Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: mp+Mm/G4LB4yEqPWtNcCJgwxqrq5OPp5cXHTvcNjetc=
Subject key identifier: 9A:97:31:F6:7B:19:E9:ED:40:37:6C:57:70:0A:09:E9:00:1C:3E:CE
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01A0D426C0694530B893685A3255052B80FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 19D9
Signing time: Thu 24 Sep 2026 16:01:44 +0000
Manifest this update: Thu 24 Sep 2026 16:01:44 +0000
Manifest next update: Fri 25 Sep 2026 16:01:44 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: DQdCKIXm7cjyXIFFVW0fQdK30uo9BRxIS25sZGeDPN0=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:c0:69:45:30:b8:93:68:5a:32:55:05:2b:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Sep 24 16:01:44 2026 GMT
Not After : Sep 25 16:01:44 2026 GMT
Subject: CN=9a9731f67b19e9ed40376c57700a09e9001c3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:29:07:f3:d1:48:ad:95:03:c2:66:3e:cf:
50:64:9a:41:04:c8:0d:8d:53:21:19:6b:c2:99:74:
ff:17:2d:1a:a2:a4:05:66:8d:62:22:42:15:98:5d:
96:6e:26:ff:c8:8a:18:00:34:41:86:97:13:5f:24:
fc:8e:49:68:bd:28:41:32:c9:2d:08:9a:bb:5e:ce:
35:f8:b4:d9:56:b3:5a:5f:a9:10:9a:4b:85:c7:b5:
ef:42:aa:21:5d:4e:0e:3e:96:8c:56:cc:01:4e:fd:
8c:6d:f5:af:b7:0a:70:ac:eb:38:fb:57:f3:ba:2d:
fd:57:dc:83:25:a7:d5:bc:f8:17:ea:15:46:cd:9d:
a3:65:06:81:0a:cd:43:80:fd:32:a9:96:ca:39:89:
4f:c7:fa:dd:c6:aa:aa:1f:50:3a:b9:74:61:90:bd:
ba:ab:9a:04:17:da:10:9e:1b:b6:66:b5:5b:fb:1c:
8f:32:79:14:a0:df:8e:fd:d3:de:e0:e1:05:d5:79:
ea:32:0a:a4:05:ce:2d:50:d2:3a:1c:23:aa:82:7a:
ff:86:fc:3d:16:a6:74:1d:74:9a:71:07:f2:0b:0c:
83:85:58:00:ce:4a:e1:5e:b7:af:d7:40:e4:56:20:
27:8b:2b:91:35:dd:65:34:e3:f1:81:d8:57:42:50:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:31:F6:7B:19:E9:ED:40:37:6C:57:70:0A:09:E9:00:1C:3E:CE
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:92:3c:77:16:10:65:fb:4c:44:9b:01:a8:bf:ac:e4:e8:
a2:86:bb:66:ce:4d:d2:bf:0d:22:f1:24:90:7c:52:2a:a3:32:
ad:33:d8:6c:6b:c1:f5:81:c5:c0:78:09:a3:1c:ae:3e:48:f4:
10:40:5c:73:fb:a1:96:a5:30:fe:f0:13:db:21:48:08:3c:be:
96:e8:b2:e5:1f:aa:34:32:76:32:fa:8e:fa:a8:4d:bc:71:20:
f9:9b:67:7b:e4:6a:c4:69:ad:60:00:89:8e:65:c7:0f:e7:77:
81:ed:b0:59:91:65:ea:7a:68:a0:c2:48:bd:d9:86:0a:22:d5:
63:3d:4f:27:a1:1e:32:a4:64:e5:58:07:71:bc:31:df:b4:04:
e8:7a:bd:b0:5f:98:b8:5c:fe:34:c4:cb:63:27:ec:20:3c:13:
f2:a9:ac:28:8c:08:6e:3b:e7:29:db:03:8e:64:fa:c1:9f:d4:
0c:a6:ed:31:8f:9c:08:26:99:96:ad:e1:f6:71:ee:1c:4c:57:
fb:bd:9b:6a:f8:48:db:61:75:17:d1:1a:33:50:c6:b3:a3:72:
75:49:66:c0:f2:2d:e0:61:9e:a0:36:e3:9e:30:f6:2b:b0:31:
67:b5:df:b2:10:12:93:4b:5c:0b:4c:89:48:3e:90:ca:09:50:
d8:3b:76:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJsBpRTC4k2haMlUFK4D9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3
YzFmZTIwHhcNMjYwOTI0MTYwMTQ0WhcNMjYwOTI1MTYwMTQ0WjAzMTEwLwYDVQQD
Eyg5YTk3MzFmNjdiMTllOWVkNDAzNzZjNTc3MDBhMDllOTAwMWMzZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQYpB/PRSK2VA8JmPs9QZJpBBMgN
jVMhGWvCmXT/Fy0aoqQFZo1iIkIVmF2Wbib/yIoYADRBhpcTXyT8jklovShBMskt
CJq7Xs41+LTZVrNaX6kQmkuFx7XvQqohXU4OPpaMVswBTv2MbfWvtwpwrOs4+1fz
ui39V9yDJafVvPgX6hVGzZ2jZQaBCs1DgP0yqZbKOYlPx/rdxqqqH1A6uXRhkL26
q5oEF9oQnhu2ZrVb+xyPMnkUoN+O/dPe4OEF1XnqMgqkBc4tUNI6HCOqgnr/hvw9
FqZ0HXSacQfyCwyDhVgAzkrhXrev10DkViAniyuRNd1lNOPxgdhXQlDplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqXMfZ7GentQDdsV3AKCekAHD7OMB8GA1UdIwQY
MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt
YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk
LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLWSPHcW
EGX7TESbAai/rOToooa7Zs5N0r8NIvEkkHxSKqMyrTPYbGvB9YHFwHgJoxyuPkj0
EEBcc/uhlqUw/vAT2yFICDy+luiy5R+qNDJ2MvqO+qhNvHEg+Ztne+RqxGmtYACJ
jmXHD+d3ge2wWZFl6npooMJIvdmGCiLVYz1PJ6EeMqRk5VgHcbwx37QE6Hq9sF+Y
uFz+NMTLYyfsIDwT8qmsKIwIbjvnKdsDjmT6wZ/UDKbtMY+cCCaZlq3h9nHuHExX
+72bavhI22F1F9EaM1DGs6NydUlmwPIt4GGeoDbjnjD2K7AxZ7XfshASk0tcC0yJ
SD6QyglQ2Dt2og==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:35:13 2026 by rpki-client