Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: cc1JpRvGPVgiM9WjCdGdjZGUj5ulRvIkW7hzrlalpZs=
Subject key identifier: 9E:AF:5A:72:F2:5E:DF:9D:C6:2B:45:C0:70:9A:F4:22:A7:B9:47:39
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019D38657FEBCD565227FE4C6C4A1AC41429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: mjqvWJ66cgWeE8/UUDjyKYQqWycnF1w3Io7KE14x5BI=)
3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7f:eb:cd:56:52:27:fe:4c:6c:4a:1a:c4:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=9eaf5a72f25edf9dc62b45c0709af422a7b94739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:07:eb:f8:ec:87:c6:98:4d:1c:af:ce:83:
45:3a:0f:2e:04:ef:f6:af:bd:e7:0d:f0:36:90:4d:
7e:55:d1:73:5c:eb:88:00:9e:35:fc:d2:f6:bd:b4:
3e:81:a3:5f:7f:75:b5:45:03:78:50:b9:1b:1d:2e:
87:d3:9b:d4:e3:00:86:32:a4:6f:24:e7:ff:77:ec:
06:7c:9a:2a:ba:16:21:35:cb:2d:b6:ef:0c:0c:51:
38:41:15:d3:45:1d:59:6e:b2:28:df:d2:60:de:fd:
43:66:43:4f:86:f7:fb:aa:27:a6:80:d6:4b:1f:f1:
02:79:b0:e5:94:f8:c2:00:93:5d:c4:fc:19:ca:ca:
99:c2:20:66:e9:3f:34:ad:34:d2:c4:49:1e:c3:76:
fc:53:8f:27:50:5e:4e:02:88:71:c5:d4:45:46:91:
ff:26:7c:d5:5b:90:e1:a5:5e:9a:09:a5:db:d6:84:
96:c3:93:19:7a:32:32:ff:c8:f4:a9:47:7e:2d:e3:
62:20:c8:79:47:be:5a:43:a3:9b:cd:b3:e8:12:d3:
1a:c5:3d:32:22:9f:72:c0:92:82:d6:4f:ab:b1:70:
30:e9:e2:62:2a:1f:10:0f:7c:63:79:1a:df:4c:17:
e0:9e:6c:3b:2a:52:5f:5f:aa:14:1e:a5:d9:5e:f9:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:5A:72:F2:5E:DF:9D:C6:2B:45:C0:70:9A:F4:22:A7:B9:47:39
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ac:7c:f3:49:8d:00:ed:87:e9:67:e0:5d:cf:5e:bc:06:5d:
d5:d0:d6:ed:64:6a:20:27:ba:dd:f0:06:f1:8a:30:62:46:7c:
a4:2a:23:02:4f:9d:0d:e4:a6:78:2e:24:d3:d0:47:f9:16:94:
59:a6:94:2a:09:0b:12:22:63:03:9c:56:af:9d:0d:79:ce:37:
75:ce:69:ca:0d:27:81:39:63:37:1c:2a:c8:01:85:e6:1a:71:
44:6e:56:e2:a1:43:92:3e:4d:73:a6:b4:77:d2:32:bc:47:93:
48:1a:4b:51:5d:61:67:a7:6f:81:bb:a2:c4:00:6d:e9:15:bb:
f5:71:31:1a:67:b6:51:15:58:12:e7:5a:b8:8e:e7:b2:c3:81:
fd:31:a6:e7:c9:c2:fe:a2:0a:46:e4:00:aa:ad:71:66:7b:3a:
a2:a5:cf:9c:85:d6:84:c2:aa:a4:b3:13:3e:7d:73:6d:ad:64:
69:3e:e4:36:e3:c4:34:81:c4:c3:05:cb:42:86:53:86:75:71:
b9:5f:d8:2a:6e:1a:82:e1:15:31:05:d9:cc:1e:ef:34:4e:44:
d9:b8:de:a8:9a:d8:11:32:29:d8:d5:e1:dd:c3:70:54:52:b5:
77:14:a9:06:1e:ba:ca:eb:04:7b:9b:ef:5b:36:f3:2e:61:bf:
35:26:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:19 2026 by rpki-client