Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: g8pI43XvLLvlGACfwyx4uaaZQM8m8IdYWDUBbL1r1Yc=
Subject key identifier: 6C:81:50:72:10:E8:29:99:46:90:7B:04:BA:23:AF:37:B2:79:B1:84
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019CAA213BD16E17EF80AA2E36B3CCDD79EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 17B1
Signing time: Sun 01 Mar 2026 16:00:30 +0000
Manifest this update: Sun 01 Mar 2026 16:00:30 +0000
Manifest next update: Mon 02 Mar 2026 16:00:30 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: EwKgvnQi9szdlmuJAQ0g4iKXdvJNZgxR+wV76sGPgFc=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:3b:d1:6e:17:ef:80:aa:2e:36:b3:cc:dd:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Mar 1 16:00:30 2026 GMT
Not After : Mar 2 16:00:30 2026 GMT
Subject: CN=6c81507210e8299946907b04ba23af37b279b184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:7e:63:f8:65:3a:de:d9:19:88:0d:b3:9f:
c8:09:1e:6f:e2:b8:73:74:24:a2:1e:13:80:d0:6b:
da:46:7a:15:d3:f9:f6:f2:a5:d1:91:38:44:83:36:
b3:80:d2:6f:16:8c:67:23:eb:e8:a0:58:59:7a:a0:
4b:99:c5:36:d4:d8:64:02:5e:c6:69:56:66:88:a3:
b1:f3:90:ea:0a:60:3e:66:b3:31:6a:97:67:ab:7b:
ee:be:ee:a0:11:61:80:2e:d8:56:04:52:2e:70:d1:
7b:96:ee:9c:0f:29:37:41:be:a8:15:a7:8b:05:e1:
05:4b:14:a2:3c:25:36:86:fe:d3:ec:bf:70:0d:0b:
76:85:cd:99:10:5f:f3:9e:4d:3f:f3:7e:c4:a1:4a:
cb:20:26:7b:4d:fd:fd:3a:8b:1d:f1:a1:fe:40:65:
33:61:e8:88:cd:7d:45:5f:b7:5b:15:be:6b:1c:4b:
88:da:4b:25:b4:3c:58:18:b5:cd:25:2a:ca:60:5c:
e8:01:4c:cd:bd:d5:d2:f5:5d:18:8f:0b:f0:ca:30:
4c:ea:a9:90:c9:a4:4b:d8:ca:71:76:63:bb:5c:82:
f4:7d:bc:4f:d7:95:66:59:34:32:a6:ff:e0:b2:6e:
d3:20:c0:72:a4:4b:0e:ba:c4:6d:4c:e6:c1:ce:81:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:50:72:10:E8:29:99:46:90:7B:04:BA:23:AF:37:B2:79:B1:84
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:31:18:aa:80:2d:f2:8e:cd:55:c8:2c:69:98:9b:f2:e2:
48:6c:01:0d:da:5e:3d:6e:4c:e3:cb:65:15:60:3c:6b:a1:1b:
44:c5:91:3e:96:e6:c6:df:3f:21:f0:6e:87:99:0a:98:24:4d:
87:33:8e:18:90:d8:f1:dd:35:ad:8c:01:0d:bd:5f:ca:fd:9a:
e3:da:82:9c:68:12:5c:77:47:25:bf:7a:62:bd:6b:f0:09:df:
20:af:76:ff:cc:bf:02:6f:9b:64:10:d5:fd:b8:98:82:5c:46:
37:17:17:e3:0e:1e:d7:60:92:58:c3:37:33:c6:b5:00:76:50:
61:75:54:b8:95:91:16:39:7b:94:df:40:19:55:13:e4:e6:70:
c8:0d:00:34:ac:4d:7f:a2:cd:7c:92:e8:4d:da:cb:ba:fc:30:
1b:e6:40:6c:d0:49:84:5e:9d:d4:43:e3:82:b2:7c:16:f6:ea:
7f:d0:04:55:87:52:46:68:0d:0f:69:b5:fd:48:ba:df:ff:36:
f4:2d:58:d2:8c:aa:d4:50:8c:bb:ce:2c:09:e9:04:d2:8f:ec:
e3:5a:c8:39:0e:c7:b5:b1:63:95:aa:49:2c:26:f4:a2:d4:96:
e1:18:5c:83:e1:c0:78:90:45:f2:0c:3b:20:06:bd:4b:ad:ac:
af:6e:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:59 2026 by rpki-client