Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: snZjltb1yaE3qeBnu2iof2K6MKxsbqSHgLwXcssn+YQ=
Subject key identifier: AB:A2:6F:6C:D0:38:FF:63:D3:1E:E2:1F:A9:78:DD:7C:EC:D5:2B:AC
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019FA26006653E6F9445C39C90DFB479D54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 08C2
Signing time: Mon 27 Jul 2026 07:00:29 +0000
Manifest this update: Mon 27 Jul 2026 07:00:29 +0000
Manifest next update: Tue 28 Jul 2026 07:00:29 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: /DK/qHERB8igG913itUCbeDrWrXsDP6bxvNXNre3Q1M=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:06:65:3e:6f:94:45:c3:9c:90:df:b4:79:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jul 27 07:00:29 2026 GMT
Not After : Jul 28 07:00:29 2026 GMT
Subject: CN=aba26f6cd038ff63d31ee21fa978dd7cecd52bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:f1:bd:d2:b8:0b:56:ec:4e:7e:46:8e:51:
6c:ca:6a:fb:6b:5d:8c:43:8b:42:82:9a:0b:8d:5b:
78:69:07:8d:cf:5b:07:fa:e4:19:4c:1f:83:96:d6:
cb:76:00:f2:82:68:54:97:00:1b:d2:8a:a4:8b:2c:
c5:9e:53:45:1d:f9:6c:c2:87:6e:db:f2:56:66:c7:
cc:a0:7e:ce:49:c4:20:a2:cf:e7:c4:95:5a:7b:82:
32:fb:4e:37:32:86:ea:84:9b:be:bd:41:09:0e:8d:
22:9a:7d:c2:52:a6:e6:cd:9f:c9:a4:3c:72:53:6c:
29:23:fa:04:b8:5a:78:ea:e2:3e:2a:9f:cb:05:b6:
cf:59:34:f2:65:e6:91:13:57:d1:a2:67:e9:77:aa:
37:05:01:5c:d4:9f:ac:e7:42:3f:4a:7a:6c:6a:97:
83:67:c8:1b:b9:6b:ba:0a:a6:9c:f1:7d:cc:61:6d:
07:c5:17:fc:26:f8:0b:13:ae:ed:5a:72:c0:d7:44:
ca:c7:61:6c:71:ee:2b:6a:57:de:cd:0b:92:ec:06:
cf:fb:df:f7:92:40:c5:d3:d2:be:91:28:aa:3d:6d:
ba:8b:8f:19:f7:db:2e:c6:99:62:4b:7a:77:cf:15:
4f:ca:53:37:d2:ad:cf:98:fd:34:e2:d7:df:06:a2:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:6F:6C:D0:38:FF:63:D3:1E:E2:1F:A9:78:DD:7C:EC:D5:2B:AC
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:76:58:b6:7d:69:5b:44:35:ae:df:71:87:5a:0b:cc:28:52:
e0:ca:fc:01:47:55:9a:ab:54:57:ce:98:b0:72:68:25:62:b1:
ad:30:91:8d:71:d1:87:45:da:bd:2a:06:18:c5:b7:f6:d6:8e:
b1:a4:e0:84:f9:82:50:47:e5:91:bb:9f:f6:c1:8e:14:c7:48:
1b:57:95:cc:35:37:5d:c0:90:ea:0c:16:2f:52:32:f6:e5:5c:
28:d1:2e:24:f3:54:fe:4c:04:a1:3f:76:19:71:42:53:a8:f3:
e4:87:d0:9f:90:84:6d:b9:b0:89:1b:0a:f1:c7:7e:0b:79:df:
a0:69:f4:a6:28:44:51:4f:17:f8:26:7b:c1:bf:7b:f7:87:43:
4d:91:25:58:25:32:f3:6c:e9:93:71:62:37:4f:f6:97:5a:2d:
82:69:c5:4a:9b:50:07:4e:c0:65:4b:a3:4a:1e:0b:c2:2c:b8:
04:5a:3a:50:7b:b0:8e:d5:29:71:6c:1c:56:bd:38:9d:29:f3:
71:04:48:b5:1d:7e:d5:18:d5:22:68:1a:4d:fb:8d:d0:54:f2:
0d:f4:7e:d0:89:be:00:56:cc:e5:56:43:d2:77:ec:ac:5f:95:
40:68:03:bd:64:01:eb:99:d1:30:49:d9:9a:96:05:42:05:f7:
e0:bf:82:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYAZlPm+URcOckN+0edVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjYwNzI3MDcwMDI5WhcNMjYwNzI4MDcwMDI5WjAzMTEwLwYDVQQD
EyhhYmEyNmY2Y2QwMzhmZjYzZDMxZWUyMWZhOTc4ZGQ3Y2VjZDUyYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn7xvdK4C1bsTn5GjlFsymr7a12M
Q4tCgpoLjVt4aQeNz1sH+uQZTB+DltbLdgDygmhUlwAb0oqkiyzFnlNFHflswodu
2/JWZsfMoH7OScQgos/nxJVae4Iy+043MobqhJu+vUEJDo0imn3CUqbmzZ/JpDxy
U2wpI/oEuFp46uI+Kp/LBbbPWTTyZeaRE1fRomfpd6o3BQFc1J+s50I/SnpsapeD
Z8gbuWu6Cqac8X3MYW0HxRf8JvgLE67tWnLA10TKx2Fsce4ralfezQuS7AbP+9/3
kkDF09K+kSiqPW26i48Z99suxpliS3p3zxVPylM30q3PmP004tffBqLDYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuib2zQOP9j0x7iH6l43Xzs1SusMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHZYtn1p
W0Q1rt9xh1oLzChS4Mr8AUdVmqtUV86YsHJoJWKxrTCRjXHRh0XavSoGGMW39taO
saTghPmCUEflkbuf9sGOFMdIG1eVzDU3XcCQ6gwWL1Iy9uVcKNEuJPNU/kwEoT92
GXFCU6jz5IfQn5CEbbmwiRsK8cd+C3nfoGn0pihEUU8X+CZ7wb9794dDTZElWCUy
82zpk3FiN0/2l1otgmnFSptQB07AZUujSh4Lwiy4BFo6UHuwjtUpcWwcVr04nSnz
cQRItR1+1RjVImgaTfuN0FTyDfR+0Im+AFbM5VZD0nfsrF+VQGgDvWQB65nRMEnZ
mpYFQgX34L+Cbg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:15:44 2026 by rpki-client