Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: W4XYVm8vwkahMXYFOyu8ibPN6jVX51o7IZq+N6UA1HU=
Subject key identifier: 63:B4:91:F7:42:FB:D3:1D:AF:A5:47:18:89:1D:7C:3B:73:0E:B4:D7
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019D99D034ADE112542B2C4CA62B925ADFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 11AC
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: XUPlnbtCOEqXNPzqlHl4GxxUX/QgidaN8voKFDeeBIU=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:34:ad:e1:12:54:2b:2c:4c:a6:2b:92:5a:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=63b491f742fbd31dafa54718891d7c3b730eb4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a7:ef:a0:12:e5:cf:34:41:77:c8:de:ae:57:
e9:be:58:5b:70:da:ca:a7:6a:ab:85:6a:68:87:90:
11:a0:f0:2f:97:36:02:0b:fb:b2:3d:b1:93:3b:dd:
96:0d:48:61:fa:9d:05:3c:65:e1:20:dd:e2:cc:82:
35:41:d2:da:47:5a:d8:5a:79:be:1c:71:13:4c:92:
cc:c8:c3:98:dc:97:b9:25:61:9d:68:e4:16:af:e0:
81:2b:df:21:a4:1c:0e:ce:52:22:90:d3:79:7f:cb:
53:a6:1b:57:de:2c:93:cc:a9:9f:c3:c3:9f:47:12:
23:b5:0f:ae:a1:f6:40:fa:8d:8d:4d:18:17:4a:47:
28:89:3f:c1:d1:81:2c:55:6e:4d:59:71:6c:68:2e:
e7:01:02:17:76:35:fc:4a:ec:0a:c6:ca:40:2f:5d:
61:56:ad:83:6e:06:19:40:3e:9d:bd:9f:68:6d:fc:
50:af:14:a4:e6:e0:92:f7:be:a7:11:2f:e5:79:e5:
75:e6:ad:7c:9d:87:57:7a:98:84:d1:f2:e0:79:a4:
0b:9b:7f:94:83:bf:0b:9f:fb:d4:33:a0:06:72:79:
61:61:ed:05:a0:e8:54:1f:05:fd:d1:78:2d:e1:76:
31:a8:99:79:d8:70:1f:a9:15:a6:99:67:80:8b:73:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:91:F7:42:FB:D3:1D:AF:A5:47:18:89:1D:7C:3B:73:0E:B4:D7
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3d:db:cd:e7:84:4f:61:aa:db:6d:b9:2d:28:cf:24:a2:94:
9a:44:ad:eb:cd:14:e3:27:49:6d:ed:25:99:33:6e:42:57:85:
0a:75:db:24:9e:5d:c1:57:da:c8:77:fb:99:fb:a9:20:56:8e:
5a:b3:b4:15:29:60:01:c1:fc:05:e4:f2:70:b0:8f:84:88:0c:
3a:f0:cb:c2:ac:b1:f7:51:81:08:67:e7:0b:74:22:8a:73:1a:
3d:41:bf:4d:b6:ab:14:9b:97:71:dd:1d:ca:a5:8c:d1:8c:16:
6e:5f:dd:68:4e:d4:40:32:cc:74:03:54:14:47:70:2c:6a:72:
2d:49:a8:05:94:84:b3:1c:e7:b4:af:93:53:47:da:a2:f3:9e:
c5:3c:2b:bf:90:31:0e:7a:56:e7:d6:e1:d0:cd:ee:6f:e3:a1:
34:15:af:bf:10:e5:3d:ba:bc:27:64:7d:eb:c5:8b:4a:88:d6:
11:72:34:38:45:5d:de:53:b9:a8:de:f7:92:33:6f:3c:6d:26:
cc:27:98:d5:71:12:41:62:90:0d:4f:5f:a8:f8:58:90:d6:8e:
60:92:ac:9a:be:f2:75:f7:27:df:06:7a:9c:d2:99:7d:61:48:
71:63:dd:6b:00:0d:00:fb:5f:c5:96:a4:c4:3b:e7:4c:5d:11:
aa:68:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:42 2026 by rpki-client