Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: q7AMUcMm8oSc1ynMP7UEoFplg/WMCZZ90zf2tNNCWeI=
Subject key identifier: D9:47:27:5C:38:32:06:63:76:FA:6F:2D:6E:9A:1D:3B:BA:60:8D:0C
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019DD19AA31533751E3F1ACF02FFDDA11D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 184A
Signing time: Tue 28 Apr 2026 01:01:05 +0000
Manifest this update: Tue 28 Apr 2026 01:01:05 +0000
Manifest next update: Wed 29 Apr 2026 01:01:05 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: oopQ1BqSi7TQrOMEcWTnqyQ5OfTAnQG0euy9Cz5eUFo=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:a3:15:33:75:1e:3f:1a:cf:02:ff:dd:a1:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Apr 28 01:01:05 2026 GMT
Not After : Apr 29 01:01:05 2026 GMT
Subject: CN=d947275c3832066376fa6f2d6e9a1d3bba608d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:bc:9e:d3:56:2d:51:d4:60:72:f9:da:31:
eb:76:72:58:77:ec:df:8f:0c:d8:3a:63:55:a6:6d:
cd:cb:a1:0a:2d:51:d9:06:aa:01:e9:69:42:54:1a:
96:02:bb:65:b1:b2:c5:6f:a4:66:dc:ef:5c:d6:04:
1c:3e:fd:df:83:1a:e0:49:f3:3a:9e:a8:54:bd:a0:
5a:2e:a3:68:1b:27:93:db:7d:c4:c1:4a:4e:6a:29:
1a:e5:af:eb:7d:35:04:ce:d9:77:53:35:0c:79:89:
b6:56:de:74:ee:9e:21:73:73:20:f5:66:d4:10:8b:
26:e2:71:53:37:43:ce:57:ec:95:78:25:1a:f4:d6:
46:ca:c7:67:36:f6:e3:b2:dc:e1:63:af:80:9e:8d:
2f:31:7c:35:2f:18:e3:04:24:95:d0:04:5f:47:e0:
69:16:57:4a:d4:1c:e5:79:82:0b:e3:43:16:2b:4a:
45:56:b4:40:1d:29:74:c3:c8:7b:1a:c7:f3:fa:28:
ae:4a:9c:2e:9f:68:dc:a7:6f:0a:d2:42:3b:f5:a6:
d9:7e:d7:f6:b2:28:f3:b0:f8:d6:0f:e9:57:e9:ec:
c1:aa:42:9c:36:bc:43:be:ef:51:b6:e3:15:6d:f8:
7f:81:f3:ff:46:98:b1:03:17:b5:52:35:50:cd:48:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:27:5C:38:32:06:63:76:FA:6F:2D:6E:9A:1D:3B:BA:60:8D:0C
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:70:ff:8e:96:e5:35:2c:87:1b:50:0d:f8:a4:91:32:1e:
f0:aa:aa:5b:7f:de:14:e6:ca:c9:6d:eb:d4:08:23:50:1e:3f:
62:df:d1:c1:3e:c6:cf:99:7c:05:9b:59:76:0c:34:ee:79:9e:
6f:05:1d:c3:39:74:e0:b2:1e:b5:a0:21:2d:e3:9e:f6:38:4c:
f7:0f:a2:7a:89:3c:df:cf:7d:6c:5a:29:88:ef:fe:9e:21:b5:
b1:e5:0f:d9:9b:05:5d:c0:5a:25:d1:e6:92:07:4d:f6:11:ff:
32:f8:21:44:d0:8e:88:34:d1:0b:94:26:44:1b:a1:49:a6:71:
27:24:4f:ba:bc:36:da:81:ad:7b:24:6d:4d:1f:21:e9:a6:cd:
d8:5b:d1:e5:70:6b:b6:d1:1f:7a:a3:fe:ab:83:7a:f2:72:1f:
ab:cc:9c:ce:de:c1:82:2b:ae:2c:4e:c5:f9:e6:56:84:99:49:
7c:34:1f:eb:a7:6e:07:06:b4:c7:3f:06:e6:f3:9e:c6:3d:63:
d0:e0:f2:94:4b:73:c1:65:c1:4d:37:bf:93:8c:e8:43:74:3c:
27:80:fd:36:e2:4e:bd:c6:f5:2c:1c:29:d5:f1:a9:f7:8a:6d:
01:7b:04:ba:f1:df:8e:1f:2f:98:01:30:f0:f7:b2:74:95:81:
24:10:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:05 2026 by rpki-client