Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: b801i3AhLCMNBVPt4PChg1A0ySmJQ/duLfueuSFDoco=
Subject key identifier: 60:66:66:46:11:C0:74:36:92:6A:AA:53:A1:B1:0D:D8:EC:C7:C6:E5
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019D29CE9A2DC3CB41FD35DF51B3BAB7238F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 1172
Signing time: Thu 26 Mar 2026 11:01:38 +0000
Manifest this update: Thu 26 Mar 2026 11:01:38 +0000
Manifest next update: Fri 27 Mar 2026 11:01:38 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: uDyAnM1VmN0pbMQKNqRdF/U1rH5siJg9mzhvzhA41Ec=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9a:2d:c3:cb:41:fd:35:df:51:b3:ba:b7:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Mar 26 11:01:38 2026 GMT
Not After : Mar 27 11:01:38 2026 GMT
Subject: CN=6066664611c07436926aaa53a1b10dd8ecc7c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:29:e4:f4:91:d7:7f:e4:6a:fb:a4:dc:6d:
94:7d:a2:b4:c9:25:71:95:b8:9d:6b:a3:f5:5e:e1:
00:0d:02:9a:8d:a1:63:0a:dd:a9:75:73:20:b8:a4:
0b:48:a6:b0:63:57:63:dd:b9:9e:5a:21:7e:37:7e:
54:4c:34:03:b5:75:10:84:b6:75:5f:9f:3c:96:fa:
1d:c7:0a:dc:fc:7f:ad:de:c3:7e:f6:d5:5d:a8:e9:
24:76:ac:2d:05:8a:c5:85:04:a5:16:38:25:1e:b6:
0c:22:5c:2a:c0:c6:32:ea:75:8d:87:7f:0c:22:8c:
15:d2:b8:8a:b4:a8:71:68:f2:cd:05:32:3e:cb:2a:
b6:97:ed:f0:8e:18:85:99:52:2c:66:51:38:a1:bc:
a8:cb:59:4c:64:41:26:e4:f1:35:a8:5d:c5:b4:c3:
9a:78:12:04:97:9b:a5:53:cd:72:37:43:c0:c2:14:
f7:fb:60:9c:2f:51:1e:75:df:3d:bc:ae:10:9e:27:
18:f0:6f:03:f2:9c:f1:76:bd:bf:18:dd:bc:0e:8e:
34:18:3c:e7:3c:0a:b1:9c:e0:e9:85:f1:cf:e0:3b:
73:69:28:ff:9c:b8:bd:59:eb:ae:a1:c4:f4:97:5b:
33:82:7c:f7:2b:a2:96:06:45:0c:c7:61:fd:37:30:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:66:46:11:C0:74:36:92:6A:AA:53:A1:B1:0D:D8:EC:C7:C6:E5
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a0:f8:ca:19:10:15:dd:c9:18:79:84:f5:3b:50:ee:bf:26:
5c:a3:1b:23:50:3c:4e:df:f8:f2:fd:45:6e:61:68:f0:b0:17:
f8:82:88:56:e1:f4:cd:bf:1e:42:ca:93:e2:e9:a9:1d:b4:f9:
fa:3a:b1:03:9e:7d:13:51:c7:07:05:d2:90:ea:19:93:36:3e:
2a:d6:9e:ba:7b:5f:23:d0:79:87:d1:18:0d:62:5b:11:6c:bf:
9c:f8:9c:f8:3f:89:a4:b8:94:bd:be:50:d4:e8:93:d5:a5:0a:
6f:c1:8f:a1:10:25:62:07:17:0c:8a:1f:d5:30:02:c9:57:b0:
d0:34:ce:94:8f:57:a7:e6:f1:9b:54:6d:72:b3:0a:e0:90:d7:
39:25:65:c8:03:4e:c1:eb:9f:d9:10:ba:da:13:12:b2:41:a8:
2c:c0:e8:3c:b4:4c:db:ef:5c:44:4c:1d:db:6c:d6:91:90:06:
b6:b1:43:3e:b4:f3:b2:7c:a5:11:1f:d4:94:c3:da:57:40:72:
84:87:28:77:c8:90:8b:07:55:ec:3f:0f:59:49:4e:5b:0a:e8:
83:e0:df:3c:7f:f6:1d:85:30:67:d8:58:ff:68:f4:d3:01:40:
fe:cc:99:40:21:54:08:97:f1:8d:67:bc:15:9f:f6:09:04:dd:
16:bb:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:37 2026 by rpki-client