Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: CQXy9YjsPuvVjaxppHXNkNsjCK1fRWyfa9BsWGVyxFE=
Subject key identifier: F7:EA:3E:0D:44:01:0B:3C:A3:B5:3F:BD:2D:2D:AE:D9:6F:58:08:C4
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019EBF23711E7E8F9E94D9602B296FC8913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 18C5
Signing time: Sat 13 Jun 2026 04:00:31 +0000
Manifest this update: Sat 13 Jun 2026 04:00:31 +0000
Manifest next update: Sun 14 Jun 2026 04:00:31 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: fEPfHlmqqBzMnfs9VzcqVBztUAxVVPIaCkduE96pFw4=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:71:1e:7e:8f:9e:94:d9:60:2b:29:6f:c8:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jun 13 04:00:31 2026 GMT
Not After : Jun 14 04:00:31 2026 GMT
Subject: CN=f7ea3e0d44010b3ca3b53fbd2d2daed96f5808c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:c6:33:56:b6:70:fe:6c:c8:12:d8:24:57:
0b:e4:5a:55:d6:25:cb:e0:e7:fd:01:6c:18:28:2c:
17:7e:0e:fa:52:6b:e9:65:30:ba:73:3d:6f:f0:f7:
d8:33:f1:67:bf:9b:99:63:91:ae:1f:c0:69:60:24:
39:e0:49:90:22:a7:71:e8:2f:b8:1b:fe:70:f0:88:
c4:64:09:af:83:91:ae:9f:15:7d:9a:8b:f0:9e:66:
22:07:38:dc:52:4f:3a:b8:59:3c:b5:37:a9:e1:14:
8b:3f:07:4d:58:2f:ee:c3:c5:d3:35:ed:55:d9:7b:
44:9f:d9:f6:f1:36:98:47:2b:e2:de:f4:d5:fd:17:
8f:9f:63:60:60:bc:64:53:08:20:4c:4c:5e:33:a6:
dc:6e:ea:be:09:01:ae:91:e9:3d:f5:2f:e1:56:0a:
b1:77:eb:b3:3b:93:62:39:2a:ce:e9:55:92:de:a3:
b8:36:01:87:9b:4f:dc:93:e2:7a:18:a6:03:29:c8:
1c:94:8c:b7:8f:31:70:0a:17:90:38:66:3c:08:4b:
19:cb:ba:45:ce:22:e1:ca:9e:03:00:92:38:d4:22:
c7:db:82:90:63:70:c8:18:3d:f9:6f:62:da:e9:86:
32:9f:a3:3c:dc:45:d6:aa:01:2e:e9:50:10:1c:d9:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:3E:0D:44:01:0B:3C:A3:B5:3F:BD:2D:2D:AE:D9:6F:58:08:C4
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:83:23:55:12:a0:f6:2b:23:d9:6b:0f:88:a3:a6:bc:69:
2c:65:ba:a4:f3:24:8a:12:90:bd:83:4c:6e:8a:79:60:ff:20:
ae:27:69:c6:a1:80:32:5d:79:c7:3e:bc:74:a2:61:04:43:85:
a7:d8:ea:82:67:35:00:43:ee:10:fd:20:14:52:de:80:7a:f9:
b8:55:6e:9f:0d:25:7f:24:0c:44:34:10:96:bf:44:cb:4e:65:
fe:b6:4e:53:69:b1:45:87:c2:b6:ac:d5:a1:5e:3b:fd:86:8a:
3a:57:fe:67:bf:bf:18:a7:05:5c:0e:b6:c1:28:ac:9d:ba:bf:
2c:98:68:d1:f6:59:75:ae:e7:bf:e8:1e:57:bc:3d:7a:ba:8c:
03:68:c2:22:9c:d5:0e:14:09:e7:1a:89:ac:a4:14:0a:4d:9b:
f1:c6:a1:44:fe:84:77:a3:00:f1:c1:63:25:32:6d:d1:38:9d:
87:aa:33:9c:1d:41:dc:53:7c:45:5c:9c:10:4b:0d:65:17:05:
e7:ce:97:ee:1e:ab:1c:c8:40:8d:8b:04:c6:49:34:f5:f4:93:
ad:c0:27:eb:3c:46:1b:75:f6:e8:1d:95:c4:66:fd:bd:62:81:
c1:a1:dd:80:dc:34:b3:36:a9:c6:f9:9d:d6:8e:29:5d:85:39:
68:59:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:35 2026 by rpki-client