Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: LlppNTMjXfA1/tCMM5TwowAWgMULwjG87v7W6g+Qi/Q=
Subject key identifier: 8B:5F:2A:A8:35:EF:6B:46:96:CF:C2:33:A3:1D:BA:13:4B:71:C3:16
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01A0C21FF293DCF6A6E0EF7DE4D6353604A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 04:01:08 +0000
Manifest this update: Mon 21 Sep 2026 04:01:08 +0000
Manifest next update: Tue 22 Sep 2026 04:01:08 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: nhlJEmBDL8fIlicDquOY9Tb6ZaKnCanh7upbAsEAyME=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:f2:93:dc:f6:a6:e0:ef:7d:e4:d6:35:36:04:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Sep 21 04:01:08 2026 GMT
Not After : Sep 22 04:01:08 2026 GMT
Subject: CN=8b5f2aa835ef6b4696cfc233a31dba134b71c316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:0d:7e:51:b6:56:86:09:9c:e6:a9:1b:74:
1d:49:be:d6:9f:66:c7:1e:d7:f3:8b:4e:79:ae:01:
f5:b4:f3:9b:f0:24:ee:19:d4:61:17:c2:94:f0:e3:
36:2e:e9:21:1d:a7:ff:fa:e6:4f:5b:e3:57:7a:b0:
f4:db:a7:89:c9:ca:9d:01:7c:c4:04:71:cd:59:4b:
ec:c2:fa:0d:77:5c:6e:16:51:ba:44:b3:77:0a:c1:
99:20:39:5f:a5:c1:1b:7a:42:f1:af:fb:c5:95:b1:
c2:ff:da:18:d1:d4:7e:90:26:20:58:44:80:2a:41:
be:12:99:70:9f:8e:29:1f:4a:ce:e1:62:99:ce:a5:
ee:84:20:74:d2:c9:66:94:0c:ea:b0:00:b0:c1:2c:
80:5e:79:63:0f:36:85:a9:1c:db:21:e7:3d:9b:84:
bd:f3:e9:a9:86:ab:d9:46:cf:f7:06:f6:83:b8:4d:
dd:7b:f6:8c:25:5a:20:4b:cb:f3:f4:3e:04:54:ba:
95:e4:dd:6f:68:54:3f:b8:4b:87:5b:10:12:55:ae:
7c:8a:29:06:66:89:1a:f0:e9:a8:70:28:02:4c:cc:
7c:37:4c:9e:05:3c:47:1d:c6:79:b5:1f:26:31:ce:
ec:1b:58:63:43:a9:bc:be:a5:45:65:2a:53:e8:62:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:2A:A8:35:EF:6B:46:96:CF:C2:33:A3:1D:BA:13:4B:71:C3:16
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:34:20:b2:10:eb:56:14:4f:68:4a:69:6b:6d:77:c3:60:
6f:2c:aa:57:ba:a6:9e:65:98:81:87:16:2e:55:6a:d7:c0:eb:
7c:1b:15:4b:cb:9f:c8:4f:18:6b:1a:8f:33:bf:03:db:19:a1:
1f:01:8c:26:05:f0:87:e0:78:b1:17:01:94:fc:27:3e:a6:cb:
23:5a:28:b4:eb:4b:c7:e6:a5:4b:04:46:74:be:97:e5:fd:e7:
5a:68:38:ac:e2:bb:99:25:0b:e3:11:3d:ec:8b:8d:fe:ee:3b:
74:1e:e4:56:d9:c0:10:27:01:69:d7:ea:86:d0:0b:9c:8d:e1:
c8:61:56:79:68:7e:92:13:0e:c0:9f:9f:15:22:af:24:0f:62:
9c:65:cf:59:c5:d8:65:0b:0d:e3:77:b9:db:66:e6:f6:17:d3:
d6:f2:99:50:22:c6:64:78:b5:30:ee:c7:89:e2:bd:25:79:f3:
10:69:62:2a:8a:69:5a:15:92:4d:19:30:d1:78:45:2e:ed:12:
e4:49:e0:82:fb:4d:be:7b:e1:c6:39:20:43:9e:98:1a:62:19:
5b:f9:89:61:57:7f:3d:4c:14:b9:6d:18:12:55:58:f8:f4:59:
74:38:d2:d4:83:13:27:e2:15:a0:b4:40:1d:d4:5c:df:e9:d3:
86:c6:4b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH/KT3Pam4O995NY1NgSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5
NGFhYzQwHhcNMjYwOTIxMDQwMTA4WhcNMjYwOTIyMDQwMTA4WjAzMTEwLwYDVQQD
Eyg4YjVmMmFhODM1ZWY2YjQ2OTZjZmMyMzNhMzFkYmExMzRiNzFjMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUNflG2VoYJnOapG3QdSb7Wn2bH
Htfzi055rgH1tPOb8CTuGdRhF8KU8OM2LukhHaf/+uZPW+NXerD026eJycqdAXzE
BHHNWUvswvoNd1xuFlG6RLN3CsGZIDlfpcEbekLxr/vFlbHC/9oY0dR+kCYgWESA
KkG+Eplwn44pH0rO4WKZzqXuhCB00slmlAzqsACwwSyAXnljDzaFqRzbIec9m4S9
8+mphqvZRs/3BvaDuE3de/aMJVogS8vz9D4EVLqV5N1vaFQ/uEuHWxASVa58iikG
Zoka8OmocCgCTMx8N0yeBTxHHcZ5tR8mMc7sG1hjQ6m8vqVFZSpT6GL1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItfKqg172tGls/CM6MduhNLccMWMB8GA1UdIwQY
MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt
Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx
LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKo0ILIQ
61YUT2hKaWttd8NgbyyqV7qmnmWYgYcWLlVq18DrfBsVS8ufyE8YaxqPM78D2xmh
HwGMJgXwh+B4sRcBlPwnPqbLI1ootOtLx+alSwRGdL6X5f3nWmg4rOK7mSUL4xE9
7IuN/u47dB7kVtnAECcBadfqhtALnI3hyGFWeWh+khMOwJ+fFSKvJA9inGXPWcXY
ZQsN43e522bm9hfT1vKZUCLGZHi1MO7HieK9JXnzEGliKoppWhWSTRkw0XhFLu0S
5EnggvtNvnvhxjkgQ56YGmIZW/mJYVd/PUwUuW0YElVY+PRZdDjS1IMTJ+IVoLRA
HdRc3+nThsZL1w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:21:09 2026 by rpki-client