Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: kUkpbrEKJcbeqAs1ZwTGzoTS6ZjwR4IaPwCnA1l33IE=
Subject key identifier: 2A:80:8D:36:22:BD:DA:35:54:14:EE:61:0F:26:B9:EA:55:34:60:E0
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019D273AF76A7A866179A26A3D3CCB32576C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: ky595JIEEX66Wn0aTmi4HSuUcp8jc90PGpbKbMdhAGM=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f7:6a:7a:86:61:79:a2:6a:3d:3c:cb:32:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=2a808d3622bdda355414ee610f26b9ea553460e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:8d:50:d6:06:73:00:de:89:7f:27:b7:7c:
04:04:fd:9c:90:cb:99:ec:23:8e:29:12:0e:fe:d8:
be:83:ae:c7:6f:c9:dd:ce:f3:bf:2b:88:19:6b:22:
20:d8:45:7a:7e:e4:01:0f:cb:55:ce:96:5b:de:bc:
15:ec:f0:e0:42:0a:72:8c:42:40:65:08:dd:2c:fd:
9e:5d:4f:4e:66:05:78:69:11:1e:7d:8d:ee:ec:00:
f4:bf:af:96:cd:ce:4f:5b:39:d3:f2:8f:40:c8:64:
ad:bc:43:d5:76:ca:e5:ac:65:fa:87:b1:b3:9f:62:
b8:e4:1b:aa:f7:d7:b1:2b:e1:c5:28:09:5b:b0:76:
10:fa:53:92:2a:91:7f:57:5a:6a:b1:bb:2c:c1:b4:
07:5c:e6:19:d8:00:9a:98:a5:d5:ec:9d:4a:8c:fc:
fa:67:52:53:00:c2:34:10:68:10:64:16:ab:1e:a9:
e1:77:ba:69:c7:16:83:b0:46:9f:78:b8:be:f0:41:
0d:8a:34:d7:23:1f:f0:28:6b:97:8f:46:9d:f0:2c:
8f:02:78:22:c0:b9:0f:c8:26:68:5e:b4:88:fe:17:
97:bd:fa:fc:14:48:1b:85:2d:a8:ca:f6:24:36:ac:
d7:47:41:85:f5:a9:a3:c5:6e:4a:f1:ea:ed:56:24:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:8D:36:22:BD:DA:35:54:14:EE:61:0F:26:B9:EA:55:34:60:E0
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:e1:f1:4d:27:f7:a8:f6:97:93:d5:7e:36:34:9c:17:f3:
59:33:a1:04:9a:2d:35:bb:a3:08:6b:1b:93:8a:2e:7d:62:7e:
0e:c7:91:ef:03:6e:d9:5b:a9:c5:47:61:ec:c4:30:f8:03:a0:
99:76:95:76:43:1d:27:26:b4:db:6f:ef:f0:36:fe:4d:ed:3d:
34:70:6b:60:ba:23:5e:07:0d:df:a8:c8:f3:f1:83:7d:9f:47:
e3:32:01:f0:7d:bb:39:51:0b:d9:e0:f7:58:3f:9c:d7:06:9c:
36:56:f8:4c:e4:ac:42:ae:98:a2:d9:55:92:dd:48:06:e2:2c:
ef:77:3e:32:3a:98:6c:39:03:64:bb:e2:c9:88:ba:95:4a:11:
dc:0e:29:a8:c2:ee:67:94:09:fa:c8:de:f5:e6:d9:bd:a2:84:
6d:05:f9:07:bc:95:03:11:c4:20:4b:fc:ba:8b:f4:47:21:02:
58:b9:35:b4:a3:d6:c0:97:fe:98:f6:2b:2d:69:a5:99:74:fc:
35:3d:c0:49:e3:f0:80:35:ed:f8:1d:86:97:01:ce:e7:25:4b:
c8:4c:38:e8:5a:29:74:cf:0d:42:cd:77:c1:81:f6:45:45:13:
d9:6a:a7:1e:b9:c5:13:3d:b2:ae:47:50:38:16:c8:17:51:10:
bd:ee:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:56 2026 by rpki-client