Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: Al1zVDBcOGl74B6LQIXomuHWHygt+eE0Q3r8bZ09j+4=
Subject key identifier: 0C:D3:A7:79:5C:48:25:1F:30:6C:CE:3B:74:6B:0B:80:38:F5:A8:DE
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019D9998EEB70729D89DE1E0D7A418F92E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 182D
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: g7nEF4tbYHLLAvi8knzooQsfxjnCmSz+0VnTP3QxJ7s=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ee:b7:07:29:d8:9d:e1:e0:d7:a4:18:f9:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=0cd3a7795c48251f306cce3b746b0b8038f5a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:32:3d:be:4e:23:b8:92:df:e1:cc:3e:9b:
47:4e:50:03:e1:02:c6:40:6c:d5:86:3d:7c:86:ca:
f0:fc:7c:20:a0:74:53:f5:45:40:17:70:fb:fe:52:
cc:40:58:07:63:dc:a3:23:8e:54:b2:12:b1:f0:3a:
95:db:a1:fa:4b:c1:61:76:f0:a8:9e:38:35:b7:d1:
ef:45:b3:f3:bc:d5:b7:98:8c:34:25:d4:87:45:d5:
ef:a2:ae:d2:ab:8a:c7:f8:d4:dc:38:96:2e:9d:2d:
1b:cf:e6:dd:d7:21:df:c7:94:64:07:60:b3:6f:c6:
05:ae:b8:83:92:f4:87:96:2b:b4:0a:eb:2a:b5:d7:
f0:26:9b:9a:ea:eb:3f:73:3b:b7:40:aa:0e:f4:cb:
5f:f3:f0:11:53:f1:bc:b2:f7:26:0c:9e:0b:d4:44:
3c:d3:8d:46:a4:6e:ba:1d:6f:9e:01:67:45:4c:94:
ac:b6:86:7d:fb:69:30:48:62:a6:e7:19:c4:a2:b0:
3d:62:4d:4d:57:6a:32:81:33:b0:61:bc:f4:6c:3f:
a9:ce:df:ad:5a:7b:96:55:cf:a6:80:c0:16:2c:be:
aa:3a:d4:f3:c9:56:61:46:d5:ab:aa:99:1b:5d:05:
23:15:42:dc:47:b9:a0:db:1e:9b:5b:0d:3b:dd:4f:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:A7:79:5C:48:25:1F:30:6C:CE:3B:74:6B:0B:80:38:F5:A8:DE
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:03:34:9f:92:25:69:cf:83:3a:fb:32:07:6f:3b:8b:34:3c:
c6:d7:70:16:7d:9a:10:e3:cf:aa:0e:82:4a:2a:0f:83:56:e5:
cd:26:62:ee:57:4b:74:8e:9b:f6:d0:df:66:ee:49:61:99:46:
63:ab:76:48:1e:38:a0:73:fe:d6:43:f7:8a:27:50:c7:f9:23:
f1:8f:17:62:a7:ba:00:0c:f3:26:c8:7d:4c:b4:58:e8:67:c3:
47:33:28:d2:bd:69:19:b6:f9:4f:c8:91:ca:e1:d1:94:80:ab:
aa:89:ca:a3:6c:7f:ef:a4:66:97:6a:2e:cb:f6:b3:5e:91:8f:
17:18:47:95:9a:0f:67:c3:e8:24:3f:b7:03:a6:1f:06:87:74:
92:a7:52:22:d2:43:77:92:df:67:d4:32:1c:d9:fb:2c:7f:9f:
e8:40:de:1c:d1:f1:84:33:3e:f4:fe:69:01:a7:5f:39:f5:f7:
09:fa:18:5e:06:b7:f8:52:24:56:68:ee:85:50:65:c4:ed:a6:
f9:c1:9f:85:f2:ef:d8:cd:63:bb:31:76:b4:5e:1f:8d:b5:31:
c1:a5:5d:7d:86:e3:64:df:14:7a:b5:c5:c7:fd:34:b5:ec:09:
a7:90:05:b2:70:df:ab:93:dc:e6:4e:36:ec:7d:a2:c7:1f:23:
ed:6a:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:47 2026 by rpki-client