Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: k8X9CSzvz0Hpan4djwUnb39i/tWRapdS7HMSra08PhU=
Subject key identifier: AC:A9:A4:E2:89:BA:13:80:89:7A:51:C2:FB:93:BC:5B:E0:EE:59:01
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 019D37C0C5A90F1D13805E73CB0E21C29EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 15CC
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: WUHG6qPnaNdpqFTCNWzqH6jUVh9MC4iH7MkW/bJbsiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c5:a9:0f:1d:13:80:5e:73:cb:0e:21:c2:9e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=aca9a4e289ba1380897a51c2fb93bc5be0ee5901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:c9:5f:aa:6d:9c:53:61:0b:e8:75:e9:41:
50:01:59:39:e8:e8:13:a5:05:b2:7d:c2:84:e8:32:
5d:d5:12:89:99:ed:df:56:7e:3b:7c:49:a2:4c:da:
a1:b5:46:f1:38:6f:41:75:c8:8e:7b:c2:2d:d3:a5:
44:75:2b:d6:ba:ad:04:f1:3a:6c:c8:a6:5f:01:79:
97:81:e7:c3:b2:c0:d2:27:d0:e0:d7:cb:9a:dc:b9:
57:91:b6:6e:07:92:1d:55:f7:63:bb:ae:f2:a8:ea:
bb:f3:5d:61:8f:aa:29:b2:04:6c:08:f1:b1:6a:83:
3e:e2:54:3b:c5:bc:6f:7d:b3:0c:1e:5c:4a:7f:ce:
77:f2:fb:d1:bd:2c:15:1b:46:10:05:c5:23:76:39:
3e:61:82:1b:c6:ef:2e:30:d4:98:59:da:b5:ff:98:
bd:25:02:8e:f6:f3:39:67:dd:79:91:c5:ab:89:2b:
d2:5f:1c:33:5d:2c:11:03:d1:53:91:35:2e:37:81:
a5:cd:37:54:71:39:39:ca:8a:f3:ed:33:c2:72:a2:
b7:61:f8:2c:a9:f8:f0:5e:2b:78:26:40:e4:f8:b8:
c5:7b:16:54:da:ff:50:49:de:3f:b4:74:82:95:a2:
a6:67:27:b8:62:04:10:86:43:6a:87:93:c1:34:6d:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:A4:E2:89:BA:13:80:89:7A:51:C2:FB:93:BC:5B:E0:EE:59:01
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:4e:75:6e:b5:cd:ae:13:d0:45:2b:30:67:a0:eb:57:5d:
bc:c5:08:24:51:25:ed:04:14:4b:32:4e:89:9e:c8:2b:c3:12:
0e:ec:20:bc:5e:15:2e:da:43:8d:05:8f:e3:a1:5b:30:c3:ca:
eb:19:b7:a4:b4:80:99:43:54:a2:06:2b:f0:6f:a3:b0:1a:01:
17:36:ec:16:44:08:aa:b2:95:66:c6:3a:1b:2b:27:34:cc:8e:
d4:2f:ef:00:2a:c1:45:d9:83:4a:e4:1a:2b:41:90:4a:58:dc:
57:68:2f:dc:c0:81:2c:db:bb:61:64:9e:d2:36:0c:f7:fc:52:
b2:94:0b:53:87:56:cc:06:95:f7:56:d6:66:31:31:8c:61:02:
3b:10:ee:08:0f:e9:31:20:ab:06:15:a6:ed:d1:96:ae:87:8f:
99:9d:e1:ff:11:6a:d2:82:57:75:a4:ec:29:ca:f6:51:38:74:
ac:c5:c2:f4:65:38:7c:24:1a:41:72:21:ed:45:f7:a2:48:df:
b7:46:5e:b1:36:9f:e1:21:3c:ae:de:05:e5:18:d3:59:12:76:
72:cb:b7:70:68:fc:c3:e4:d9:4b:37:18:82:68:b0:e9:52:aa:
52:b3:2f:73:d4:f9:10:20:84:8b:e5:08:cf:53:bd:c2:0b:78:
99:28:68:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMWpDx0TgF5zyw4hwp7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjQ1NWIxYTg1OWJjNGQ2NjE4MTc1MDU1ZjBlYzg5NjA3
ZjA1MmQwHhcNMjYwMzI5MDQwMTEzWhcNMjYwMzMwMDQwMTEzWjAzMTEwLwYDVQQD
EyhhY2E5YTRlMjg5YmExMzgwODk3YTUxYzJmYjkzYmM1YmUwZWU1OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjJX6ptnFNhC+h16UFQAVk56OgT
pQWyfcKE6DJd1RKJme3fVn47fEmiTNqhtUbxOG9BdciOe8It06VEdSvWuq0E8Tps
yKZfAXmXgefDssDSJ9Dg18ua3LlXkbZuB5IdVfdju67yqOq7811hj6opsgRsCPGx
aoM+4lQ7xbxvfbMMHlxKf8538vvRvSwVG0YQBcUjdjk+YYIbxu8uMNSYWdq1/5i9
JQKO9vM5Z915kcWriSvSXxwzXSwRA9FTkTUuN4GlzTdUcTk5yorz7TPCcqK3Yfgs
qfjwXit4JkDk+LjFexZU2v9QSd4/tHSClaKmZye4YgQQhkNqh5PBNG0AyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyppOKJuhOAiXpRwvuTvFvg7lkBMB8GA1UdIwQY
MBaAFKwkVbGoWbxNZhgXUFXw7IlgfwUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjct
YzcxODM2MWQ0Mzc0LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjctYzcxODM2MWQ0Mzc0
LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpdOdW61
za4T0EUrMGeg61ddvMUIJFEl7QQUSzJOiZ7IK8MSDuwgvF4VLtpDjQWP46FbMMPK
6xm3pLSAmUNUogYr8G+jsBoBFzbsFkQIqrKVZsY6GysnNMyO1C/vACrBRdmDSuQa
K0GQSljcV2gv3MCBLNu7YWSe0jYM9/xSspQLU4dWzAaV91bWZjExjGECOxDuCA/p
MSCrBhWm7dGWroePmZ3h/xFq0oJXdaTsKcr2UTh0rMXC9GU4fCQaQXIh7UX3okjf
t0ZesTaf4SE8rt4F5RjTWRJ2csu3cGj8w+TZSzcYgmiw6VKqUrMvc9T5ECCEi+UI
z1O9wgt4mShogA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:28 2026 by rpki-client