Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: E5UtnbBrMTafhOtqDl+vlWQXdpcD4fEHjAnhzpxHlmA=
Subject key identifier: C6:8E:3E:55:F9:B5:B1:0B:3C:43:2E:C9:E0:BB:77:2B:0F:2F:A2:D6
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01A17C292B4E529200C017266FB1D425C751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1A30
Signing time: Tue 27 Oct 2026 07:00:35 +0000
Manifest this update: Tue 27 Oct 2026 07:00:35 +0000
Manifest next update: Wed 28 Oct 2026 07:00:35 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: Y92veq96NpuNMDJqJA8Jx2M8KZJkaSlv238Huiw3Nd0=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:2b:4e:52:92:00:c0:17:26:6f:b1:d4:25:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Oct 27 07:00:35 2026 GMT
Not After : Oct 28 07:00:35 2026 GMT
Subject: CN=c68e3e55f9b5b10b3c432ec9e0bb772b0f2fa2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:90:ca:63:0e:7d:5f:c8:f1:cf:9f:3e:b7:
c4:47:63:22:c7:87:12:42:60:7c:df:c6:9b:b1:d2:
32:25:7f:5d:5f:13:3f:4e:d3:3b:d5:c5:73:99:eb:
75:c4:d9:69:16:6c:ee:f9:b6:34:9f:75:06:a0:10:
f6:37:5b:35:cd:73:79:1f:19:b8:27:69:6c:3f:92:
b5:4b:3a:7b:85:12:5b:44:1c:af:76:93:55:e9:d8:
9f:8b:28:bd:06:71:ea:6d:ea:ed:26:89:58:5b:c5:
37:68:59:2a:74:e9:49:78:80:9f:28:36:c3:c6:d7:
c8:fe:75:e4:81:ce:a8:15:e8:b8:84:5f:a2:40:8a:
f1:b0:1f:ba:2f:2c:cb:52:7b:93:8b:ae:e4:46:5a:
29:59:c9:05:ef:eb:a6:9f:f3:f0:8e:9b:fa:75:4a:
7f:c5:86:f2:2a:43:5c:9b:e2:6f:b7:7b:68:29:b7:
72:c6:5c:64:ca:e3:7a:45:b8:e5:f1:26:00:53:75:
97:eb:07:2f:be:45:2e:56:c3:e2:bb:dc:a5:ae:98:
8f:28:da:35:14:fe:3f:79:42:69:d0:d9:30:30:07:
d8:4a:98:27:46:da:8c:66:40:44:c4:06:20:10:d8:
01:8f:13:ba:26:37:72:08:5b:ca:99:b4:2f:fd:5b:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:3E:55:F9:B5:B1:0B:3C:43:2E:C9:E0:BB:77:2B:0F:2F:A2:D6
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7c:9e:70:91:1d:fe:38:4a:6c:a4:7f:b7:8f:66:40:fb:51:
69:ac:28:de:b3:5e:fd:b6:17:5d:ee:70:19:2c:c6:d5:70:be:
e3:da:b4:12:f9:85:6e:92:6f:20:44:15:a8:41:3c:73:86:45:
98:27:5c:2b:54:d7:8e:f6:1c:91:95:36:9a:5f:ab:9b:c3:e4:
b4:d2:97:24:36:fd:7f:8a:20:f2:95:20:6a:33:ec:f4:74:80:
c7:c8:29:0b:8b:c1:48:55:8b:33:08:2a:f4:ea:48:5c:60:5b:
88:c2:31:5b:97:2a:46:d7:92:cb:34:f0:69:19:d4:a2:e9:b8:
41:df:ac:6c:45:2b:00:35:18:f4:63:56:c6:a8:e3:28:25:eb:
9e:42:fa:c8:f5:1b:6f:47:64:18:72:30:31:d5:19:e9:4c:ac:
63:a3:c7:b2:72:e3:04:e3:4f:40:a1:99:e4:aa:8b:2b:fe:98:
00:7c:8a:73:40:79:98:9b:96:65:ae:e2:cd:0f:fc:18:3e:aa:
17:88:39:78:e9:b0:93:42:6b:d2:9e:a9:85:5f:31:b9:b1:4d:
e9:93:92:94:1e:51:5d:59:3b:99:a1:d2:37:83:df:a0:fe:ea:
ed:06:67:22:df:b3:d8:d3:5e:04:3b:18:6a:fb:6a:51:aa:f5:
ce:9e:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:27 2026 by rpki-client