Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: Ehf+S7UrNSjZmkCClPbdpjUqYJm4zJYsxEockCToLGw=
Subject key identifier: 50:BE:39:B6:56:D1:0A:E9:FE:70:C1:EE:4A:00:3D:F7:7E:1D:5E:6A
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019F178C4DBFF8C439439C9E66A9EF9AC216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 08:01:38 +0000
Manifest this update: Tue 30 Jun 2026 08:01:38 +0000
Manifest next update: Wed 01 Jul 2026 08:01:38 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: UlcKL8UPptWIKcHUfFTmKKg4ESVbyYMd1l1m+Wtuy3c=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:4d:bf:f8:c4:39:43:9c:9e:66:a9:ef:9a:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jun 30 08:01:38 2026 GMT
Not After : Jul 1 08:01:38 2026 GMT
Subject: CN=50be39b656d10ae9fe70c1ee4a003df77e1d5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:8c:66:34:d9:9a:aa:da:75:49:0b:47:dd:
d0:fa:82:90:0d:a5:7b:4b:6d:71:6f:e1:58:78:ce:
6c:b8:b3:ea:e5:99:d1:a8:01:1d:e5:c0:7e:32:48:
e7:5e:4b:d0:79:a5:5b:7d:5d:eb:f0:03:9f:86:18:
1b:5d:c0:10:52:68:ef:6b:c9:2f:78:55:6c:4d:04:
4a:0d:5b:7d:70:53:e6:0b:fe:c4:c2:2d:22:9a:f7:
9b:c4:bf:2e:95:d4:07:e7:70:c2:a3:cf:34:78:9a:
6b:b6:8a:f2:d4:77:9a:cc:96:03:07:01:24:57:3c:
bf:55:7d:dc:e1:d1:e8:97:62:df:1f:33:90:94:52:
99:33:41:97:31:a1:26:4d:2e:1a:74:f0:ea:bc:0a:
64:70:6f:b9:8a:99:11:83:4d:46:46:04:cc:bd:ec:
12:cb:9d:a4:2e:0d:99:53:be:e3:30:90:5b:37:61:
b2:e8:43:a3:b0:d2:57:9b:bb:17:b8:b3:78:68:fc:
f9:0b:f9:9c:68:8b:97:e5:41:80:34:50:b4:15:7c:
e5:d7:0b:42:82:f3:ff:dc:37:5c:4d:2b:77:5e:bf:
16:25:2d:ea:09:e0:60:5f:c5:86:00:41:cd:c2:2b:
c3:02:a4:82:f2:2f:e9:d6:9c:7f:b5:6f:70:e2:43:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BE:39:B6:56:D1:0A:E9:FE:70:C1:EE:4A:00:3D:F7:7E:1D:5E:6A
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b6:54:08:3d:b2:0f:50:01:1f:ee:42:57:49:a4:25:a9:be:
8f:9f:58:4c:69:87:4b:03:e6:f3:1b:b4:e0:bd:db:4f:e4:5b:
b1:8e:b2:48:f7:16:10:c7:fe:fb:6f:ff:67:86:1a:63:e2:e3:
8c:fe:98:5e:87:e9:7b:b4:a4:37:5f:45:33:52:b6:5c:bd:1b:
5d:2f:52:3b:fe:34:86:66:fe:b8:1b:c3:af:92:8f:35:2f:60:
9d:b8:79:85:5b:58:27:e9:ad:5a:e7:a1:76:d5:f7:59:7a:25:
2f:03:27:f2:db:e0:cf:7f:9b:2d:67:b8:75:84:af:4a:59:3e:
3e:20:e9:d7:d0:7a:c6:06:13:11:21:9e:c8:01:6d:ec:3e:94:
03:e2:35:f1:43:7c:96:07:86:5b:fc:70:b4:41:e3:36:f4:c3:
50:3c:07:c8:29:b4:84:22:1c:06:84:be:96:0f:be:2e:76:cf:
3d:f5:b6:1d:ef:69:1a:1f:93:e1:69:90:b2:66:d5:07:6b:6e:
4f:29:04:53:f4:d2:99:e0:5b:e7:28:a1:0a:79:cc:35:30:46:
2f:6a:ff:0e:ad:da:83:67:f2:a9:7a:43:4d:51:57:33:0b:aa:
cd:20:d9:a3:70:88:7c:5f:f8:b6:39:5b:81:66:07:b7:b3:b7:
27:3d:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:55 2026 by rpki-client