Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: wHZp52D8OMRE/LY02UTzN82i4Sqc43cBxIM2c8aChzw=
Subject key identifier: ED:A3:D5:63:7D:17:E1:65:09:52:2A:2A:F2:1E:63:57:50:65:56:99
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01A1C10A554DB04698A22FEDE2A215AF2ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 16:00:42 +0000
Manifest this update: Mon 09 Nov 2026 16:00:42 +0000
Manifest next update: Tue 10 Nov 2026 16:00:42 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: WT2r1FzXFVFO91Y9GLp4ynYsvZ0xzWueDCLXzHjEp+8=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:55:4d:b0:46:98:a2:2f:ed:e2:a2:15:af:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Nov 9 16:00:42 2026 GMT
Not After : Nov 10 16:00:42 2026 GMT
Subject: CN=eda3d5637d17e16509522a2af21e635750655699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:ad:cf:55:86:ec:21:1f:8b:23:3e:7e:0e:
4b:a8:4d:bf:f7:b2:0c:d4:ec:e8:77:fd:fa:c5:b0:
e6:f8:af:53:a3:a4:2d:e7:41:42:59:3a:92:fc:7b:
2c:dc:c0:c4:d6:02:a3:d9:b9:6b:04:1d:2b:0b:f1:
80:5c:ca:70:f3:39:c3:4e:34:b2:29:6a:b8:30:83:
7d:da:e1:53:58:9d:f2:f7:75:31:47:89:0e:87:be:
dc:13:29:d2:12:9c:88:65:7c:81:c8:1c:52:76:17:
dc:61:98:72:b9:a7:23:7e:f4:98:69:56:fb:9d:df:
07:7b:68:88:41:9f:7c:f6:29:8e:6e:6e:12:11:28:
12:a5:0d:a9:6d:38:89:7b:5e:ee:10:14:6b:97:17:
88:e7:1b:74:11:7a:57:64:a5:f9:73:b5:2a:a2:b5:
62:89:56:79:8e:93:7f:25:4c:9c:4d:20:be:6b:ed:
1b:f8:14:dc:48:7e:92:98:a5:a9:c1:f7:fc:74:56:
8e:07:75:59:8e:92:b1:d5:10:cf:6d:af:03:91:74:
a8:c4:52:ce:87:51:a4:ef:4a:29:d5:f2:21:39:9b:
4a:0d:0a:99:13:2f:cd:b3:53:01:ee:84:60:ff:3c:
de:1e:ca:f8:6b:2e:0f:67:f8:75:88:b5:bc:f0:f2:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:D5:63:7D:17:E1:65:09:52:2A:2A:F2:1E:63:57:50:65:56:99
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:3c:40:0f:9b:59:28:dc:bf:0a:1d:2d:8d:5b:e8:d9:26:
e9:2e:a5:d1:30:23:51:f5:90:11:c9:66:a4:ac:0e:4b:36:7e:
0d:34:51:3b:5b:b2:ed:fa:b4:5d:8c:16:66:40:77:61:ca:3e:
fa:66:5d:66:6f:8b:ac:3d:3b:e0:6a:57:f0:3e:75:03:88:47:
a3:7a:75:68:18:1a:a2:a2:56:4b:12:5f:d2:40:9d:80:63:f8:
dd:97:db:86:40:bd:78:87:c3:26:81:64:74:67:1c:27:0e:9b:
b4:79:d0:32:3e:7b:68:1b:41:dd:a6:e4:ee:dd:b3:53:a9:3d:
18:6c:66:fc:ae:cb:c9:22:9e:86:e2:3f:7d:44:25:3d:a0:63:
0e:69:5c:0b:3b:10:d4:39:71:0d:42:0b:c7:76:88:6c:03:7d:
8b:00:b1:f6:2c:69:5a:17:83:d9:ab:e3:1c:c2:b4:1b:89:44:
75:a5:46:59:19:02:86:e6:54:c1:ba:8d:5c:5f:4d:05:a8:03:
9f:5f:ec:4a:61:7a:75:f7:1a:93:a1:53:ad:4b:07:0e:40:bc:
8c:88:45:67:63:58:5f:62:6f:f6:6f:2d:9b:a0:29:20:11:a0:
30:50:db:e1:76:9f:dc:5b:11:0d:e8:2c:68:8e:66:1e:14:4b:
53:ec:d9:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBClVNsEaYoi/t4qIVryq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5
NGFhYzQwHhcNMjYxMTA5MTYwMDQyWhcNMjYxMTEwMTYwMDQyWjAzMTEwLwYDVQQD
EyhlZGEzZDU2MzdkMTdlMTY1MDk1MjJhMmFmMjFlNjM1NzUwNjU1Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomWtz1WG7CEfiyM+fg5LqE2/97IM
1Ozod/36xbDm+K9To6Qt50FCWTqS/Hss3MDE1gKj2blrBB0rC/GAXMpw8znDTjSy
KWq4MIN92uFTWJ3y93UxR4kOh77cEynSEpyIZXyByBxSdhfcYZhyuacjfvSYaVb7
nd8He2iIQZ989imObm4SESgSpQ2pbTiJe17uEBRrlxeI5xt0EXpXZKX5c7UqorVi
iVZ5jpN/JUycTSC+a+0b+BTcSH6SmKWpwff8dFaOB3VZjpKx1RDPba8DkXSoxFLO
h1Gk70op1fIhOZtKDQqZEy/Ns1MB7oRg/zzeHsr4ay4PZ/h1iLW88PLeuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2j1WN9F+FlCVIqKvIeY1dQZVaZMB8GA1UdIwQY
MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt
Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx
LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnI8QA+b
WSjcvwodLY1b6Nkm6S6l0TAjUfWQEclmpKwOSzZ+DTRRO1uy7fq0XYwWZkB3Yco+
+mZdZm+LrD074GpX8D51A4hHo3p1aBgaoqJWSxJf0kCdgGP43ZfbhkC9eIfDJoFk
dGccJw6btHnQMj57aBtB3abk7t2zU6k9GGxm/K7LySKehuI/fUQlPaBjDmlcCzsQ
1DlxDUILx3aIbAN9iwCx9ixpWheD2avjHMK0G4lEdaVGWRkChuZUwbqNXF9NBagD
n1/sSmF6dfcak6FTrUsHDkC8jIhFZ2NYX2Jv9m8tm6ApIBGgMFDb4Xaf3FsRDegs
aI5mHhRLU+zZeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 01:34:03 2026 by rpki-client