Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: mtbeXBfj/ZwKIuNSz+hCevMC39NDt9Xp4hZVzbC8Tdc=
Subject key identifier: A4:59:E7:CC:7F:EE:B1:F9:D5:4A:E9:94:7F:CE:55:6E:35:38:4E:2A
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01A0C4B29EF0C1D5E755AE3268406D4251FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 19D1
Signing time: Mon 21 Sep 2026 16:00:35 +0000
Manifest this update: Mon 21 Sep 2026 16:00:35 +0000
Manifest next update: Tue 22 Sep 2026 16:00:35 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: VsFchkeiE6DUR7Qv6nXTgKvMYUwklXPcPbZwZqp0vBI=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:9e:f0:c1:d5:e7:55:ae:32:68:40:6d:42:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Sep 21 16:00:35 2026 GMT
Not After : Sep 22 16:00:35 2026 GMT
Subject: CN=a459e7cc7feeb1f9d54ae9947fce556e35384e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:a1:d7:ff:a3:f7:24:1e:b7:c9:1d:c5:57:
04:8c:31:ba:42:3b:bb:b6:4d:f9:54:d8:c8:b2:17:
e5:63:e1:d0:7f:91:fb:30:f0:57:af:fd:5d:1d:52:
9e:7d:bc:fa:ef:8e:3f:f3:c9:89:05:85:8b:3a:65:
c8:95:a0:9e:c0:f3:3f:88:60:e5:a4:4e:00:4b:a2:
55:33:68:c8:3a:60:84:1e:48:c1:cd:ff:17:25:0e:
fe:01:ef:f6:75:4f:8a:76:30:f1:7b:ac:42:d6:6c:
3d:3e:60:93:43:95:a2:65:3e:21:b6:ba:97:9d:3c:
c6:37:f9:0f:c0:ce:a1:ee:7d:b2:3f:8c:ab:f0:28:
6c:c1:b8:81:f6:38:74:dc:42:76:d2:3d:0c:a2:d4:
dd:43:7a:d3:6d:3c:ac:10:50:79:5e:97:4b:92:c3:
21:46:24:c5:09:94:49:6d:7a:52:61:2e:06:1b:09:
c7:ad:c9:84:9e:e6:e3:4c:86:9d:b4:96:e3:de:ad:
5b:e9:c2:2d:fa:a0:25:f5:8b:6f:bc:10:3f:f9:1c:
9f:e1:d1:66:60:c7:3a:79:e5:cf:6f:9b:9e:51:ec:
0e:c7:53:b3:cd:5e:53:b4:1a:22:45:21:a4:a9:08:
cd:ea:ba:aa:03:e6:8c:0b:9d:ff:3b:93:a9:84:6b:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:E7:CC:7F:EE:B1:F9:D5:4A:E9:94:7F:CE:55:6E:35:38:4E:2A
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:62:30:8a:4e:0c:00:0d:d5:77:dc:ae:5c:d6:e2:4e:77:65:
ac:00:88:b2:1e:f3:90:df:cf:9d:4a:34:cf:fd:6a:15:54:56:
25:28:c0:6a:b4:ef:ef:34:d9:d1:70:38:3f:67:f2:80:cf:cb:
09:de:5c:7f:eb:c8:78:5e:32:f5:1d:26:45:66:54:62:19:22:
82:90:cf:85:28:5b:e4:97:ee:02:4f:6f:79:7a:fe:2d:15:6d:
54:e4:f8:f0:b7:f3:a1:66:3f:a1:f5:85:cd:76:43:e2:e1:7a:
9b:c3:e4:cc:8d:4d:31:67:5e:46:bb:66:5c:e7:91:a5:29:4c:
0e:be:42:09:62:68:ec:a9:29:cb:d3:1c:07:fe:7f:05:04:78:
e5:f7:61:0a:49:5c:45:08:b8:38:28:c0:19:0c:3e:38:af:3d:
a9:d0:4d:5f:b8:5c:07:c6:9e:60:25:a3:b9:ca:2a:90:ef:67:
a8:98:99:e5:03:5e:d9:60:ba:d1:4e:88:02:e8:dc:d4:92:78:
d6:bf:3b:ac:2f:69:84:14:4f:63:80:49:42:e8:32:da:db:fb:
4a:3f:50:bd:87:f6:f5:42:b9:1a:81:10:d3:11:a2:a5:7d:56:
22:69:f0:49:97:89:ca:c6:00:7a:98:a0:fd:13:15:4b:24:a1:
52:55:6a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEsp7wwdXnVa4yaEBtQlH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3
YzFmZTIwHhcNMjYwOTIxMTYwMDM1WhcNMjYwOTIyMTYwMDM1WjAzMTEwLwYDVQQD
EyhhNDU5ZTdjYzdmZWViMWY5ZDU0YWU5OTQ3ZmNlNTU2ZTM1Mzg0ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9eh1/+j9yQet8kdxVcEjDG6Qju7
tk35VNjIshflY+HQf5H7MPBXr/1dHVKefbz6744/88mJBYWLOmXIlaCewPM/iGDl
pE4AS6JVM2jIOmCEHkjBzf8XJQ7+Ae/2dU+KdjDxe6xC1mw9PmCTQ5WiZT4htrqX
nTzGN/kPwM6h7n2yP4yr8ChswbiB9jh03EJ20j0MotTdQ3rTbTysEFB5XpdLksMh
RiTFCZRJbXpSYS4GGwnHrcmEnubjTIadtJbj3q1b6cIt+qAl9YtvvBA/+Ryf4dFm
YMc6eeXPb5ueUewOx1OzzV5TtBoiRSGkqQjN6rqqA+aMC53/O5OphGvDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRZ58x/7rH51UrplH/OVW41OE4qMB8GA1UdIwQY
MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt
YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk
LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmIwik4M
AA3Vd9yuXNbiTndlrACIsh7zkN/PnUo0z/1qFVRWJSjAarTv7zTZ0XA4P2fygM/L
Cd5cf+vIeF4y9R0mRWZUYhkigpDPhShb5JfuAk9veXr+LRVtVOT48LfzoWY/ofWF
zXZD4uF6m8PkzI1NMWdeRrtmXOeRpSlMDr5CCWJo7Kkpy9McB/5/BQR45fdhCklc
RQi4OCjAGQw+OK89qdBNX7hcB8aeYCWjucoqkO9nqJiZ5QNe2WC60U6IAujc1JJ4
1r87rC9phBRPY4BJQugy2tv7Sj9QvYf29UK5GoEQ0xGipX1WImnwSZeJysYAepig
/RMVSyShUlVqjg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:17:23 2026 by rpki-client