Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier: Q5MiekO0/qQHP+l3cbwC/UYPJV5uXQ6T3gVv2ij2Brw=
Subject key identifier: 7B:81:67:3C:1C:B4:D2:2B:E5:EA:F8:BD:3B:AD:47:D9:33:26:87:8A
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial: 019D284E20EE436FD0DAE7849D753FD58EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: lJx2YnC3TPUmUlC1kU66CthDfDn4mHdP0ZMhKBh6T/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:20:ee:43:6f:d0:da:e7:84:9d:75:3f:d5:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=7b81673c1cb4d22be5eaf8bd3bad47d93326878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:d0:2b:1e:0b:30:e9:3f:ba:79:cb:ae:6b:
13:8d:1e:5c:1b:3e:66:76:70:20:4c:6a:cc:b5:a3:
ca:9f:6f:9c:43:c0:c6:bd:1b:d2:3d:c8:09:af:e2:
95:5b:56:82:2e:3a:1b:80:de:08:7e:27:57:6b:ef:
87:c4:0a:fd:1a:ed:96:2a:cc:8f:61:2f:e0:9f:8e:
54:05:b7:a9:69:df:f9:1e:31:c9:38:6e:55:36:39:
24:f2:de:3c:cd:5b:ab:d2:f0:1c:c6:05:39:b3:92:
1e:a8:da:56:6f:7d:8a:8e:ff:f7:3d:4e:0e:f0:5b:
09:6f:4e:21:2b:4d:17:b6:a1:b6:ed:48:72:63:b8:
80:83:ce:32:2a:59:9c:fd:5a:0d:b2:e4:72:98:49:
47:9d:e5:e9:50:06:35:f7:56:d3:55:1b:52:1d:c0:
83:40:1c:25:95:43:e9:1c:ae:1d:76:4a:59:a3:71:
23:50:07:d1:be:ab:50:15:96:03:82:e7:ab:6c:2b:
2b:6d:43:e6:60:2f:02:07:4e:f2:cd:f2:5b:7d:56:
36:6b:4a:7f:81:ef:1a:f5:54:68:68:20:36:67:62:
b1:d6:fe:34:2e:d8:bc:bd:34:a9:86:67:82:bb:74:
03:88:71:85:fd:0d:92:79:dc:7e:7a:a3:b9:d9:88:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:67:3C:1C:B4:D2:2B:E5:EA:F8:BD:3B:AD:47:D9:33:26:87:8A
X509v3 Authority Key Identifier:
keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:e5:d1:5e:77:69:26:7c:84:44:90:f6:b1:b3:80:be:ea:
f5:d5:47:0c:4f:80:fd:11:68:b5:e9:23:24:2b:0d:6e:0f:84:
fc:2a:3b:a2:a7:99:0f:a3:c5:77:76:d7:be:c6:0a:05:ee:24:
92:48:1b:08:2e:1c:a8:b6:32:b5:9c:e6:b8:94:f3:0a:a7:b5:
5a:30:e1:d1:3d:1f:8c:ac:bc:54:a6:2c:47:c6:23:ca:60:29:
a4:da:45:91:5b:57:ae:f6:9e:11:88:0f:e9:e8:76:06:cf:ac:
0e:c9:50:c1:9a:77:f3:e1:47:99:44:6d:ea:73:fd:d6:21:8c:
48:b9:4e:89:6d:8f:0b:d3:4c:fa:95:05:52:76:66:0f:64:92:
eb:b9:b1:b7:9c:79:d2:16:53:3f:13:34:84:74:3a:96:d4:de:
ed:03:28:ce:6a:19:63:75:3b:b0:90:a8:11:63:1f:12:24:61:
41:99:b4:2b:e7:09:2e:70:fd:62:a5:2e:d3:06:b0:9b:cc:fd:
2d:e9:8d:68:eb:46:d4:c5:06:a5:ab:01:09:cd:af:82:d6:d0:
ea:eb:7d:30:6a:25:e1:31:39:d1:84:b1:cf:31:3d:2c:af:be:
cc:be:f6:50:24:cf:bf:22:01:01:df:2d:1b:65:ad:0d:1d:7c:
51:f2:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:57 2026 by rpki-client