Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier: JLhYTeINWoedfacW3I2LZEhrVC1JWp3EjPShNAs36+M=
Subject key identifier: EC:0C:DC:B0:E2:6C:F8:90:B7:4C:F2:CB:0E:48:14:8C:B8:87:81:83
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial: 019D2704669589AFDCBC9DCEC269BF9CB473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: VMt28kF71paSJBIjwraWMjfSB352EoxewyRTLJrTR/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:66:95:89:af:dc:bc:9d:ce:c2:69:bf:9c:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=ec0cdcb0e26cf890b74cf2cb0e48148cb8878183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:96:1b:94:97:4a:d9:63:3f:ea:8a:cb:5b:
6b:2a:25:c9:69:af:7d:cf:0a:e6:db:2b:76:fe:23:
8a:bc:a6:2d:70:72:33:18:a4:b8:88:d5:99:f4:3e:
12:4f:72:32:43:aa:24:c1:a9:4a:dd:0e:a5:2d:58:
9a:d1:24:65:77:f0:d6:2a:92:f4:14:c1:12:66:16:
43:b1:3e:48:b6:9c:a7:6b:86:eb:c7:bd:4b:14:6f:
02:88:e0:7a:5c:89:9d:05:76:74:35:2f:c5:e1:49:
61:21:f1:58:5c:28:66:87:29:29:cd:bc:f4:cd:fd:
6c:dc:81:d0:ed:4f:8a:80:81:44:1c:78:7d:3a:80:
84:44:7a:ef:28:be:f0:ff:98:02:51:1d:ea:75:b0:
92:fb:3f:e4:8a:69:0f:0a:2d:85:b4:d2:8c:43:09:
77:48:a4:9e:b6:db:b4:13:49:e0:44:1b:62:24:7b:
0a:4d:21:ee:db:5a:77:22:d7:13:f7:da:fc:a4:cd:
d0:b1:cd:c6:a7:a0:ac:a0:b9:74:c9:a4:23:ee:50:
14:46:9c:15:ba:8b:ef:ea:8e:43:19:c7:4e:73:71:
95:68:d0:c6:51:57:6b:81:13:d7:8d:d6:0c:18:d3:
83:f7:84:fd:ea:aa:3a:01:fe:1e:dd:f7:66:65:5b:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:DC:B0:E2:6C:F8:90:B7:4C:F2:CB:0E:48:14:8C:B8:87:81:83
X509v3 Authority Key Identifier:
keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:08:3a:a7:74:69:a9:f8:38:4c:d9:a7:45:26:9a:ae:36:
40:2d:17:76:ac:aa:78:00:ae:1f:24:de:f7:42:17:25:55:e3:
4c:9d:ce:02:b1:15:a3:0d:88:ed:46:7f:76:4b:d5:da:3c:4b:
6d:b7:b3:e2:12:1f:70:40:fc:ed:4e:c0:3f:e2:93:a2:8c:63:
aa:a4:4f:cf:5e:cd:e7:eb:ef:fc:b2:4f:2d:c3:84:75:fb:24:
ee:c2:c6:a4:3b:de:b7:40:22:1b:0c:b1:eb:81:be:35:ab:9d:
bb:54:88:e0:96:3b:8a:6f:64:16:a0:c1:b5:28:ab:a8:7a:47:
b2:45:ff:45:28:74:e8:83:30:11:af:16:d8:cb:1a:df:31:ea:
7e:6b:6a:20:13:b3:c1:7d:30:66:15:c5:20:7c:b8:bc:0d:fe:
d0:91:b9:f6:d6:f5:ef:1e:fc:1f:15:c0:35:53:c7:04:96:2a:
37:3d:f3:3e:54:01:50:00:8f:9c:02:84:0f:5a:a2:d3:c1:b6:
68:98:ab:19:74:ff:02:a8:11:9d:63:31:52:a7:2b:a8:69:ac:
b3:fc:8b:35:10:c9:c7:5b:37:88:b2:70:cd:df:26:b5:57:f1:
de:73:fe:85:3b:36:87:29:4b:6a:0b:4d:42:19:6c:62:aa:fb:
49:0f:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:46 2026 by rpki-client