Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: FTBCqui0s2raVzWZIqAUQf8/NV1vXFB7Afiilu4udI4=
Subject key identifier: 3E:31:CA:C1:E0:9D:E4:79:51:7D:0D:8F:9D:D1:EF:3B:99:E6:93:8D
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 019D2AE07E560E39F976CA390ECE135EFA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:00:48 +0000
Manifest this update: Thu 26 Mar 2026 16:00:48 +0000
Manifest next update: Fri 27 Mar 2026 16:00:48 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: mHMTc7jK4L10duINILr5kV9K/ihtNDd9wYf5r5kldWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:7e:56:0e:39:f9:76:ca:39:0e:ce:13:5e:fa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Mar 26 16:00:48 2026 GMT
Not After : Mar 27 16:00:48 2026 GMT
Subject: CN=3e31cac1e09de479517d0d8f9dd1ef3b99e6938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:d6:7d:f7:6f:2a:99:85:2d:0d:62:ab:eb:
d0:88:a8:cf:3f:7c:3c:e9:fa:31:f5:06:ad:ad:aa:
2b:b9:98:92:cd:66:75:8b:c9:f4:39:1e:67:39:1c:
96:f2:d5:64:7c:1e:92:c6:c0:a3:2a:b1:43:be:9e:
35:ab:92:73:87:97:4f:f9:c2:eb:a6:ef:22:7c:68:
4f:97:b2:0b:36:a3:c0:82:73:86:fe:15:55:45:06:
2b:ad:14:51:7e:93:b6:e7:b4:bf:30:0b:2d:a7:59:
82:a8:d1:e6:11:0f:8f:bf:35:dd:71:57:c2:8c:cc:
d1:72:3f:0d:39:db:05:49:a1:ce:c6:5b:bd:34:57:
8b:86:14:d5:95:ea:03:f0:bd:77:9d:27:ca:c3:17:
dc:c3:e4:2c:94:0a:2f:27:16:88:3b:59:6e:91:03:
56:df:94:17:c3:9e:80:52:99:9f:ff:26:4c:52:cc:
22:e7:f1:d4:7d:ce:c4:f6:6e:56:ad:de:44:80:f6:
2c:18:88:f0:92:37:f2:8c:c5:91:40:5d:6f:d3:35:
a9:6e:81:f0:10:98:32:de:60:aa:4a:65:af:5c:8a:
29:b5:06:6e:8f:ac:4c:b6:70:92:d2:fe:b5:54:87:
bc:98:8d:7c:99:fa:2b:6c:77:fc:76:5a:39:19:24:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:31:CA:C1:E0:9D:E4:79:51:7D:0D:8F:9D:D1:EF:3B:99:E6:93:8D
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:e3:ec:5d:30:62:b9:fe:8d:d2:38:30:8b:78:58:59:5d:
42:99:8d:eb:c3:26:e8:b6:13:10:5d:52:c3:41:92:8e:62:da:
b8:7d:9c:09:7a:11:8e:58:13:42:be:a7:d5:2b:7b:9c:89:07:
80:e5:c6:28:c0:2c:41:9d:49:f7:62:4b:6d:ca:d3:6d:aa:19:
1f:00:17:e2:a7:2d:e3:63:0d:ed:1e:f6:0e:d8:77:66:08:1e:
bb:75:70:26:14:a0:70:34:6c:06:15:d2:b1:d3:a1:bc:c6:10:
4f:ef:f9:da:61:79:4a:57:0a:0d:06:8c:f1:ee:67:a9:9e:da:
f1:b2:5f:bd:b1:db:e1:98:6c:7e:60:58:6d:fe:19:cd:c1:07:
37:96:70:93:e8:f8:11:4a:a4:50:55:ca:76:ca:59:99:40:a7:
ba:c1:e4:a0:26:50:64:6d:99:20:0d:76:c6:54:dd:0a:a7:9b:
4a:8d:83:32:1a:cb:e6:34:6f:dc:45:de:85:59:9d:a1:80:d2:
63:9a:a2:ba:05:ba:8a:78:25:56:46:96:dc:b5:f9:1b:3b:ea:
2c:33:82:3a:9e:c0:dc:8a:b9:75:dd:ff:f1:89:3f:d8:3f:f8:
66:8a:66:09:97:25:04:89:0c:ea:f3:d8:e4:bb:9b:84:7d:f0:
97:e0:2f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4H5WDjn5dso5Ds4TXvocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj
NTljZjIwHhcNMjYwMzI2MTYwMDQ4WhcNMjYwMzI3MTYwMDQ4WjAzMTEwLwYDVQQD
EygzZTMxY2FjMWUwOWRlNDc5NTE3ZDBkOGY5ZGQxZWYzYjk5ZTY5MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjfWffdvKpmFLQ1iq+vQiKjPP3w8
6fox9QatraoruZiSzWZ1i8n0OR5nORyW8tVkfB6SxsCjKrFDvp41q5Jzh5dP+cLr
pu8ifGhPl7ILNqPAgnOG/hVVRQYrrRRRfpO257S/MAstp1mCqNHmEQ+PvzXdcVfC
jMzRcj8NOdsFSaHOxlu9NFeLhhTVleoD8L13nSfKwxfcw+QslAovJxaIO1lukQNW
35QXw56AUpmf/yZMUswi5/HUfc7E9m5Wrd5EgPYsGIjwkjfyjMWRQF1v0zWpboHw
EJgy3mCqSmWvXIoptQZuj6xMtnCS0v61VIe8mI18mforbHf8dlo5GSR9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4xysHgneR5UX0Nj53R7zuZ5pONMB8GA1UdIwQY
MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt
ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi
LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3jj7F0w
Yrn+jdI4MIt4WFldQpmN68Mm6LYTEF1Sw0GSjmLauH2cCXoRjlgTQr6n1St7nIkH
gOXGKMAsQZ1J92JLbcrTbaoZHwAX4qct42MN7R72Dth3Zggeu3VwJhSgcDRsBhXS
sdOhvMYQT+/52mF5SlcKDQaM8e5nqZ7a8bJfvbHb4ZhsfmBYbf4ZzcEHN5Zwk+j4
EUqkUFXKdspZmUCnusHkoCZQZG2ZIA12xlTdCqebSo2DMhrL5jRv3EXehVmdoYDS
Y5qiugW6inglVkaW3LX5GzvqLDOCOp7A3Iq5dd3/8Yk/2D/4ZopmCZclBIkM6vPY
5LubhH3wl+AvVQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:56 2026 by rpki-client