Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier: Z1a9I/0xaJtvzoKkxoUi9wUeoO7CTCmUOyAk0NSL0og=
Subject key identifier: 17:3C:75:D5:DC:68:EF:B2:58:91:08:5B:3C:DA:39:47:18:59:F9:C0
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial: 019D37C0179A2C479D4C488DA9A05509C14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: 4yCRD1Vc7xqdadQI4UzCprY4evR5o7fAeJuK8fHafr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:17:9a:2c:47:9d:4c:48:8d:a9:a0:55:09:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=173c75d5dc68efb25891085b3cda39471859f9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:14:7f:fe:7f:4b:98:3e:9c:f4:b9:c4:5c:
1a:61:96:bb:3f:58:cc:40:7d:cf:c9:8d:83:3e:c6:
e5:1b:f9:69:97:7c:87:f1:e8:1b:ae:b0:40:6a:7f:
11:79:fc:2a:0e:a0:03:69:e7:b8:96:06:18:63:69:
35:e2:45:23:5d:9b:79:51:8f:a6:bb:c0:93:b4:f3:
50:a4:1e:35:fb:9d:98:28:39:2d:b3:08:45:ea:8c:
78:13:ae:2d:b6:28:10:89:9a:0f:0d:78:8d:7e:a0:
48:01:ac:c7:ac:58:79:7a:a8:52:0d:15:9f:22:9e:
63:86:da:57:19:f6:d0:ed:88:82:ba:11:1e:71:3c:
a6:65:db:4e:2f:b7:ec:6c:0b:49:77:68:b8:01:5d:
dd:81:05:72:44:e8:17:e9:bf:87:fc:74:a9:b3:e1:
05:33:0d:9e:a7:ac:77:a3:0c:f2:0e:0c:c8:f1:0c:
31:f1:cf:50:41:19:87:4f:97:0b:3d:54:32:2e:5b:
84:e4:b7:77:a5:3d:26:c7:af:29:3e:4b:4c:78:5f:
85:73:7b:2d:bc:98:ee:69:4e:f1:a7:e6:ea:53:a3:
06:f3:b4:72:22:a4:86:4b:f6:3d:f6:f7:93:48:e7:
c0:71:87:29:18:d5:0d:69:2a:27:f2:4f:3e:ab:4b:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:75:D5:DC:68:EF:B2:58:91:08:5B:3C:DA:39:47:18:59:F9:C0
X509v3 Authority Key Identifier:
keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:c3:c9:45:a0:5b:8a:57:1f:44:81:8c:1c:62:a5:50:5a:
e0:cb:5c:ff:fd:50:8b:34:14:aa:0b:a0:c0:04:89:57:ca:60:
f4:9b:d2:16:3a:6a:82:c9:a5:99:66:44:1a:99:69:90:f7:e7:
92:7a:5a:66:0f:a3:26:98:0e:f2:9a:9b:76:e3:81:af:85:4e:
01:f6:28:9d:91:7b:30:16:8c:c8:38:3e:c0:a5:21:a5:18:3f:
05:3f:e4:a0:a2:00:90:63:37:1a:64:01:6e:ce:d5:e5:2a:df:
db:58:84:f6:1d:7f:b5:07:fe:aa:a6:44:4c:ae:77:f6:63:c3:
9b:23:f7:ed:89:73:4c:7d:75:fe:c9:e4:40:e7:a0:49:c8:44:
26:3a:4e:32:18:a0:2b:98:e9:7e:d7:d9:f5:63:2f:9e:f3:e2:
3d:5b:d1:e7:89:2a:b1:c2:40:9d:8f:57:f2:02:8d:83:e0:f4:
0f:05:ee:2b:37:fa:4c:05:9d:77:7a:01:e0:88:58:06:3a:b1:
fd:b8:7d:eb:ba:6f:27:25:22:28:a8:dc:41:a7:d5:df:6d:29:
ff:06:7f:8e:16:b7:0c:5c:f3:df:45:f0:4d:3d:ea:79:89:63:
75:a0:75:5c:48:8f:37:d3:26:a6:bf:81:de:40:5d:5d:6e:37:
2d:34:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client