Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: L0RNHXuK/fuFEorTFsR1ZHwJBVxwO1FBFyRP/xrh93U=
Subject key identifier: 3C:19:C4:BE:9B:56:66:54:44:DE:95:75:DC:E6:6D:39:F0:87:2C:CD
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019D389C21E02C428D34A38B1EEA30208B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: jdu55hfCdiaUYXuqOn4ZdUDn4cnn+WjDByL0Ws5ljGc=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:e0:2c:42:8d:34:a3:8b:1e:ea:30:20:8b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=3c19c4be9b56665444de9575dce66d39f0872ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:5f:f9:fd:75:35:83:75:10:65:fa:a3:09:
1c:01:b2:fd:4f:03:21:93:ff:c2:20:fa:e4:3d:de:
fa:44:ad:c1:be:75:8a:a2:b4:e9:29:ac:1a:1f:c4:
b8:55:c3:94:b6:55:d2:97:62:22:12:ae:5b:ce:92:
1f:98:1a:1f:f5:e8:21:af:f6:fd:3c:36:f0:80:8b:
29:33:e4:2d:77:97:f7:67:26:79:ef:f6:31:9b:64:
20:54:80:d2:78:15:5e:78:9e:00:22:01:db:be:ad:
47:9d:dc:bd:07:64:81:7c:81:d0:32:9d:7c:9f:4b:
74:0c:13:4a:3d:4b:7a:08:7b:16:f1:7c:66:8c:15:
b5:12:db:d1:66:9e:6c:d8:43:49:2f:bb:a8:c4:e4:
5e:36:ca:1a:7d:7a:ac:6e:92:fe:f8:8f:5d:48:69:
52:70:76:97:5c:09:4a:51:4b:91:bd:1e:84:df:46:
7f:b8:2a:d7:a3:11:b1:d4:9e:d6:b3:7e:41:75:22:
c7:d8:25:c1:73:3b:e2:4b:58:ab:16:ad:82:cd:29:
2a:6e:97:f6:8f:85:f0:b3:55:d3:8d:bb:93:86:50:
aa:c4:a9:06:63:56:b1:ae:b2:92:11:30:02:63:fb:
0a:4e:d6:2b:10:c9:6b:05:bf:b9:a1:4a:e3:2f:9f:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:C4:BE:9B:56:66:54:44:DE:95:75:DC:E6:6D:39:F0:87:2C:CD
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:a3:5a:28:e7:89:74:cf:6a:6c:81:81:b6:9a:35:64:a0:
9c:f1:9d:43:42:00:fb:94:e8:be:44:ca:6c:83:fb:c8:a2:10:
3c:25:2b:aa:43:4c:10:d2:04:2f:6c:f8:39:b9:6d:52:33:a4:
53:13:98:12:68:43:d6:5b:48:6d:22:db:9f:3f:63:c9:ed:98:
a1:af:13:d9:20:14:a1:39:47:da:55:e1:a2:3d:16:c6:cf:2f:
08:36:86:04:00:6c:d5:e9:5c:05:27:e3:a3:76:6f:e9:ca:84:
93:33:d8:b9:42:6a:9b:a7:0f:0d:37:5b:08:a2:03:4e:28:41:
7f:76:5a:c6:a9:42:90:e3:4e:23:8b:da:e6:90:1b:c6:b8:cf:
66:9a:d5:11:0c:9b:c2:19:0d:f8:c9:bc:dd:6b:83:80:9c:9c:
de:db:81:f3:31:c0:64:72:37:76:77:17:a1:15:4f:13:40:c1:
32:f2:72:b1:d7:5e:5d:b7:fb:1e:0e:f3:69:74:8b:c6:ae:4c:
73:bb:9b:e1:6a:59:09:fa:8f:32:76:88:14:80:8d:8f:a9:bd:
e5:48:f3:4e:5e:d5:f7:1a:2a:45:29:3e:2a:14:57:2c:e0:e7:
be:ca:1d:7f:56:a2:03:65:ce:b7:1d:a3:1e:a7:28:59:0c:fc:
9c:a0:5f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCHgLEKNNKOLHuowIIsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjJkYzY5NDA3NjBiN2ZiYzJlYTQzNjdjYzUzYmMyMzBh
NjRmOWIwHhcNMjYwMzI5MDgwMDQ5WhcNMjYwMzMwMDgwMDQ5WjAzMTEwLwYDVQQD
EygzYzE5YzRiZTliNTY2NjU0NDRkZTk1NzVkY2U2NmQzOWYwODcyY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLNf+f11NYN1EGX6owkcAbL9TwMh
k//CIPrkPd76RK3BvnWKorTpKawaH8S4VcOUtlXSl2IiEq5bzpIfmBof9eghr/b9
PDbwgIspM+Qtd5f3ZyZ57/Yxm2QgVIDSeBVeeJ4AIgHbvq1Hndy9B2SBfIHQMp18
n0t0DBNKPUt6CHsW8XxmjBW1EtvRZp5s2ENJL7uoxOReNsoafXqsbpL++I9dSGlS
cHaXXAlKUUuRvR6E30Z/uCrXoxGx1J7Ws35BdSLH2CXBczviS1irFq2CzSkqbpf2
j4Xws1XTjbuThlCqxKkGY1axrrKSETACY/sKTtYrEMlrBb+5oUrjL58wmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwZxL6bVmZURN6VddzmbTnwhyzNMB8GA1UdIwQY
MBaAFAli3GlAdgt/vC6kNnzFO8Iwpk+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2Yt
NjU0MTk3N2Y2NWY5LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2YtNjU0MTk3N2Y2NWY5
LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwajWijn
iXTPamyBgbaaNWSgnPGdQ0IA+5TovkTKbIP7yKIQPCUrqkNMENIEL2z4ObltUjOk
UxOYEmhD1ltIbSLbnz9jye2Yoa8T2SAUoTlH2lXhoj0Wxs8vCDaGBABs1elcBSfj
o3Zv6cqEkzPYuUJqm6cPDTdbCKIDTihBf3ZaxqlCkONOI4va5pAbxrjPZprVEQyb
whkN+Mm83WuDgJyc3tuB8zHAZHI3dncXoRVPE0DBMvJysddeXbf7Hg7zaXSLxq5M
c7ub4WpZCfqPMnaIFICNj6m95UjzTl7V9xoqRSk+KhRXLODnvsodf1aiA2XOtx2j
HqcoWQz8nKBfdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client