Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: oS6fSBs95aQ1RcSYTSMpIDHfJRZr2jkuoJMXHXvxxT4=
Subject key identifier: 81:52:CA:AB:BF:9C:11:26:90:AF:B2:8D:F5:C8:49:8B:31:48:B6:39
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 01A0D07F64DE23ACEE38282201D02FD68D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 1356
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: hbi1ioDnQhyRKJ5Nd/QnPtJQv4J1tE3jOsD1V32EoCc=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:64:de:23:ac:ee:38:28:22:01:d0:2f:d6:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=8152caabbf9c112690afb28df5c8498b3148b639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:21:5f:c4:aa:93:66:a3:3a:e1:43:56:6a:
c4:38:99:37:84:ab:3e:5b:fb:a7:48:5b:8d:67:ee:
16:7b:18:c9:51:9d:f5:5c:6f:53:8a:d3:cf:39:13:
68:d4:9c:89:87:0e:8b:cd:26:9c:e9:4c:7c:a5:61:
26:ad:e3:df:5e:e4:3d:dc:11:73:73:9a:86:d2:23:
e0:c5:5b:c2:87:ed:1a:22:86:60:bc:da:bd:34:4f:
0d:90:2b:81:65:57:19:1f:17:b9:a7:f6:17:36:da:
c2:ad:9f:2d:54:cd:44:ef:3d:c0:65:60:17:67:9e:
dd:0b:12:67:a9:98:a2:d1:a1:eb:40:fc:ed:57:d0:
22:70:18:37:2a:96:57:91:29:02:3e:9d:c0:c5:6e:
42:9a:9d:5c:fc:0a:42:b0:fc:73:ae:dd:62:87:f5:
27:b5:1b:3d:7d:ab:7f:7a:89:d6:5a:c4:bb:f3:f1:
61:a5:cb:2d:89:4f:03:7b:67:fb:b6:9d:43:9c:27:
81:61:8a:3c:32:aa:31:66:e0:db:1f:c1:5f:20:67:
4d:f8:2c:28:12:d4:55:fb:59:60:71:63:5f:e0:ec:
f7:19:81:7d:44:e1:37:6e:23:fe:0d:b1:0d:9d:72:
21:dc:e7:92:3c:ce:0c:cb:64:06:36:e6:1f:69:c2:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:CA:AB:BF:9C:11:26:90:AF:B2:8D:F5:C8:49:8B:31:48:B6:39
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:7c:0b:3e:5b:58:47:da:f7:92:b2:66:ef:9b:e4:21:05:
88:af:e8:8c:ad:74:40:e1:66:7a:53:6b:04:26:86:fa:14:9d:
7f:c6:3e:b2:3c:e5:f4:26:42:3c:aa:93:2e:f6:83:e1:89:cf:
15:42:f8:15:39:12:a4:68:78:77:f7:a0:64:20:26:43:82:47:
b8:46:74:24:5f:d6:02:ed:c4:4e:d2:76:e5:75:e3:be:b8:e7:
43:fe:5c:db:f0:a1:91:b9:d9:c9:f2:2c:eb:dd:35:fb:59:8a:
58:d2:92:43:fd:e8:51:30:b8:8d:09:4a:4b:ac:82:90:bb:d3:
43:74:ce:f3:97:cc:c2:34:ad:ce:91:3b:74:36:44:f6:09:23:
56:b1:23:43:85:57:10:a4:ad:0d:88:15:7f:9d:b0:e5:91:7e:
22:28:4d:ce:e2:98:67:c5:0b:5e:f4:4a:17:64:85:ed:53:a7:
b2:e1:81:17:35:0d:b4:5d:2d:a2:55:0c:78:0a:7e:f3:05:ca:
9b:60:9e:3e:15:06:c0:d1:05:d4:41:7c:d2:fd:c5:d0:97:92:
ba:97:3c:84:2f:3b:2a:d7:e2:50:d6:79:8b:f9:35:3b:06:d3:
ca:6e:61:b2:4e:69:54:66:d6:e9:49:dc:d7:6e:ca:22:d0:d9:
6f:30:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:09 2026 by rpki-client