Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: JB2YMlbKThbwXpoCt7FDGAepmMfVND5MbT5cEse5TQU=
Subject key identifier: AB:A1:6F:57:D6:D5:4F:CC:0D:C5:7F:AA:8C:18:EE:BB:DC:A4:2E:78
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01A00101D783BC54A02ABF59316C8857FA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:01:32 +0000
Manifest this update: Fri 14 Aug 2026 16:01:32 +0000
Manifest next update: Sat 15 Aug 2026 16:01:32 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 84iIZFFKGHoXKDtyxTLzMOsZ0ipitNYcggR/oJvPXho=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:d7:83:bc:54:a0:2a:bf:59:31:6c:88:57:fa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Aug 14 16:01:32 2026 GMT
Not After : Aug 15 16:01:32 2026 GMT
Subject: CN=aba16f57d6d54fcc0dc57faa8c18eebbdca42e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:94:4a:a6:10:27:21:57:94:91:10:40:0c:
1d:00:a4:5c:a9:bc:55:d7:b8:f8:2f:32:cb:ee:e9:
bc:b3:2f:33:c9:b0:9f:57:b1:68:ce:eb:f5:30:dd:
d7:e6:4a:43:87:80:ce:12:69:9f:3e:bc:fe:55:54:
aa:2a:bb:5c:31:72:f4:13:b9:91:0e:b2:70:a7:6c:
0c:ec:0f:b1:1a:c3:be:02:ec:9d:84:e8:6c:65:50:
ee:63:e4:8a:7e:b2:68:f1:30:bc:72:2b:45:e5:cb:
05:d1:2d:47:da:12:9a:b1:1b:13:22:4b:fe:01:d9:
7b:d0:a4:07:41:83:28:a4:8e:bb:5b:de:8a:f1:c4:
3f:b4:25:73:bc:13:19:a9:4b:5b:ca:36:93:de:0f:
e5:f7:05:80:94:62:22:d3:de:01:3b:91:68:62:b0:
cd:a1:c5:d3:28:b7:34:5d:69:3f:19:06:19:47:b0:
92:5a:c7:4a:6b:d1:03:db:ad:b1:31:a4:8d:d4:92:
4b:c0:16:8a:e2:96:d6:e6:c2:b6:f5:05:47:a9:08:
6a:92:dd:37:ee:7f:7b:14:32:1e:dd:64:1a:16:07:
48:9e:f0:64:af:cf:79:4a:21:57:42:e1:32:1d:ba:
6a:2c:37:6b:58:d4:1f:fe:a6:b1:5f:44:47:09:a1:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:6F:57:D6:D5:4F:CC:0D:C5:7F:AA:8C:18:EE:BB:DC:A4:2E:78
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:58:92:bf:17:38:b5:20:ae:84:33:22:a0:71:fa:80:be:73:
b7:84:9b:cc:1d:e2:23:7c:2b:1e:08:2b:ba:ec:01:a8:fd:61:
05:28:d1:16:a6:01:0d:e2:8c:6e:b2:97:07:d3:30:70:a8:2a:
12:8a:1b:94:98:59:c0:bf:83:44:2e:2a:69:9c:6c:a7:87:1c:
49:c8:d0:a6:5a:4a:58:61:d8:55:75:f2:4d:b2:bb:9e:ca:3d:
a9:51:1b:08:62:ef:5a:7f:27:b2:63:21:d3:52:89:0d:87:25:
e5:af:ad:ab:8d:0b:1b:4a:b4:4b:58:fb:71:23:90:bd:2d:50:
d5:14:cf:b0:15:27:d7:c1:95:67:73:71:15:f6:ae:ac:61:95:
18:6c:7e:04:62:d7:1b:c1:dc:0d:fa:44:1e:36:36:01:55:2f:
af:81:14:73:ab:5d:68:56:ff:d4:a9:a3:57:4c:ae:6a:1d:1c:
c6:50:1c:6c:90:b2:09:10:2d:1c:c4:b9:d7:e4:b8:96:17:69:
50:43:9b:c5:4a:a1:32:6a:7a:aa:e9:d6:ed:1b:51:30:a2:96:
f9:e4:c3:c4:df:29:9f:e6:d9:2d:bc:73:bc:1c:5e:3c:bc:d7:
e1:6f:33:a8:55:fa:03:71:5c:67:13:88:a9:67:12:f6:d9:c5:
74:93:49:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAdeDvFSgKr9ZMWyIV/pEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5
NGFhYzQwHhcNMjYwODE0MTYwMTMyWhcNMjYwODE1MTYwMTMyWjAzMTEwLwYDVQQD
EyhhYmExNmY1N2Q2ZDU0ZmNjMGRjNTdmYWE4YzE4ZWViYmRjYTQyZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ayUSqYQJyFXlJEQQAwdAKRcqbxV
17j4LzLL7um8sy8zybCfV7Fozuv1MN3X5kpDh4DOEmmfPrz+VVSqKrtcMXL0E7mR
DrJwp2wM7A+xGsO+AuydhOhsZVDuY+SKfrJo8TC8citF5csF0S1H2hKasRsTIkv+
Adl70KQHQYMopI67W96K8cQ/tCVzvBMZqUtbyjaT3g/l9wWAlGIi094BO5FoYrDN
ocXTKLc0XWk/GQYZR7CSWsdKa9ED262xMaSN1JJLwBaK4pbW5sK29QVHqQhqkt03
7n97FDIe3WQaFgdInvBkr895SiFXQuEyHbpqLDdrWNQf/qaxX0RHCaHq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuhb1fW1U/MDcV/qowY7rvcpC54MB8GA1UdIwQY
MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt
Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx
LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFiSvxc4
tSCuhDMioHH6gL5zt4SbzB3iI3wrHggruuwBqP1hBSjRFqYBDeKMbrKXB9MwcKgq
EooblJhZwL+DRC4qaZxsp4ccScjQplpKWGHYVXXyTbK7nso9qVEbCGLvWn8nsmMh
01KJDYcl5a+tq40LG0q0S1j7cSOQvS1Q1RTPsBUn18GVZ3NxFfaurGGVGGx+BGLX
G8HcDfpEHjY2AVUvr4EUc6tdaFb/1KmjV0yuah0cxlAcbJCyCRAtHMS51+S4lhdp
UEObxUqhMmp6qunW7RtRMKKW+eTDxN8pn+bZLbxzvBxePLzX4W8zqFX6A3FcZxOI
qWcS9tnFdJNJLQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:03 2026 by rpki-client