Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: 1AZrrLGyXM+fuw81ZXZR1LuTK29xreNrjJan9mxa5qU=
Subject key identifier: 1C:90:11:00:04:7F:40:5E:72:C4:4D:2E:1B:5F:3B:92:28:49:5B:65
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019FA8D030E566E3D7A48E7D205DAE4C8FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 193E
Signing time: Tue 28 Jul 2026 13:00:44 +0000
Manifest this update: Tue 28 Jul 2026 13:00:44 +0000
Manifest next update: Wed 29 Jul 2026 13:00:44 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: Z4BfZHrdRgul7T1muB/1gi30PUZPKwDIqMA0Cg/B2tQ=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:30:e5:66:e3:d7:a4:8e:7d:20:5d:ae:4c:8f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jul 28 13:00:44 2026 GMT
Not After : Jul 29 13:00:44 2026 GMT
Subject: CN=1c901100047f405e72c44d2e1b5f3b9228495b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:b8:e5:86:6c:b8:44:23:93:02:26:0d:9d:
72:02:14:5f:08:84:ed:01:3f:6a:e5:08:ea:3d:15:
00:84:fb:e0:05:e3:61:a4:04:3b:0e:bf:37:07:db:
23:8d:77:21:49:38:6a:ff:65:30:5b:28:32:00:65:
33:e0:2f:9d:94:4e:8b:6a:f1:23:0b:b6:3b:cf:20:
7a:53:5e:e2:c9:d7:94:e9:7c:69:5f:34:56:87:9e:
6b:30:b8:b8:17:b5:98:22:27:9d:87:44:10:15:ab:
82:79:32:55:72:d1:db:d1:65:b6:4e:45:f4:55:37:
a9:a9:52:ab:40:80:b7:aa:71:10:b1:e6:89:97:b9:
83:ca:ac:64:64:61:80:7f:09:84:af:0d:6f:da:97:
ee:ee:2b:8e:73:88:d0:85:57:5f:81:f4:d3:86:09:
45:ae:15:ca:65:a3:b4:4e:06:e5:67:32:e8:74:59:
f9:28:53:47:7f:08:cd:62:c7:0d:6b:d3:3d:16:c8:
0d:84:1c:ad:c8:70:b5:2f:69:6b:ae:94:39:0a:83:
6b:c0:4a:16:a9:66:77:af:f5:80:23:5b:d7:ef:45:
7a:4f:20:dc:8a:1b:60:d0:ce:2a:16:05:84:bb:a7:
4a:1b:42:df:00:b2:dc:32:55:8f:6f:c1:73:8c:e4:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:11:00:04:7F:40:5E:72:C4:4D:2E:1B:5F:3B:92:28:49:5B:65
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0b:4f:d0:12:db:31:40:e2:3d:81:88:b9:6c:06:34:11:1a:
dc:30:89:9e:b1:5a:44:dc:3b:57:39:9c:01:58:07:99:d5:ff:
4b:51:fe:0a:c9:4d:23:52:03:80:9c:83:c0:9f:3e:e7:e4:a6:
63:61:02:4d:6c:83:c1:ed:9b:e5:42:a5:58:43:d5:11:ff:84:
c1:61:6a:2d:cd:be:2f:e2:c5:12:6e:2a:2b:34:4f:9e:b0:27:
8a:be:ff:33:26:39:1f:0f:0f:0c:dd:9e:d2:91:aa:d2:73:42:
87:61:48:1d:48:56:00:7a:8f:18:4e:02:8f:11:05:ce:b1:d5:
18:40:c1:d6:df:ff:b8:f6:11:ba:f3:d5:4e:5e:67:1e:0e:69:
2f:a4:c8:41:2c:06:5e:b8:2e:41:f8:09:bf:ce:e4:af:cc:2d:
ad:1d:d5:48:32:b5:b1:f6:7c:6b:ac:bf:90:57:43:b0:6d:40:
81:7f:b7:7e:af:80:a3:cf:b8:d5:40:d5:a4:2a:3b:cc:ae:ba:
1d:06:58:7d:3b:9b:d1:92:27:bb:25:e6:98:9d:29:bb:10:c0:
a8:2e:34:17:10:16:f8:ce:e7:cf:61:52:34:b2:34:08:bf:3c:
3c:a0:6a:fe:07:92:e4:c7:28:25:66:45:df:9b:6d:b0:b4:b0:
d3:66:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:48 2026 by rpki-client