Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: ebOsmEZ2RVS0SPxqkdPSkap04NcW+l4ZnTw3gEjs1Ng=
Subject key identifier: C8:63:C2:86:E8:6F:27:A2:AA:A7:BA:73:C7:A6:4D:7E:0E:05:36:B1
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01A0CBFE3082BD139208C2FA52E2BAE1082B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 02:00:28 +0000
Manifest this update: Wed 23 Sep 2026 02:00:28 +0000
Manifest next update: Thu 24 Sep 2026 02:00:28 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: VJwHIsSa+uh74BpDAYEuxvLJfA4smsSg5vayXiMyvv8=)
2: M7kRTQfsDWnSEjwGKRXyF_EVZWQ.roa (hash: pMXDkd3we761SJuv8DjmH0fcLi1BKQntR2fM0JVxzSc=)
3: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (hash: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:30:82:bd:13:92:08:c2:fa:52:e2:ba:e1:08:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Sep 23 02:00:28 2026 GMT
Not After : Sep 24 02:00:28 2026 GMT
Subject: CN=c863c286e86f27a2aaa7ba73c7a64d7e0e0536b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:28:03:e4:24:cf:04:93:57:3e:30:92:f6:
56:71:6e:58:92:be:36:ef:f2:4f:f9:60:0a:5c:ec:
20:98:6e:e8:f3:63:99:0f:a0:83:6c:8c:ca:ec:0e:
20:d2:7c:53:45:5b:e2:94:52:c3:98:96:dd:0e:32:
42:ea:ed:55:55:6c:2b:21:e8:99:94:74:50:b7:72:
c4:01:4b:c7:10:b9:a0:5a:97:2a:dd:87:7c:80:f4:
8b:1a:66:fd:81:f1:b0:60:33:c6:0e:10:c3:f7:26:
45:1c:f3:a2:33:fc:ce:d0:6e:a9:b9:b9:2e:8e:7f:
e8:2e:9f:ce:1d:0f:9b:89:cb:59:33:0b:5e:fa:2c:
41:c5:d4:4c:02:75:c4:3e:84:e8:36:3d:bd:10:a1:
29:5d:c1:b7:e2:93:8f:9f:6a:1a:bc:13:b5:38:a9:
6c:d7:22:cb:0f:fb:1f:d4:8e:4b:f8:56:fa:3b:c5:
9e:0c:02:56:0b:29:93:98:bf:bf:8a:a1:0d:99:6f:
73:32:78:33:25:06:f8:b5:1a:3e:3c:59:f0:37:af:
6e:d2:3d:2e:f3:ea:20:24:09:35:77:7c:1b:25:4a:
6b:24:86:d0:32:ec:6d:b5:76:90:31:66:94:71:3c:
93:7c:59:15:d2:2f:10:f3:db:ea:ba:9c:f8:0c:6f:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:C2:86:E8:6F:27:A2:AA:A7:BA:73:C7:A6:4D:7E:0E:05:36:B1
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:e3:29:35:2f:b5:db:59:c5:9e:c4:c7:60:81:58:8c:e8:
66:3a:17:48:88:60:4e:91:65:5b:7c:a7:c6:c0:8d:07:6a:6e:
f8:98:09:7c:32:42:4a:96:db:fc:4c:21:c0:94:b1:d0:72:13:
23:77:90:01:e8:07:35:7b:90:37:70:55:9d:fa:bf:33:df:40:
00:bd:94:f0:e5:7e:28:cd:4b:d1:fe:0c:30:35:75:f9:7e:ed:
bb:3b:85:25:28:f0:75:03:0b:c7:b1:8f:05:7c:8e:a3:d2:5d:
9a:b0:0a:ea:47:01:21:15:f1:9f:cc:b3:92:e5:22:be:0d:be:
fe:01:13:b2:b7:93:54:76:99:01:53:b9:30:c7:b9:0a:d4:09:
42:79:58:16:28:c1:3c:9a:7b:ac:7b:2b:2e:72:6f:d3:2b:d6:
88:fe:d4:ff:f4:7c:3e:47:73:3f:9b:af:91:ff:4f:a4:36:dc:
19:78:53:7e:5a:77:5b:26:99:24:8e:ab:58:97:19:ae:ad:65:
f0:15:76:d1:a8:3b:48:52:4d:79:43:4d:38:6c:55:b6:f8:a1:
5e:ac:6d:cf:e1:b8:1c:62:35:a8:c6:c8:f7:74:75:e7:e0:b3:
a6:f2:9f:62:a9:65:cf:b2:3c:04:95:a2:0e:7c:c6:29:fc:30:
dd:4f:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:12:28 2026 by rpki-client