Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: lDksjmZksRT8Zuzipnf3Kjep7q/VBM2rwqP/QxG78H4=
Subject key identifier: FB:14:64:7D:C1:07:16:F7:7B:F1:B8:05:09:0F:F7:C2:B0:BF:04:0A
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019F18301927DBC5F789C460090BAD6F1C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 1272
Signing time: Tue 30 Jun 2026 11:00:32 +0000
Manifest this update: Tue 30 Jun 2026 11:00:32 +0000
Manifest next update: Wed 01 Jul 2026 11:00:32 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: aAYD/OepK7mKaJ3UNC0xf8xSBzmMyJiPARU/JPVomow=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:19:27:db:c5:f7:89:c4:60:09:0b:ad:6f:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jun 30 11:00:32 2026 GMT
Not After : Jul 1 11:00:32 2026 GMT
Subject: CN=fb14647dc10716f77bf1b805090ff7c2b0bf040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:16:e1:d1:b7:ee:8d:00:85:e0:70:d7:5f:
e7:6c:6c:d6:db:b4:4b:af:4a:d1:8a:69:ec:7b:1d:
f6:1d:40:22:e3:bd:7b:a6:26:11:e4:3d:ec:ab:bf:
8c:10:ef:c3:b7:d5:b9:36:26:7a:92:55:f5:b9:24:
38:3c:77:7a:34:03:d2:d0:fc:6a:7c:b1:b9:24:06:
4d:69:b6:44:4f:05:ed:3e:41:d4:93:1c:9c:31:16:
73:5c:b5:8c:a3:3e:ee:ed:86:92:76:8d:d1:f0:49:
b6:cd:ab:09:e9:ba:be:61:19:5f:df:b2:f1:a3:3b:
80:05:dc:6f:64:d4:c6:0e:20:ca:f5:97:62:5e:55:
d0:ff:3f:b1:04:33:50:6c:8f:f4:de:bb:4e:b1:60:
27:3c:99:aa:9b:1c:6a:90:ba:e4:f0:56:0d:43:9e:
00:bd:1a:d6:3d:04:e1:cc:1b:ee:53:25:1e:2a:01:
3d:6f:59:13:25:e3:1e:63:32:c7:eb:2f:02:fc:5c:
91:07:45:55:e8:96:66:32:5c:d5:a0:61:09:af:ed:
5d:9e:a1:f0:47:ea:45:03:80:79:9e:d3:67:1d:83:
ba:30:42:ff:d1:7c:f4:53:dd:f5:52:7a:83:61:20:
da:5a:dc:79:92:42:45:29:b2:d9:9d:f9:90:19:a4:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:64:7D:C1:07:16:F7:7B:F1:B8:05:09:0F:F7:C2:B0:BF:04:0A
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:aa:a7:02:81:5f:41:db:23:fa:18:ae:82:00:80:be:97:68:
37:1e:29:0e:d9:48:36:0a:57:c9:4e:b9:2a:c5:0a:eb:38:72:
94:df:21:51:db:99:e6:dd:ee:6f:cf:c0:bc:ed:de:bf:87:e3:
2c:f4:78:3d:30:b1:46:6e:fd:4b:8c:a9:71:1d:94:75:54:7f:
7d:ca:cc:aa:cf:df:dc:73:7a:e5:e7:98:51:b5:8b:23:e3:01:
f6:26:5c:d1:95:29:c3:c6:fb:97:fe:07:57:57:26:e5:0d:c2:
5e:ed:8a:0d:2b:9d:68:e4:eb:7e:a3:0f:03:57:dc:3f:b9:38:
47:b9:32:3b:fb:6d:00:44:a8:73:35:29:61:3d:8c:3d:07:7f:
a6:d4:dd:0d:da:d9:90:b2:b2:e2:35:e1:47:e1:03:71:63:ce:
ac:7e:7a:b6:eb:e6:4a:9a:e0:f8:08:98:23:b6:38:78:0b:b9:
06:4e:d3:e0:3d:da:2d:fd:75:76:f4:9e:d9:30:9b:73:8b:43:
cb:da:e2:bb:9e:53:14:bb:bc:50:9d:88:78:7b:c8:59:cb:52:
1c:da:db:b3:a5:4b:6a:93:fd:2c:22:4d:64:fb:f8:9c:45:a0:
ab:5d:f1:d4:c4:17:29:5d:f7:ef:86:27:9c:d0:60:e9:f7:24:
e9:50:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:01 2026 by rpki-client