ff:
63:47:75:58:78:1c:57:aa:88:bf:10:a0:c2:64:8a:
7d:41:01:90:15:b7:60:9d:f9:4e:c8:1f:d7:a1:1a:
31:2e:5a:69:62:3e:0f:29:0e:92:0d:cd:83:7d:c1:
0a:c3:8e:e1:0f:d3:82:c3:02:22:da:ee:b4:1b:29:
cd:9a:25:1a:26:3f:4e:c3:d5:b0:d4:4f:d5:10:d5:
be:b1:39:5b:c2:45:4d:f1:d1:ae:4d:db:29:92:dc:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:77:A7:27:4C:1D:82:9C:21:31:2B:8E:64:FA:1A:2F:4B:94:91
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:c1:45:09:99:d1:2a:3b:77:d2:c0:69:79:cb:6a:2f:76:
7e:5d:12:6b:fd:a5:d7:81:28:f2:77:c6:0d:c1:4f:8c:c2:46:
0f:aa:16:3f:6c:0b:c8:b7:83:63:6f:5c:ed:1a:80:3e:c4:f0:
e9:d2:b9:73:63:6d:ff:5e:4b:7c:0d:6b:a9:e9:a8:db:96:e5:
9c:4c:55:93:94:a9:05:27:bd:52:bc:df:7f:a8:83:86:a8:7d:
55:24:41:91:90:93:ad:be:93:24:14:dc:77:d6:d4:67:90:f1:
27:ad:81:a7:c1:b0:2c:20:2e:ba:c1:07:77:1c:f3:37:12:33:
35:4f:bc:0d:ef:89:ea:a6:76:15:27:64:65:a9:fb:87:12:d9:
df:3f:c0:43:fb:06:ec:a1:9a:6c:88:13:5f:45:e3:ea:fa:1f:
18:5d:62:33:4e:6a:d3:51:be:d8:35:07:c3:63:5f:2f:ae:5b:
8b:7e:6d:93:dd:7f:89:78:a5:2a:a0:fa:54:01:71:6d:f3:0c:
32:cb:00:79:a5:49:a9:f9:f5:da:6d:23:b2:76:7b:35:ab:77:
87:82:c4:bc:0b:dc:72:3e:c7:56:d5:22:29:eb:d6:fd:3d:43:
88:c4:7f:1d:a4:d8:25:7e:1d:74:d7:a3:29:a7:cb:b9:41:4a:
62:aa:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:19 2026 by rpki-client