Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: VpvMMtfntMEQZdJof+OPCS0uPXYK6G57+tg2y/iTK8g=
Subject key identifier: 4F:BD:38:9C:68:8F:18:89:78:A8:F4:FF:CE:6C:1C:52:6F:DB:5F:65
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 019CAB6B0CEBEB713DAEB2E194BEB84CC8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:45 +0000
Manifest this update: Sun 01 Mar 2026 22:00:45 +0000
Manifest next update: Mon 02 Mar 2026 22:00:45 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: 4c+Jg/M/9Z2vF+GPyHe7XGivGyUyohw7R9XNJYvJm8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0c:eb:eb:71:3d:ae:b2:e1:94:be:b8:4c:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Mar 1 22:00:45 2026 GMT
Not After : Mar 2 22:00:45 2026 GMT
Subject: CN=4fbd389c688f188978a8f4ffce6c1c526fdb5f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:a7:35:29:4e:4e:c8:6c:3f:9b:da:6d:62:
b3:6c:ba:e0:c0:51:de:97:6f:9a:6b:1c:08:13:99:
aa:c1:8d:05:89:da:ee:66:dd:c3:03:f3:15:5e:40:
77:6b:9b:65:18:7e:07:89:ed:29:e2:bf:ad:25:b1:
d3:ff:6d:97:2e:d0:72:36:59:ab:53:5f:76:06:b2:
58:64:4b:8b:90:dd:8d:93:0d:0e:93:f0:eb:e5:b6:
41:70:c5:cd:cd:82:11:17:bc:da:30:a0:97:1d:e4:
d2:f4:96:8f:9c:49:a4:80:56:31:12:b5:a8:02:b8:
0c:51:ce:94:07:e8:b6:2a:11:32:d3:df:ad:fc:50:
24:20:5a:ad:41:e3:2b:c0:be:d6:ea:89:37:b2:1e:
f2:27:5c:53:28:55:54:1a:87:e2:86:23:34:c4:17:
86:64:6f:5e:25:66:38:b9:6e:f4:0d:43:06:a9:35:
34:e8:b6:c6:f9:5f:99:60:3e:3b:e5:a4:29:ba:85:
0a:b0:3d:90:44:a0:1a:42:7c:ad:2c:80:7b:ee:81:
1f:f4:09:93:9b:25:f3:df:d8:e0:bc:46:74:8d:e8:
e8:e6:5f:9d:ed:b1:54:7e:cc:dd:f1:59:82:86:9c:
b5:7e:a0:8d:e7:61:27:d8:86:26:90:82:92:d3:f5:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:38:9C:68:8F:18:89:78:A8:F4:FF:CE:6C:1C:52:6F:DB:5F:65
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e4:34:41:a0:6a:9d:89:de:56:69:c6:65:6c:f8:4e:45:aa:
ff:52:81:03:bf:4e:8f:14:1b:14:e0:5c:ed:f1:c9:9a:da:b0:
7b:df:3d:ed:29:bb:3b:76:5c:e7:38:55:53:71:64:4c:7b:88:
7d:ab:4c:64:5d:e3:0c:dd:4b:9a:28:b4:e8:65:ad:4c:ba:65:
b0:f0:15:d2:2b:34:55:6a:90:df:eb:49:36:ef:49:57:b1:cf:
b0:12:65:3a:7f:ff:a2:5e:b5:29:93:ef:2d:3d:05:d4:62:2c:
32:87:ab:30:8b:b8:07:48:91:f5:7c:3a:a3:cf:85:9f:91:ae:
ee:7d:a7:55:78:ab:10:17:4d:75:0d:a3:60:2d:38:4b:ff:4f:
b8:16:eb:6a:b6:0d:45:dd:66:12:19:86:6e:ee:36:51:84:fb:
83:5c:c8:35:66:b0:65:38:1f:5b:b3:00:c5:7b:b5:39:7f:42:
bf:d0:28:bf:3e:36:2b:86:27:ef:92:b7:ed:01:be:d6:c3:83:
4c:dc:06:89:40:b7:b7:bd:fa:ac:21:35:d5:6e:0f:8a:c7:0d:
29:72:b3:39:ac:4c:08:b0:c5:c1:ae:0b:ce:a8:76:da:48:14:
73:0e:9a:7e:42:94:1e:43:e5:cf:9b:1c:88:4c:83:1d:ed:65:
b3:9d:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:28 2026 by rpki-client