Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: tACVJAFDRDu5AHu46bC3K/bhVXZv1zW5ENE+MCHXGsI=
Subject key identifier: 72:6F:7F:7C:69:91:DE:6D:7D:CC:06:88:E4:F5:DD:22:36:F4:B4:73
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019EBB4671B78083FDB555CBC6693637D47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 18C3
Signing time: Fri 12 Jun 2026 10:00:16 +0000
Manifest this update: Fri 12 Jun 2026 10:00:16 +0000
Manifest next update: Sat 13 Jun 2026 10:00:16 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: FXxGYXay+AiQHaEd5m0hoGBJ/lh32z9VCmhH1or1nKo=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:46:71:b7:80:83:fd:b5:55:cb:c6:69:36:37:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jun 12 10:00:16 2026 GMT
Not After : Jun 13 10:00:16 2026 GMT
Subject: CN=726f7f7c6991de6d7dcc0688e4f5dd2236f4b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:c6:d2:e5:66:6d:18:8c:a9:27:c8:16:9f:
95:7b:a1:21:a6:86:62:c8:ec:a3:90:51:b4:6b:3c:
75:1a:fa:8b:79:0b:e6:0d:0e:fe:78:ae:f7:3f:35:
ab:cd:b6:94:a6:db:5c:d1:b5:bc:9b:15:72:d1:59:
cb:34:c6:98:9e:0d:93:12:86:5a:a0:b3:f5:09:d9:
6d:5a:26:e1:58:bf:89:d2:48:ee:60:3a:65:51:89:
13:da:f9:00:99:cb:02:1f:fa:99:41:ce:8b:ce:95:
d3:c7:24:3c:70:47:74:61:eb:be:b2:df:6b:44:bc:
10:1c:43:53:0f:2c:39:21:9d:00:e3:28:f4:d7:f4:
80:20:22:88:56:8b:8d:33:90:6c:5b:54:bf:44:15:
7a:56:2d:73:bf:b7:b5:58:56:e6:94:38:27:c5:b5:
10:6f:ff:ee:54:28:70:f2:02:74:99:81:25:82:f7:
d2:c8:4b:ff:be:11:86:69:61:f6:3d:62:b5:00:4a:
90:f0:64:2e:9c:ea:15:1d:5d:f8:d5:f5:67:9f:f2:
54:84:5c:5b:ff:dc:9d:e1:06:4f:b5:88:93:e6:42:
f7:b1:ea:5b:77:ab:15:c8:2b:ac:ab:ff:eb:69:4b:
fd:a2:ce:9c:7e:16:ab:f7:c9:b8:19:e8:b3:78:16:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:7F:7C:69:91:DE:6D:7D:CC:06:88:E4:F5:DD:22:36:F4:B4:73
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:c1:72:5d:a6:9a:5f:00:f8:1f:91:d2:36:1e:c9:49:e9:
78:44:8b:53:9a:5f:13:4d:80:65:85:43:bd:50:1b:98:9e:ae:
e3:a6:c4:ed:60:a9:41:30:a7:a2:d7:a1:79:b7:b0:4f:81:fc:
b5:64:12:b7:b6:55:8a:fd:5d:32:66:62:fe:01:6c:39:46:6f:
d7:a4:b6:6a:63:77:47:db:55:70:13:a5:9f:af:2a:5a:cb:5d:
1b:b2:4d:9c:99:e7:c2:94:a3:69:d9:fd:4f:b1:c0:bb:e1:14:
03:62:14:2d:45:82:27:f4:da:4c:0e:e2:42:d8:15:75:4a:12:
fd:ce:03:17:60:f8:1e:9a:06:f2:c5:ef:48:24:2e:d9:6c:02:
8f:c2:26:1e:0a:15:bc:c6:d8:e7:c9:f8:8a:b4:66:08:48:23:
2c:a8:df:e3:99:05:69:53:05:59:1e:45:f5:80:50:bb:8e:08:
43:71:e6:2d:45:33:19:9b:5b:2a:cf:56:33:71:a0:cc:a5:01:
d3:61:9a:70:02:6b:06:6f:48:bd:01:af:aa:7e:c0:c5:94:b6:
8d:6f:b4:13:72:f0:31:bf:3e:b0:34:9e:ea:1a:e6:3d:24:6b:
43:e1:e5:49:f9:ba:21:47:34:51:05:6c:4c:76:61:cb:ed:08:
9d:fe:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:17:17 2026 by rpki-client