Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: QGHHO7RQ1VTYuvU9fad94b832rhJP8oJ/RIjOASGjlA=
Subject key identifier: DE:8F:C8:19:90:AA:C6:04:D6:AD:8D:B6:E9:3F:C1:72:A5:63:7D:28
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019D394160AE5B95CD0679CAD311511AF237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 117A
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: B3XyW2oPD/P0KVsrPAPlFNMdullqE8aucr/LQEP6kQg=)
2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:60:ae:5b:95:cd:06:79:ca:d3:11:51:1a:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=de8fc81990aac604d6ad8db6e93fc172a5637d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:18:21:b8:2e:0e:ff:06:3c:f4:cc:48:b2:
87:46:76:ac:4c:b3:93:38:28:2c:27:99:c9:bf:c7:
d4:05:45:8d:48:83:77:15:e9:38:27:4f:2b:f7:5b:
7c:8d:8d:4f:8c:86:0e:9d:15:1e:02:bb:bf:7b:48:
54:7a:71:6c:97:9e:c5:5e:c9:05:4f:90:40:29:02:
bf:39:f3:3a:5e:34:01:ef:1e:eb:da:29:f7:50:4b:
95:14:9a:54:c3:a5:ca:2b:ec:47:08:8b:4c:33:a8:
16:aa:09:14:0d:ef:47:66:cf:71:ba:fd:25:26:5c:
f2:70:d3:b3:31:a5:7f:58:aa:85:c5:db:c5:ed:9f:
df:d4:3c:2a:b3:d2:1a:3a:8c:3a:a3:82:d5:af:32:
dc:15:19:9e:38:ef:df:0b:a3:50:15:0b:89:76:e6:
a3:31:71:b1:b9:ed:6b:63:19:d4:b9:1f:f1:d2:9c:
9c:c0:32:c3:32:b1:f5:a8:8f:ba:fb:f2:9f:56:b2:
00:c2:0e:ba:87:0e:08:33:c8:17:b7:16:65:b8:e9:
f2:d0:63:cc:b6:cd:62:6c:74:b4:5a:99:39:4d:a7:
a6:9b:56:53:55:28:da:d6:28:f0:9d:07:56:d0:a7:
f1:71:e2:9c:ef:f1:cd:69:e5:3d:98:b2:94:7e:bf:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:C8:19:90:AA:C6:04:D6:AD:8D:B6:E9:3F:C1:72:A5:63:7D:28
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:e2:f4:fe:2a:35:2c:39:79:78:ab:77:b8:57:5d:0f:48:
27:f5:ae:52:25:9f:67:6a:ca:df:2b:de:47:64:48:4d:1e:d8:
ff:f8:9e:2b:bf:e6:cd:47:ce:81:98:13:04:cb:24:11:7e:f0:
c1:43:72:5b:4c:b9:cf:4c:c4:6c:4a:e5:58:3c:72:94:6b:17:
a2:4e:14:06:66:a9:3a:16:ae:78:f7:45:27:d9:14:d2:ad:23:
39:a0:15:48:af:b3:f0:f2:5e:ac:21:72:8a:e5:f1:68:84:f0:
f2:88:3b:80:07:45:16:0a:09:5c:b3:d9:72:be:13:7a:36:3d:
4f:4f:b8:9d:c9:0d:53:13:39:ef:f3:26:f2:ea:51:c4:cf:90:
f0:bd:62:e4:db:89:00:75:7a:07:3b:ab:fb:00:09:ec:af:a6:
83:2d:6c:f0:6a:fd:fe:53:80:73:5b:48:27:35:36:69:39:0e:
dc:90:c9:84:52:5d:2c:11:86:d1:e9:ef:dd:61:1c:70:44:fc:
a8:d0:78:6d:4d:18:6c:e0:86:a5:1b:16:7f:46:50:13:35:d6:
78:63:8e:42:ae:2e:60:a6:16:c2:89:b5:ac:ab:8f:f9:f1:92:
7e:8d:99:66:6b:8e:7e:76:78:96:82:24:a8:bb:e4:d4:80:c9:
93:5c:a8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWCuW5XNBnnK0xFRGvI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx
ODBmNTMwHhcNMjYwMzI5MTEwMTE4WhcNMjYwMzMwMTEwMTE4WjAzMTEwLwYDVQQD
EyhkZThmYzgxOTkwYWFjNjA0ZDZhZDhkYjZlOTNmYzE3MmE1NjM3ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8sYIbguDv8GPPTMSLKHRnasTLOT
OCgsJ5nJv8fUBUWNSIN3Fek4J08r91t8jY1PjIYOnRUeAru/e0hUenFsl57FXskF
T5BAKQK/OfM6XjQB7x7r2in3UEuVFJpUw6XKK+xHCItMM6gWqgkUDe9HZs9xuv0l
JlzycNOzMaV/WKqFxdvF7Z/f1Dwqs9IaOow6o4LVrzLcFRmeOO/fC6NQFQuJduaj
MXGxue1rYxnUuR/x0pycwDLDMrH1qI+6+/KfVrIAwg66hw4IM8gXtxZluOny0GPM
ts1ibHS0Wpk5Taemm1ZTVSja1ijwnQdW0KfxceKc7/HNaeU9mLKUfr8bAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6PyBmQqsYE1q2Ntuk/wXKlY30oMB8GA1UdIwQY
MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt
MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1
LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG7i9P4q
NSw5eXird7hXXQ9IJ/WuUiWfZ2rK3yveR2RITR7Y//ieK7/mzUfOgZgTBMskEX7w
wUNyW0y5z0zEbErlWDxylGsXok4UBmapOhauePdFJ9kU0q0jOaAVSK+z8PJerCFy
iuXxaITw8og7gAdFFgoJXLPZcr4TejY9T0+4nckNUxM57/Mm8upRxM+Q8L1i5NuJ
AHV6Bzur+wAJ7K+mgy1s8Gr9/lOAc1tIJzU2aTkO3JDJhFJdLBGG0env3WEccET8
qNB4bU0YbOCGpRsWf0ZQEzXWeGOOQq4uYKYWwom1rKuP+fGSfo2ZZmuOfnZ4loIk
qLvk1IDJk1yoyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:46 2026 by rpki-client