Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: zq/URcOOEgHcPjP1gFVQ8QEEpNH03PLLsQosXaCLkKE=
Subject key identifier: 05:CE:69:34:75:FB:23:5C:7C:6E:FC:4C:6D:1B:21:77:20:5D:14:51
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01A08CB1C856B3A1FA150A94DD714AF6CF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 19B4
Signing time: Thu 10 Sep 2026 19:00:56 +0000
Manifest this update: Thu 10 Sep 2026 19:00:56 +0000
Manifest next update: Fri 11 Sep 2026 19:00:56 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: 9F1ugaz2RwpSdqrP5SDcNJsIo+os4Zu02xecJWh5xrw=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:c8:56:b3:a1:fa:15:0a:94:dd:71:4a:f6:cf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Sep 10 19:00:56 2026 GMT
Not After : Sep 11 19:00:56 2026 GMT
Subject: CN=05ce693475fb235c7c6efc4c6d1b2177205d1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:ff:33:bf:55:a7:cb:d4:c6:d6:a4:55:a3:
9b:10:ad:27:c0:cd:58:2f:6b:70:33:9f:60:5b:3d:
fc:19:7e:de:93:d7:df:d6:7e:e4:f7:aa:bf:ba:04:
fc:3b:e9:fa:a8:63:10:f3:65:5c:63:8a:7f:c3:a7:
8a:55:29:7c:47:8a:a3:9b:6d:74:4c:fe:25:18:e3:
59:4e:da:0d:c9:4a:a7:4a:4a:e6:ba:9f:3e:c5:21:
31:0b:bc:11:c6:b7:c5:4e:36:cc:ed:fa:14:90:49:
51:8e:b7:eb:dd:35:92:ca:73:fa:37:40:31:0b:5e:
15:9a:3b:f9:0a:ec:40:7b:7c:e5:43:a0:52:87:76:
17:14:ca:de:02:c4:0c:b2:76:8d:b3:3e:c2:a3:3f:
2b:17:cc:b2:56:46:37:4d:19:54:2c:98:72:5d:de:
5f:c6:23:ce:57:1e:f7:f5:4c:a1:44:2d:73:b8:06:
fb:8d:20:12:7a:3a:56:d6:23:fd:4f:85:84:c8:6c:
28:7e:df:37:70:d3:a6:67:33:9a:46:24:e9:d6:55:
f0:8a:0f:73:9f:e0:5e:50:0a:e7:b5:38:f8:3f:1f:
62:5f:71:af:1f:46:cb:d7:ec:a2:1e:01:d8:49:08:
06:e6:6a:d3:62:15:fc:6a:bb:20:30:5e:b8:99:6c:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:69:34:75:FB:23:5C:7C:6E:FC:4C:6D:1B:21:77:20:5D:14:51
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fc:8d:2d:34:72:a7:8b:c1:fe:af:a3:ba:34:07:0f:11:e7:
ae:d6:f7:c0:ab:c2:df:e0:6f:22:4e:9a:66:ac:64:7c:3c:9d:
ad:d8:22:8e:76:6b:1e:84:a1:32:86:d0:42:7b:6b:50:26:9f:
76:77:64:60:27:ec:4d:67:16:a4:f4:69:67:90:ee:ed:5e:2e:
02:4f:fd:6a:a6:75:a6:6b:18:97:6f:ea:59:c6:77:df:38:67:
56:ca:38:76:01:e4:ac:fa:3f:52:aa:66:2d:63:6e:e1:32:fe:
83:9d:ef:7d:36:c9:c8:3d:ec:cf:14:d0:dd:96:3f:10:a3:a7:
17:c0:81:bf:4c:e9:e1:54:4c:95:04:b1:5e:8a:97:e1:75:00:
21:8e:24:6d:ba:b2:dc:f8:56:b0:19:47:c8:79:4f:38:43:5b:
65:54:d4:d0:73:93:b5:d2:b1:e7:ab:9f:80:09:1e:e6:06:3e:
c2:6a:78:af:a7:53:24:0b:46:6c:b5:48:c6:7e:cd:5e:cd:87:
51:91:c0:f4:19:56:85:aa:22:80:1e:bf:d7:6e:73:35:d3:c2:
54:b3:10:89:33:cd:3e:16:2c:8b:43:78:39:45:c0:7a:0e:b2:
51:54:54:dd:b7:47:b1:ea:01:07:00:16:c8:3b:ed:e8:8c:cd:
d8:94:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:04 2026 by rpki-client