Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: jNMD2aWpyJ2q2Z2kbFekGA06LPDiZxLSO4wPBcVzDKo=
Subject key identifier: E4:87:5B:F3:CB:D2:55:E6:5B:54:89:76:0D:22:81:AE:B3:0F:18:E5
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019CBA39AC17F9ECFF250CCD428942D33620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 073F
Signing time: Wed 04 Mar 2026 19:01:07 +0000
Manifest this update: Wed 04 Mar 2026 19:01:07 +0000
Manifest next update: Thu 05 Mar 2026 19:01:07 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: iRgR8cfJP5coygBorWssT4HUXhINU6ROgmu4hystAp8=)
4: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:ac:17:f9:ec:ff:25:0c:cd:42:89:42:d3:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Mar 4 19:01:07 2026 GMT
Not After : Mar 5 19:01:07 2026 GMT
Subject: CN=e4875bf3cbd255e65b5489760d2281aeb30f18e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:2c:fd:f4:ab:f3:95:59:81:c4:97:3b:f3:
6e:b7:1b:c1:1c:4f:2d:83:c1:5d:12:63:2a:0d:ee:
50:1c:c3:b9:75:8b:57:cb:8d:a1:d4:5f:cc:e7:a8:
40:32:6a:a4:f9:8c:4f:f4:c0:4c:b7:fc:8a:c4:85:
5c:ca:c0:c6:49:e9:6e:04:84:ed:36:19:f9:31:e1:
ad:49:e0:1c:f5:7a:6c:d7:5a:eb:84:0c:44:e8:f3:
8c:0f:dd:4a:46:12:d9:be:91:12:1d:9c:e8:18:1c:
56:eb:cc:6b:ac:59:3c:9b:e8:76:48:81:1a:cc:8f:
ad:a9:e2:10:6a:7e:ea:c0:55:1c:68:92:ce:8a:fd:
69:45:f4:78:89:8d:37:67:0d:1f:af:8e:0a:7a:e1:
5c:1a:c9:8d:66:b5:68:46:ab:85:d0:72:74:c9:6d:
9a:0e:cc:3c:b9:4e:40:3e:19:86:1f:bd:52:dd:94:
3f:12:ab:c5:d9:0a:88:99:89:c4:81:0e:6f:d8:3f:
fe:af:fc:11:4f:eb:8e:3f:98:36:f1:33:e9:5f:b5:
a0:b4:19:7a:b0:d6:eb:fd:30:8e:73:5c:c4:d4:2f:
ac:8d:fe:f7:88:83:fd:c8:d9:1c:43:ae:07:08:a2:
66:4a:b2:c6:fc:71:61:63:ab:95:c3:67:c9:00:f5:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:5B:F3:CB:D2:55:E6:5B:54:89:76:0D:22:81:AE:B3:0F:18:E5
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cb:a8:80:93:f0:00:c6:b4:99:6c:f5:b9:07:b1:cd:fa:85:
e8:92:c3:38:bf:48:29:cb:bd:25:18:95:e3:01:33:c4:03:ab:
4b:9f:7b:d1:38:51:2a:53:65:de:b5:3d:13:90:7b:25:d6:ea:
b4:61:64:a8:01:af:89:db:50:c5:a4:f6:11:0d:df:2e:cc:bc:
56:1b:80:4d:bf:b4:58:0e:23:1c:f8:21:ce:3a:30:f4:2c:3e:
6e:f3:15:2d:b1:f5:88:41:14:7f:4d:58:32:34:dc:c0:17:c4:
7b:76:24:6d:a5:b6:b5:fc:fe:42:df:53:bb:09:f5:a2:b9:6e:
79:e8:21:60:07:27:78:37:81:b5:d0:76:5a:f9:da:b0:93:a9:
6b:f8:38:8d:3c:99:4d:6a:84:8e:7a:c7:13:f0:e5:0d:4e:1c:
87:f2:34:f6:5b:c9:44:e4:8b:e9:60:2f:9d:ab:6f:a5:72:46:
31:20:66:f6:2d:bf:8d:49:5e:74:03:ba:21:4b:65:f7:13:f4:
e5:30:bc:72:f1:b3:a9:5a:12:7b:21:45:7e:1d:60:75:81:52:
cb:42:41:18:df:e8:7b:64:47:06:df:62:8c:28:9c:0d:4e:15:
26:ff:c0:39:e7:fa:40:5c:bd:69:8b:db:89:7d:2e:27:81:b1:
3e:0d:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:39:02 2026 by rpki-client