Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: vKJswc2SRHHSaSLEnCV80QlG41StAESoAgO+xd/HYY4=
Subject key identifier: B8:8C:8D:B2:EF:0C:5C:CE:CE:CE:1B:59:1E:BF:AC:C9:75:B4:11:E2
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01A1833EEBD930FD63DEFE07C6BB5A503ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 09BB
Signing time: Wed 28 Oct 2026 16:01:41 +0000
Manifest this update: Wed 28 Oct 2026 16:01:41 +0000
Manifest next update: Thu 29 Oct 2026 16:01:41 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 1u79/inXCYG3e8dvmHDyGrZc7a243Llpivv0r8tey04=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:eb:d9:30:fd:63:de:fe:07:c6:bb:5a:50:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Oct 28 16:01:41 2026 GMT
Not After : Oct 29 16:01:41 2026 GMT
Subject: CN=b88c8db2ef0c5ccecece1b591ebfacc975b411e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:e7:57:ea:cc:fb:db:cc:0e:0c:6a:10:f0:
95:c5:40:bb:3a:fc:21:7c:f8:e5:93:a5:c2:c1:d8:
8c:69:aa:a1:61:33:65:c7:11:a9:c6:dd:83:34:82:
c8:3d:5c:79:c4:b6:e1:18:11:63:ad:c8:81:66:96:
1d:1c:49:ae:f4:e0:87:cf:17:ec:bf:75:21:d3:0c:
48:b3:36:60:da:d1:86:52:a6:34:6a:87:fe:2f:ee:
75:d6:fd:f9:0b:d2:5a:a7:52:ee:14:cc:21:87:c5:
f9:8c:56:fd:f5:5f:05:44:5c:c1:0b:75:6d:29:d4:
62:c5:5d:e7:1d:7d:1d:4d:82:71:c2:f7:f5:6e:fb:
b3:7b:7c:ed:97:39:87:5e:15:41:44:0d:7c:c5:59:
91:49:bf:66:5a:8e:99:4b:56:e6:5c:87:52:9f:99:
8d:f0:b3:18:4c:9a:08:19:07:3f:b7:f6:7b:36:0a:
52:cf:25:77:1c:35:49:73:07:eb:e3:ce:e4:12:e1:
65:df:a4:ac:9b:ab:43:4b:b8:48:d7:a8:2d:aa:96:
69:11:d3:41:40:73:bc:1b:1a:58:7e:16:9e:7a:c5:
95:96:c7:c8:2d:d7:88:3d:4b:7a:19:89:2b:9a:5f:
8f:74:35:1f:6a:4f:64:6e:6a:7f:18:5b:f7:48:f3:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:8D:B2:EF:0C:5C:CE:CE:CE:1B:59:1E:BF:AC:C9:75:B4:11:E2
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:44:d0:a1:bd:9d:8e:e0:11:fc:42:51:c4:fb:88:18:4c:
bd:e1:06:0c:15:5d:2b:e2:b9:63:fe:51:1f:0b:91:65:1a:72:
c6:25:44:0e:53:f9:48:b5:da:17:2e:5b:48:66:d7:5e:54:b0:
6e:a3:ae:9c:ee:5c:3c:13:57:df:55:36:43:26:7f:cb:f5:32:
d5:29:61:63:88:fa:3d:43:2e:b7:cb:2b:0f:ed:06:f9:3e:02:
81:a2:32:0e:e2:78:2d:30:6d:0a:50:a3:6f:6c:4d:f3:90:19:
da:2b:d9:9b:45:ac:11:d6:76:00:5d:10:e4:c9:1f:0b:aa:6f:
78:ab:c2:20:62:be:aa:c2:46:fa:8f:a7:91:d5:06:f6:11:41:
cf:28:1c:ae:be:02:a7:b8:8f:5a:31:19:16:3c:6d:40:d7:f4:
41:8a:8b:f1:1e:6d:7f:c2:7d:1b:0f:b7:da:16:23:56:cd:c1:
fd:8f:6a:47:5e:35:a7:c4:cd:16:7f:35:67:f1:40:9b:b8:69:
bf:77:67:99:78:9e:2f:da:4f:98:f2:de:4f:ea:f2:c2:b3:53:
c5:bf:d9:00:1b:a3:82:09:f7:a6:10:90:d5:f0:0a:5a:c3:3b:
c0:8e:44:49:83:e4:49:98:fd:a1:fa:af:43:d7:6c:07:db:1b:
51:07:f9:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPuvZMP1j3v4HxrtaUD7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjYxMDI4MTYwMTQxWhcNMjYxMDI5MTYwMTQxWjAzMTEwLwYDVQQD
EyhiODhjOGRiMmVmMGM1Y2NlY2VjZTFiNTkxZWJmYWNjOTc1YjQxMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1fnV+rM+9vMDgxqEPCVxUC7Ovwh
fPjlk6XCwdiMaaqhYTNlxxGpxt2DNILIPVx5xLbhGBFjrciBZpYdHEmu9OCHzxfs
v3Uh0wxIszZg2tGGUqY0aof+L+511v35C9Jap1LuFMwhh8X5jFb99V8FRFzBC3Vt
KdRixV3nHX0dTYJxwvf1bvuze3ztlzmHXhVBRA18xVmRSb9mWo6ZS1bmXIdSn5mN
8LMYTJoIGQc/t/Z7NgpSzyV3HDVJcwfr487kEuFl36Ssm6tDS7hI16gtqpZpEdNB
QHO8GxpYfhaeesWVlsfILdeIPUt6GYkrml+PdDUfak9kbmp/GFv3SPPmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiMjbLvDFzOzs4bWR6/rMl1tBHiMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZxE0KG9
nY7gEfxCUcT7iBhMveEGDBVdK+K5Y/5RHwuRZRpyxiVEDlP5SLXaFy5bSGbXXlSw
bqOunO5cPBNX31U2QyZ/y/Uy1SlhY4j6PUMut8srD+0G+T4CgaIyDuJ4LTBtClCj
b2xN85AZ2ivZm0WsEdZ2AF0Q5MkfC6pveKvCIGK+qsJG+o+nkdUG9hFBzygcrr4C
p7iPWjEZFjxtQNf0QYqL8R5tf8J9Gw+32hYjVs3B/Y9qR141p8TNFn81Z/FAm7hp
v3dnmXieL9pPmPLeT+rywrNTxb/ZABujggn3phCQ1fAKWsM7wI5ESYPkSZj9ofqv
Q9dsB9sbUQf5IA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:27 2026 by rpki-client