Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: KneQx3w4Q2c+CqKVSdIOAebMPkG2u6gMBU3uBskYuAY=
Subject key identifier: CF:E5:92:50:F9:63:8C:CE:30:B2:67:51:96:F1:5B:AE:3E:A1:37:34
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019CE7EE56AB1A6FF3CD5FB0182C77C0F760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 17D1
Signing time: Fri 13 Mar 2026 16:01:22 +0000
Manifest this update: Fri 13 Mar 2026 16:01:22 +0000
Manifest next update: Sat 14 Mar 2026 16:01:22 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: odNsjYRrS8lrFipANonHMbSbqoBFQoq8OSclUVGGI4E=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ee:56:ab:1a:6f:f3:cd:5f:b0:18:2c:77:c0:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Mar 13 16:01:22 2026 GMT
Not After : Mar 14 16:01:22 2026 GMT
Subject: CN=cfe59250f9638cce30b2675196f15bae3ea13734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:49:f1:a3:0f:c0:6e:00:d6:41:4d:30:fd:
05:eb:91:8a:e4:2e:97:fb:8e:e6:64:ac:0f:4e:19:
0f:10:9d:e8:ab:7d:69:29:fd:ea:72:16:0a:d9:ad:
88:62:54:da:d6:be:a4:45:73:91:0a:0e:01:4a:76:
8b:28:b2:4c:f7:52:68:5c:61:39:74:08:01:b2:f5:
53:2f:fb:1f:71:05:82:66:c1:d5:1e:c2:22:83:42:
df:47:a3:fc:51:8d:39:f8:12:86:75:fd:bd:0c:ec:
8c:52:9e:7e:d8:9a:ca:c5:31:ac:83:64:69:29:00:
56:3e:c0:7b:9b:b1:f7:d2:7c:ba:47:f8:3e:3d:8c:
41:c8:b5:3c:0f:9f:56:df:27:51:41:d1:ea:9a:4d:
d0:86:d5:db:e0:36:54:59:ce:9c:1a:e3:c0:25:ee:
84:b0:ef:3a:94:dd:d6:5f:95:a5:86:ad:7e:08:ee:
9d:1d:45:25:31:31:7e:a3:92:05:15:31:6c:16:06:
5d:b7:41:c8:bb:85:a0:38:48:78:bc:aa:14:d4:76:
1b:c8:fb:58:d3:d8:a5:08:e0:53:00:cf:20:c9:5f:
8d:cf:b3:39:02:e5:f4:39:65:6c:13:f8:95:e1:cb:
a0:23:cf:fa:ba:75:51:4a:a2:86:a9:93:3f:b8:07:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:92:50:F9:63:8C:CE:30:B2:67:51:96:F1:5B:AE:3E:A1:37:34
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:b3:51:dc:cb:1e:cf:28:a2:37:19:3e:14:80:e1:1b:cf:
32:93:38:0d:22:f2:0a:7c:a3:7a:66:05:b4:7d:cb:b7:25:cf:
4c:2f:e9:7d:a5:9d:f5:33:cd:06:37:2d:09:65:51:f8:a4:95:
da:f6:da:90:75:a9:91:61:c0:57:35:e4:4f:8e:88:98:d5:73:
0d:7d:94:92:2b:0f:75:f5:af:32:e8:6e:69:3a:d5:c2:aa:36:
27:28:a3:da:28:8a:34:da:d1:fe:7b:11:a0:73:20:5b:ef:c5:
1b:a1:f2:8f:70:a0:cb:e7:49:40:6b:64:10:0a:7a:e5:75:1b:
14:61:74:99:98:d4:0f:51:33:c9:02:45:19:06:4a:42:16:7f:
5e:aa:aa:cf:88:eb:66:e7:34:80:48:9b:7e:ac:fb:0d:76:0a:
2c:5d:c6:e5:cf:29:25:b2:9e:4a:37:27:c1:7c:e3:0f:65:0d:
2f:5c:6c:86:fe:31:88:73:18:de:07:fa:84:61:54:92:6f:b7:
5c:b3:60:c9:37:ad:98:06:e1:cd:b0:07:4c:01:78:5f:04:90:
c0:b4:0d:9c:8f:61:b5:15:1e:85:2b:dd:f0:f2:c4:7c:59:51:
a5:1e:d8:be:77:ec:52:d9:2c:1b:10:8d:61:a7:34:8c:48:97:
62:25:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:07:10 2026 by rpki-client