Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: jjuwSmljgegO0UoYX73bN+EakvSKtzXGD9f6DNLL6MM=
Subject key identifier: B1:1B:77:2C:68:86:91:97:71:B4:FE:39:29:7B:4B:49:39:FD:C4:EE
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01A0C82166A71972883E8863A8712493FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 08:00:27 +0000
Manifest this update: Tue 22 Sep 2026 08:00:27 +0000
Manifest next update: Wed 23 Sep 2026 08:00:27 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: igr7OSO8xoAmYKeCN9aoVUWq+EIalZjQmFCt+tmewDU=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:66:a7:19:72:88:3e:88:63:a8:71:24:93:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Sep 22 08:00:27 2026 GMT
Not After : Sep 23 08:00:27 2026 GMT
Subject: CN=b11b772c6886919771b4fe39297b4b4939fdc4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:6f:d8:f0:5f:d6:40:2c:b2:6f:81:3c:81:
93:5e:a6:1f:2c:ac:a7:86:b2:32:cb:a0:19:c5:5d:
d5:06:13:62:0d:31:4f:6b:ba:21:39:1d:46:04:63:
d8:d2:09:b9:0e:de:93:44:47:4f:d5:33:ef:ca:3a:
95:c2:32:c8:1a:c6:1c:23:8c:28:f5:66:9d:2c:db:
b3:6f:89:75:7c:d7:a4:61:ce:d9:11:02:e2:ae:ed:
4c:06:72:e4:b0:0b:25:f8:c0:7b:f3:a7:4f:72:ae:
78:ce:98:18:f6:87:ca:8c:40:7c:29:d9:bc:0c:19:
88:e1:80:b8:b8:59:ec:ea:97:de:3e:d9:ff:14:1c:
1f:7f:10:43:a5:4b:7e:2d:04:09:ec:37:02:26:c0:
3c:24:de:77:28:99:b3:75:43:ac:38:97:d8:62:7f:
f8:91:6e:55:05:43:cd:18:23:c7:78:58:5f:3e:c1:
2c:c3:ed:bc:17:cc:86:63:18:c5:4d:8f:1e:b9:75:
b6:b8:8f:ff:15:24:f5:d2:6b:dc:d3:6a:45:06:73:
bf:5c:79:e9:87:f0:28:26:2a:47:40:0c:ee:76:04:
1c:d5:d0:95:53:23:d9:db:93:70:3b:f5:c4:d9:3b:
78:38:c9:44:17:2f:43:66:b3:81:b2:fb:ab:3a:6f:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:77:2C:68:86:91:97:71:B4:FE:39:29:7B:4B:49:39:FD:C4:EE
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:71:2b:75:30:a1:f4:07:a9:44:0d:a3:22:2b:0d:38:fd:cb:
73:6e:83:d0:de:1d:d8:a6:07:f5:23:23:ef:0c:4f:ac:83:0b:
ee:8c:7a:05:2d:89:b4:60:e5:ea:9a:94:2d:62:7f:ad:88:46:
65:8c:13:81:8a:d3:94:b1:3e:97:b8:3b:41:96:0c:4b:de:e2:
83:45:fa:e0:0c:bd:9f:5d:ff:30:10:21:01:a2:0f:68:c4:12:
2e:9f:37:66:5a:c6:a5:0c:20:55:77:92:ee:6f:55:bd:bb:be:
7b:f1:4d:49:aa:21:44:17:13:f5:4c:35:ac:1e:97:fc:5d:65:
f3:2c:af:df:17:b1:33:97:9c:34:2b:c3:98:40:06:53:58:2f:
0c:af:9d:f1:a1:52:31:d8:6b:47:76:f7:47:ef:57:49:f0:85:
29:09:4d:20:f2:49:05:82:e2:7a:30:c4:89:58:90:74:c8:0d:
af:74:e6:a0:2e:6e:dd:d4:aa:f4:b5:5e:a9:b6:81:5e:aa:9f:
bf:24:a6:cc:59:db:a4:c8:39:e1:2f:ff:35:8d:5b:a0:38:34:
df:37:20:a3:21:73:78:8d:d4:99:72:44:53:21:da:d2:5b:97:
a4:29:3c:dd:d5:1b:a3:3a:c2:5a:33:32:91:30:21:5d:32:91:
5b:48:c8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:55 2026 by rpki-client