Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: Ct7GvFd0upE+RXGyldNCSG50yzqmP/CehmYbyZYd8+U=
Subject key identifier: 6D:70:A7:3C:ED:95:FE:35:09:F8:2F:7E:38:34:5C:2E:9F:E0:FB:89
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019E1CEB40C3781746807305BBA078F84693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1871
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Wed 13 May 2026 16:00:39 +0000
Files and hashes: 1: 9-Fu5qz-jv14Pr7i-72SHGYP_O4.roa (hash: aS/vi4wAszRTtC2ofZ5XFSAIYmO44JsV0NRZB3IIdOQ=)
2: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: Y3zSPyELZIGhfr0nzYlNf97Eov067kXVinVH+Npmw6M=)
3: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (hash: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:40:c3:78:17:46:80:73:05:bb:a0:78:f8:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 13 16:00:39 2026 GMT
Subject: CN=6d70a73ced95fe3509f82f7e38345c2e9fe0fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:31:06:4b:f6:ad:4d:6e:f4:7d:4d:ef:4f:
fc:32:fd:80:9c:3b:9b:4f:c2:46:d4:04:c2:a0:e9:
c8:9f:04:73:f4:c3:24:05:d1:43:28:da:d7:49:70:
11:86:c2:15:bd:99:13:31:54:fe:7b:36:72:24:8a:
3b:ac:e5:99:94:f8:1d:b2:3a:31:71:e1:f4:b4:f9:
01:04:ef:67:b1:2b:86:a9:ae:b5:79:29:15:4a:a8:
bd:df:44:69:46:6f:5f:76:02:c9:49:9e:ed:80:0b:
61:c0:0e:e9:36:ec:04:9b:62:a3:17:d1:92:9e:db:
1e:a0:11:b7:83:0e:9e:3a:47:f7:9e:81:5b:03:d7:
53:83:c3:0a:e3:9c:c5:04:25:34:be:a0:14:93:40:
48:ff:71:b0:b8:b4:51:a4:36:9b:62:d9:5b:40:fe:
a6:27:2c:50:5a:f3:3d:83:30:46:5a:4d:61:f9:6d:
e2:eb:47:30:6f:84:8b:84:fb:23:ce:48:89:21:e9:
5c:f7:fb:c1:07:d9:f4:c6:bc:79:6e:12:b3:03:de:
58:4c:49:a1:73:9f:f4:21:ab:94:7b:9f:03:3b:ba:
8a:77:f6:29:ac:69:35:ca:22:c0:cc:d7:08:a9:ca:
84:31:3d:b3:2c:9d:79:b1:a5:e4:75:fe:e3:64:ae:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:A7:3C:ED:95:FE:35:09:F8:2F:7E:38:34:5C:2E:9F:E0:FB:89
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a2:73:d6:9a:7c:08:7b:44:2e:34:8a:df:fd:17:cd:e3:e2:
e7:5e:e8:80:60:d8:a2:bc:ef:e0:da:cd:05:6b:78:20:4f:78:
71:48:94:c2:86:ce:d4:85:88:2f:39:2b:e5:91:d5:de:bf:9b:
e4:01:98:c3:37:1b:08:7c:50:fe:e2:09:c8:b7:07:1d:37:b1:
34:2d:2a:dc:e8:dd:21:b2:8d:63:3d:0c:27:2e:de:b5:e9:83:
88:62:ef:a6:1f:95:7b:b7:0f:b3:4c:60:87:61:0e:13:53:94:
08:53:58:0d:c7:32:6f:94:5d:19:37:9d:74:8f:07:e9:09:9b:
7a:e9:47:57:41:5c:7f:8e:9a:ae:40:24:c9:94:f1:ed:77:80:
5a:6e:02:98:52:03:34:8b:e5:fe:39:9d:db:5e:68:be:28:67:
ce:89:f2:23:8f:fa:a9:10:1a:ad:41:2a:4d:e5:f7:19:89:d5:
a4:27:ed:96:b5:4b:ab:7f:87:a8:54:96:52:6a:09:e9:3f:20:
2f:6a:a2:6b:c6:0d:d4:a8:92:39:1f:a3:cd:2f:5f:99:b0:4d:
70:d4:72:8f:6a:a1:33:f4:26:6c:43:68:b4:9e:e0:a9:a1:dc:
5d:72:df:60:da:4b:c3:26:45:1b:af:3d:f9:9a:11:b5:cf:df:
b3:0c:94:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c60DDeBdGgHMFu6B4+EaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3
YzFmZTIwHhcNMjYwNTEyMTYwMDM5WhcNMjYwNTEzMTYwMDM5WjAzMTEwLwYDVQQD
Eyg2ZDcwYTczY2VkOTVmZTM1MDlmODJmN2UzODM0NWMyZTlmZTBmYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQQxBkv2rU1u9H1N70/8Mv2AnDub
T8JG1ATCoOnInwRz9MMkBdFDKNrXSXARhsIVvZkTMVT+ezZyJIo7rOWZlPgdsjox
ceH0tPkBBO9nsSuGqa61eSkVSqi930RpRm9fdgLJSZ7tgAthwA7pNuwEm2KjF9GS
ntseoBG3gw6eOkf3noFbA9dTg8MK45zFBCU0vqAUk0BI/3GwuLRRpDabYtlbQP6m
JyxQWvM9gzBGWk1h+W3i60cwb4SLhPsjzkiJIelc9/vBB9n0xrx5bhKzA95YTEmh
c5/0IauUe58DO7qKd/YprGk1yiLAzNcIqcqEMT2zLJ15saXkdf7jZK74yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1wpzztlf41Cfgvfjg0XC6f4PuJMB8GA1UdIwQY
MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt
YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk
LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqJz1pp8
CHtELjSK3/0XzePi517ogGDYorzv4NrNBWt4IE94cUiUwobO1IWILzkr5ZHV3r+b
5AGYwzcbCHxQ/uIJyLcHHTexNC0q3OjdIbKNYz0MJy7etemDiGLvph+Ve7cPs0xg
h2EOE1OUCFNYDccyb5RdGTeddI8H6QmbeulHV0Fcf46arkAkyZTx7XeAWm4CmFID
NIvl/jmd215ovihnzonyI4/6qRAarUEqTeX3GYnVpCftlrVLq3+HqFSWUmoJ6T8g
L2qia8YN1KiSOR+jzS9fmbBNcNRyj2qhM/QmbENotJ7gqaHcXXLfYNpLwyZFG689
+ZoRtc/fswyUCg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:36 2026 by rpki-client