Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: f/YYYlAin2joPv4RMXvcgSBCvNpEIAj2cuCXDGYm93s=
Subject key identifier: AF:CD:15:7A:6B:78:74:9C:52:08:39:77:FA:19:0E:9E:CA:DD:CE:7F
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019D9B19C793DB8F11484A8733A9E1456A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 11:00:51 +0000
Manifest this update: Fri 17 Apr 2026 11:00:51 +0000
Manifest next update: Sat 18 Apr 2026 11:00:51 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: GCbiNeVltb42WPolForfgn6cZwUj4k1Nw0hx4RuLn/k=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c7:93:db:8f:11:48:4a:87:33:a9:e1:45:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Apr 17 11:00:51 2026 GMT
Not After : Apr 18 11:00:51 2026 GMT
Subject: CN=afcd157a6b78749c52083977fa190e9ecaddce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:03:3e:74:dd:c8:44:1f:ac:04:df:23:5a:
0c:38:ec:d5:e6:26:93:12:53:64:82:3a:73:2b:e8:
c0:fd:06:b2:b9:01:41:53:4b:d3:fe:bb:44:0e:48:
66:81:ef:42:bf:64:7c:0f:e5:b1:86:64:0d:12:3f:
fd:a3:de:e3:f2:6a:3c:df:53:6c:f4:4c:bb:51:60:
e6:4c:da:93:be:94:d8:e2:2f:16:0b:1d:ea:5f:de:
61:9b:00:43:ce:58:36:de:a2:f5:2f:17:ce:db:7d:
ab:0a:05:ee:7f:34:54:3c:d6:47:bc:12:64:5d:01:
1c:a9:42:20:54:2c:c5:e0:92:f8:e2:de:d1:5a:d4:
c2:3d:5a:9b:d7:9e:01:16:8b:0c:46:b4:6d:21:a9:
a7:dd:a9:a3:e0:be:9a:6a:6d:71:fc:30:ff:39:1c:
ab:8e:c9:49:7a:63:c1:29:50:40:59:c8:37:d7:fd:
a5:31:8b:5f:bf:59:61:2a:40:34:16:04:bf:0f:c8:
23:ee:5f:27:1a:b8:67:d5:ae:c8:66:ac:4e:b7:cd:
45:3c:18:fc:21:05:92:4d:56:59:3b:bc:6c:e2:e4:
83:70:24:38:d7:7a:b3:12:b8:8a:32:25:58:df:2b:
88:b3:12:f6:60:73:8c:49:fa:a1:4f:eb:98:0e:77:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:15:7A:6B:78:74:9C:52:08:39:77:FA:19:0E:9E:CA:DD:CE:7F
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:dc:8c:0b:34:5e:91:42:9a:f9:bc:fd:41:90:85:71:e7:
79:3a:55:8a:82:fe:00:e4:57:ee:ba:c6:f7:55:63:37:98:85:
8c:03:af:7d:54:15:8f:68:73:2d:6b:29:9b:77:99:dd:eb:31:
39:7f:e3:07:8e:1c:41:47:7f:77:bc:32:b4:e4:2e:37:9a:c1:
ba:6a:a4:2d:cc:41:96:9c:28:a2:0c:bb:f9:58:19:50:95:b9:
54:a4:ba:59:62:03:ad:7b:fc:ef:7f:4d:9a:8a:c9:ea:9c:3e:
8f:74:22:5b:27:b2:b1:c5:d5:16:01:54:27:76:f3:71:db:d5:
72:71:a5:76:c2:8b:cb:95:91:6d:ee:83:01:3e:98:80:eb:06:
1d:a7:db:0e:c3:4d:e7:5b:53:f5:80:95:56:1d:5c:61:e6:50:
5e:e2:c2:63:ed:a1:e6:1e:93:a1:58:e9:76:3f:0c:1c:79:55:
f6:99:60:7d:7c:90:71:e2:33:3e:21:ad:d5:c1:82:ee:a7:7f:
b6:0f:31:1d:97:e2:ec:c8:e6:36:0e:c2:26:ee:ec:5a:8d:14:
d5:f8:50:0b:b6:22:d4:ef:f8:9b:95:50:26:13:c6:9c:eb:a7:
2f:0a:db:e8:87:9a:9b:d0:1c:e2:86:82:b4:82:b9:0b:97:a4:
98:e5:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:05 2026 by rpki-client