Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: kFzlZffmnfNiqJqg3MquP4G7t6LxJ+Xq+lbAv14uA5s=
Subject key identifier: 07:EC:4D:1C:0C:22:96:B4:E7:E1:6D:BE:A1:51:1E:CC:7A:1F:F6:92
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019CA9B3C8321C5203FF0E2FEA977215C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 14:00:57 +0000
Manifest this update: Sun 01 Mar 2026 14:00:57 +0000
Manifest next update: Mon 02 Mar 2026 14:00:57 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: k+YbBsAmCHX8AxBi5cxsBgxErU1Rl3YYp4gbbGb27Cs=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c8:32:1c:52:03:ff:0e:2f:ea:97:72:15:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Mar 1 14:00:57 2026 GMT
Not After : Mar 2 14:00:57 2026 GMT
Subject: CN=07ec4d1c0c2296b4e7e16dbea1511ecc7a1ff692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:48:2a:29:8f:2a:e0:58:a6:4d:52:7f:a3:
02:21:0f:f1:be:b6:21:c7:32:49:3f:0c:a9:33:e6:
bd:59:be:c0:12:db:b9:a5:6d:86:94:69:6f:92:df:
e0:94:43:36:8b:6d:34:ee:b0:2c:fb:14:bf:92:d7:
f6:6a:0d:db:97:13:51:3c:2d:56:5a:29:4f:3f:73:
1c:c7:05:41:db:18:98:9f:6a:67:84:20:2c:43:9a:
f3:77:2c:bc:e0:0b:82:da:fd:67:e3:87:b2:d9:a7:
2c:6e:a8:a4:5c:40:18:e4:40:df:ec:75:62:a4:a6:
32:a0:40:d7:08:28:a9:ac:68:73:6f:82:40:a7:c3:
c4:92:d4:03:43:b5:4a:31:22:3c:98:d3:4e:d0:4b:
69:2a:a3:49:6a:04:23:e0:59:e5:85:a0:bb:1c:77:
d4:fa:67:e8:17:40:93:8f:17:b5:07:c4:fb:e9:9b:
27:b8:30:82:4e:4a:f7:35:c4:c4:60:c0:d5:b7:b5:
c3:32:99:af:b0:d8:13:a7:96:cb:89:64:46:d8:f3:
3c:93:b6:99:71:86:c1:bf:9e:c0:6a:48:19:c2:5b:
64:15:ec:b6:68:e4:4b:92:63:80:e4:cd:6a:47:63:
e2:41:4c:35:4e:68:0f:9b:f2:d3:ed:51:15:da:72:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:4D:1C:0C:22:96:B4:E7:E1:6D:BE:A1:51:1E:CC:7A:1F:F6:92
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ce:d9:45:7d:7b:4b:7a:6f:5b:01:4b:79:4d:49:8d:12:59:
51:56:b2:eb:85:01:35:3a:a1:6d:fe:d6:ea:97:12:a7:a3:f2:
de:96:90:5a:94:81:f3:7e:7b:9b:c5:2b:ac:ff:8e:37:bb:e2:
52:49:89:0e:da:c5:42:a3:5d:88:c7:1b:c0:16:1f:d7:de:16:
39:ff:63:0b:3f:3f:cc:82:a8:de:0d:7d:6e:68:5b:84:36:5d:
14:32:d5:3c:c5:c1:ca:37:c9:5e:15:f1:80:70:4e:d7:62:bc:
25:59:f2:85:5e:10:51:00:34:e9:85:b5:23:9c:89:63:b8:48:
41:59:01:9e:65:6a:05:53:00:64:30:98:36:4e:6f:5a:33:a9:
d3:47:81:63:7e:28:64:a1:56:d8:29:1c:77:97:64:21:c4:9d:
a4:ee:fd:78:9e:5f:6f:f0:df:1f:47:a0:c5:12:f8:e7:22:67:
56:a9:24:31:5f:6a:02:5e:f4:dc:84:75:16:25:9a:ee:e3:ee:
95:2d:92:b6:3e:b4:f9:84:c8:cf:c0:49:5f:91:eb:78:4a:6c:
65:c9:44:c9:ca:4f:fa:54:6f:d0:9a:a4:27:0e:c7:ce:54:fa:
f7:38:9b:f8:89:00:98:08:42:59:cb:91:a7:f6:26:1e:db:d2:
03:6c:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:08 2026 by rpki-client