Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: ZYqlL5lDtE0siAW1iEdkmTYhw0AAqrY/0ZDVE7tZmSQ=
Subject key identifier: C0:FA:5D:57:37:CC:4C:AF:25:7A:DD:AA:B8:38:BC:F6:F9:68:B1:49
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019E1C7DC3EAB1AB4DBA26F63EDA33BA7AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 14:01:04 +0000
Manifest this update: Tue 12 May 2026 14:01:04 +0000
Manifest next update: Wed 13 May 2026 14:01:04 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: szeJinr3T5d7sLLFzzgJl5b75x1+ycg8vX6hd4iXy+M=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:c3:ea:b1:ab:4d:ba:26:f6:3e:da:33:ba:7a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: May 12 14:01:04 2026 GMT
Not After : May 13 14:01:04 2026 GMT
Subject: CN=c0fa5d5737cc4caf257addaab838bcf6f968b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:06:6e:6b:b0:9f:43:09:ae:5e:53:50:1b:
f6:62:c1:06:26:6f:7f:8f:fc:54:c8:ec:c6:f2:1e:
cf:61:b9:70:8e:4b:b3:48:8a:45:44:4f:7e:08:dc:
42:3a:db:af:38:35:a7:c9:45:a4:bc:10:32:69:20:
28:67:2e:67:b7:b2:c4:c6:29:be:1b:eb:87:a8:67:
68:8d:d9:28:65:3f:c8:35:48:21:a9:60:9d:70:75:
df:78:7a:45:67:c2:d9:a7:48:4c:09:2a:0a:8e:ec:
93:ee:f5:6d:c5:27:10:3f:9b:78:18:e5:62:15:47:
ba:5b:0e:ba:2d:c1:81:35:84:8c:a3:09:24:1a:6e:
fc:b8:1b:67:3a:d8:e9:3d:e7:00:88:d1:fb:ba:d3:
48:64:9d:0b:ec:85:15:f7:03:97:91:cf:82:4e:6b:
23:61:0b:82:b3:d0:c8:39:68:cd:6b:76:e4:3b:24:
6e:5a:93:7a:80:da:c5:2d:12:df:eb:ed:a7:0a:2e:
4f:e0:17:34:8f:41:de:d6:1d:ea:c8:e7:bb:d5:18:
30:34:99:51:f5:f3:08:79:4c:0b:97:51:5d:02:01:
de:6f:1a:a7:be:80:dd:c7:0c:93:5a:2c:ca:93:aa:
88:4a:68:46:4b:00:0d:e5:5e:5c:fc:9f:ed:ec:b6:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:5D:57:37:CC:4C:AF:25:7A:DD:AA:B8:38:BC:F6:F9:68:B1:49
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d7:a5:09:7e:67:71:bb:f7:b1:5d:53:0c:74:a2:8d:c9:60:
6f:d6:da:3f:ec:92:40:64:24:2a:0e:a0:88:8a:09:00:e5:ef:
db:b1:82:73:32:2e:77:62:76:2b:42:50:7b:7e:da:e8:da:60:
3a:ed:83:f9:a2:84:02:12:7e:5e:43:21:92:6f:cb:17:1d:de:
61:34:97:0e:9b:ad:46:8d:f3:7f:4c:e7:df:4c:79:4d:4c:f3:
93:1c:4b:5f:06:f3:c5:9e:f9:10:6d:da:b1:ea:30:9f:8f:dc:
48:4d:88:31:7e:88:8f:93:9c:48:bf:e8:bf:4f:6d:72:d5:05:
dd:34:ef:60:f9:d3:65:09:76:75:44:7a:06:d6:b6:35:d8:96:
4f:e2:f5:15:58:7e:de:65:ae:ab:81:a8:8c:83:62:50:86:de:
f8:cb:80:01:35:0e:d4:40:ad:d9:5b:3b:7b:54:f1:04:d7:a3:
f5:71:b8:55:df:2a:9c:bd:b0:44:fb:56:fa:f3:ee:a2:cb:7f:
2a:5c:33:fc:57:66:d4:71:11:22:7e:b4:b5:12:a0:d3:63:e0:
f5:01:81:f6:62:09:77:ba:e1:b8:c7:a9:86:8a:b3:75:55:d6:
da:b4:99:07:a9:e9:c5:09:26:c6:4c:e4:bb:01:99:3a:7c:b1:
de:95:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:29 2026 by rpki-client