Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: IAGDID93+2ly+bEFCahJMV1u7WDYmpUr8mqYPXDNgmo=
Subject key identifier: B1:8E:CE:19:24:E3:39:9E:72:0B:97:77:F2:AC:4D:C9:96:68:8E:EB
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019FAAF61F932918E84F3C0272F1B1A1AA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 12BE
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: 6WDVzgpeUbqsE/Ur5Fk7dv0EbbwbetC8vqATc8mtDJ4=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:1f:93:29:18:e8:4f:3c:02:72:f1:b1:a1:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=b18ece1924e3399e720b9777f2ac4dc996688eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:8d:ad:d5:d0:2f:dd:f9:d0:43:1f:20:d2:
e8:9c:95:a3:d6:5e:eb:97:c6:95:f1:9f:66:1b:4f:
b1:6c:20:35:ab:66:40:e4:63:0b:71:13:5a:bf:d0:
95:96:41:76:0f:d3:34:b8:d5:71:69:90:af:71:9d:
15:73:5e:2a:fd:df:fe:dc:3d:5e:d0:81:ff:58:40:
9b:09:1a:77:12:11:6f:a5:51:86:f7:0f:fd:c8:ea:
a3:65:3b:cd:71:51:a0:0f:2f:d6:0b:68:23:e6:fd:
31:e8:6c:53:02:43:12:69:e6:06:d8:e3:6e:bd:cc:
bc:51:c2:5b:ac:3f:29:5e:d1:40:9d:8a:98:37:2f:
d7:9b:bd:f9:aa:a6:39:fa:c1:d8:3e:cf:32:fa:ae:
91:b8:d4:9f:99:99:fc:52:13:43:45:6d:7b:7d:0f:
aa:7d:91:21:70:a8:ab:7c:40:18:5c:21:68:c4:ec:
a6:1e:90:5b:0b:52:d3:28:69:f1:96:aa:0e:b0:8c:
1d:a0:c6:ad:44:59:00:76:6b:45:9f:af:60:93:b9:
a8:26:3a:1f:25:c0:64:68:30:d2:d5:78:3b:43:24:
2c:b4:c2:bb:71:e5:ae:a1:f7:b0:81:02:75:f1:11:
bb:da:c3:19:a5:38:95:e1:22:b6:cd:ff:39:03:87:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:CE:19:24:E3:39:9E:72:0B:97:77:F2:AC:4D:C9:96:68:8E:EB
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a8:b8:37:9d:c3:74:17:6b:2c:8d:61:85:af:75:88:a5:41:
40:46:9b:73:ec:d8:9c:05:3d:ed:38:23:09:19:4f:a0:73:92:
4a:68:ef:00:bd:8d:7a:61:63:ab:9d:19:9c:08:7c:5c:4a:2c:
63:a1:0b:0c:2c:6b:a7:bc:f1:3d:96:9d:9f:64:9d:ce:61:46:
fa:2c:9d:88:cb:ba:43:29:7a:3d:3a:80:8a:37:53:36:32:55:
fe:f2:4f:e9:a1:3e:ab:9d:00:e9:a9:6d:66:74:2b:97:a2:d8:
c2:d1:1f:be:97:3d:2c:07:79:fe:bc:66:5a:3a:a4:69:10:43:
61:f2:12:b9:99:19:cf:bc:ae:1e:c3:76:ea:88:b0:2b:99:73:
32:f7:ba:ab:cc:a0:d0:f4:0a:2a:fb:8e:8d:e5:38:21:3f:7f:
80:83:b4:d5:29:a2:49:8d:d4:20:fd:e5:e7:3b:de:c1:21:9e:
19:40:72:2f:96:8d:83:ec:d0:c1:e8:3e:b4:1d:48:40:ac:18:
5c:a9:98:ef:9c:cb:cc:84:26:fe:38:9d:e5:37:e6:7b:5b:0e:
1e:2c:68:0c:fe:e5:6b:b0:3c:96:bd:44:48:cd:36:d9:5d:ca:
88:77:50:9d:cd:f0:85:d2:ba:eb:26:2d:1e:c4:e0:66:19:7d:
bc:d5:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:03 2026 by rpki-client