Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: AeUJmjLlE95dhFK/GuoJReMH77gIisax/xqzsU9qvXw=
Subject key identifier: 66:D3:7E:9D:D5:73:FD:CD:EE:F7:2A:39:64:25:DB:41:11:FB:33:C8
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019CAA584624E242229F79D7878A95AA31D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 1130
Signing time: Sun 01 Mar 2026 17:00:37 +0000
Manifest this update: Sun 01 Mar 2026 17:00:37 +0000
Manifest next update: Mon 02 Mar 2026 17:00:37 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: 0O0QUrf90766my6Pp+wN1R8xrLF45fhChySHj6Pfyps=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:46:24:e2:42:22:9f:79:d7:87:8a:95:aa:31:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Mar 1 17:00:37 2026 GMT
Not After : Mar 2 17:00:37 2026 GMT
Subject: CN=66d37e9dd573fdcdeef72a396425db4111fb33c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:03:b0:07:1a:78:85:fc:dd:e6:2c:10:2d:
cf:b0:13:2a:5f:3a:b9:0c:df:6e:3e:3b:43:31:98:
45:9f:34:e3:17:31:bd:39:5a:9d:1d:20:e0:89:a4:
19:a6:50:d9:a8:78:fa:b8:08:16:45:d6:85:18:54:
14:f0:d9:5b:d3:9d:da:ca:7a:e5:5a:0c:72:5d:6a:
ec:2b:6f:2b:d3:51:fc:89:ef:f6:6e:20:be:94:d8:
1d:e3:1c:4b:2f:20:e7:76:7a:7a:f6:ce:45:3e:69:
66:d4:56:a0:7e:cd:a0:1d:35:c4:f5:7f:32:78:0e:
4d:83:1c:e3:bf:08:7e:43:b6:21:98:70:b2:48:ff:
b0:b7:63:c8:6c:38:91:ac:45:33:95:1b:be:7c:c4:
30:ee:5b:e2:54:88:a9:a8:7c:45:da:0c:21:a7:f5:
7e:52:f4:6e:6d:d5:69:6b:fd:8a:82:07:5a:c7:3d:
e2:5b:61:5a:fc:6c:40:42:80:43:a3:53:53:17:25:
97:94:ed:87:7f:c7:ba:2e:19:08:b4:39:32:af:4a:
95:fe:4d:22:60:27:1e:55:fe:ce:74:f5:21:2b:ad:
3d:22:b1:30:5e:bd:0b:1a:a7:dd:9c:e3:e8:fe:be:
cb:33:bf:73:4e:3e:84:d6:3f:94:40:8d:bc:4d:89:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D3:7E:9D:D5:73:FD:CD:EE:F7:2A:39:64:25:DB:41:11:FB:33:C8
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:91:3c:1d:fa:a5:d0:71:87:e4:cd:3f:39:20:b9:29:f5:
aa:f8:9c:20:a1:d4:21:b1:95:fc:ab:41:0d:49:5e:ca:86:ca:
8c:75:9a:6b:83:94:89:3f:e1:6e:81:98:14:6b:4f:47:c1:d8:
71:59:53:ca:d8:16:9a:5b:6b:a0:f8:66:44:d7:d1:5d:56:d0:
03:11:2e:91:4d:95:e3:7d:c0:28:f1:3b:4e:3f:34:0f:79:56:
99:18:44:a6:c9:d2:be:df:a6:d8:21:80:11:f7:22:cf:5c:06:
ca:ff:ee:2f:b9:d6:14:f4:5a:07:1e:7b:50:44:32:a2:1a:3e:
32:c9:d8:5c:c9:99:43:13:75:c9:08:08:27:4f:f3:9c:52:3e:
09:de:2e:af:a3:e0:cc:a5:a7:48:63:0d:aa:45:93:57:4f:e9:
c6:fc:a9:8b:b9:01:75:d9:7e:01:88:41:ce:79:a8:30:59:b8:
14:6a:40:1a:de:8b:40:8c:1b:ae:8f:e6:0f:26:f0:67:dc:a1:
3c:d6:cc:4e:e6:b6:6e:05:2c:9b:7f:79:07:22:50:1d:6b:e1:
ad:b7:b8:88:61:93:f1:ca:1c:c7:6d:09:22:51:81:fe:35:a7:
2c:3b:51:96:2d:2b:b1:67:73:c8:55:6e:d6:70:79:b4:d4:96:
96:8c:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:57 2026 by rpki-client