Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: f3LOnc1PV+20oC5WED/RSzKw4mQMI7GoQMyyFwAnswo=
Subject key identifier: C6:97:EC:9D:A5:82:D8:86:74:CC:1B:2C:38:9E:94:D9:14:A1:DD:8B
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019FAA5078AF22B89E37AD666547FB6E42ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 20:00:28 +0000
Manifest this update: Tue 28 Jul 2026 20:00:28 +0000
Manifest next update: Wed 29 Jul 2026 20:00:28 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: X0mUxQfIhEg7r6Nbk45vWGqg6Kk3s0JPn3LvfmGVVKQ=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:78:af:22:b8:9e:37:ad:66:65:47:fb:6e:42:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jul 28 20:00:28 2026 GMT
Not After : Jul 29 20:00:28 2026 GMT
Subject: CN=c697ec9da582d88674cc1b2c389e94d914a1dd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:3c:e1:96:ef:9e:c7:01:0f:7b:4b:b5:a9:
83:3f:29:ec:d9:79:d0:cf:b6:27:aa:32:83:2b:ed:
9e:ae:a7:42:e8:73:6e:b0:c8:6b:a3:14:46:62:f9:
1f:0d:d3:41:e7:5c:5d:d2:8d:51:35:70:e2:a9:a3:
ef:96:ed:0d:eb:e3:da:a6:fe:1b:bb:12:00:c2:09:
87:f6:ae:03:43:8b:0e:be:5d:78:ce:03:d3:95:d5:
0e:ec:c8:64:33:ff:c5:67:4c:2e:ad:76:86:e6:52:
da:2f:74:38:99:a0:aa:88:a8:ce:1d:72:77:97:0d:
45:6d:d1:f8:e3:16:c8:89:b3:86:af:8d:0e:b5:df:
95:48:1b:c9:7b:05:b3:be:94:ca:2e:8c:29:85:4a:
df:d6:cf:0d:34:b7:96:b5:3f:60:02:6b:79:cb:05:
b0:2f:da:d1:ba:80:fd:b5:f6:a5:d6:66:95:d5:2c:
89:7a:a6:2f:49:22:5c:1f:d3:3b:fc:fa:f5:e8:b0:
ce:a1:2f:53:bc:90:44:78:4f:86:8c:09:6b:ef:53:
02:42:9a:86:84:22:65:f8:01:41:76:dd:8b:b2:09:
83:8d:22:24:d7:a0:37:b1:25:a8:6f:d3:dd:a4:79:
ef:66:76:87:ef:f6:4e:64:92:51:82:ab:79:b3:e2:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:EC:9D:A5:82:D8:86:74:CC:1B:2C:38:9E:94:D9:14:A1:DD:8B
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:2e:f6:21:1e:90:f0:5e:08:8d:89:b8:9d:30:1b:cb:88:
bd:12:79:c2:e9:5e:a3:5a:8f:91:7b:58:1d:ef:7c:b1:da:a5:
c9:3b:71:87:ee:4a:e0:03:14:4b:3b:a5:5f:d2:41:a7:36:a0:
57:37:f4:c3:26:8d:18:34:fc:d5:39:4f:4e:a4:ff:98:90:b1:
65:d6:db:66:25:3f:34:bf:b0:72:df:af:22:b0:ff:d5:58:a1:
e9:7e:e0:b2:62:08:fe:d7:d3:d5:75:96:d4:c4:d6:11:f9:04:
1b:e9:5a:42:6e:5a:4e:6d:51:5c:72:ef:33:c3:0e:3b:ea:5f:
0c:10:14:bf:a6:d4:58:9e:ed:35:fa:d8:43:d2:d3:c6:57:5d:
98:88:5e:25:bb:db:74:03:f5:81:a0:a8:e0:f8:cb:fb:c7:eb:
f0:f6:ad:5e:24:4e:2a:39:f1:66:f4:ab:23:8b:eb:f1:dc:f0:
bd:a6:29:10:c4:84:29:68:6d:b7:b5:0d:65:30:aa:3a:16:9f:
cf:77:8d:68:2c:66:03:06:fe:f6:a0:18:e5:80:c7:82:56:38:
2c:9a:96:9b:5d:8c:bc:35:15:f6:40:4f:a3:c6:e0:3e:63:26:
78:75:d9:9b:ae:62:52:b9:f5:77:34:7b:81:4f:2b:90:06:e1:
b7:50:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:44 2026 by rpki-client