Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: StJd6M+H46cmGufXPmrhkGqC98KHgUbBdCXgbt1Odvc=
Subject key identifier: CE:0D:24:F7:9C:0A:B5:AC:88:AB:E4:95:F0:C7:9C:7F:B0:96:A7:18
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019DA86762CF34F3830076FD074EE4D545A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 07BC
Signing time: Mon 20 Apr 2026 01:00:40 +0000
Manifest this update: Mon 20 Apr 2026 01:00:40 +0000
Manifest next update: Tue 21 Apr 2026 01:00:40 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: lOZSZVb/SCeS6Jp0A1YKXqSqD2ZZOmWKDYmLJpmilAU=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:62:cf:34:f3:83:00:76:fd:07:4e:e4:d5:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Apr 20 01:00:40 2026 GMT
Not After : Apr 21 01:00:40 2026 GMT
Subject: CN=ce0d24f79c0ab5ac88abe495f0c79c7fb096a718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:8d:79:1c:f8:2f:8e:1e:80:c0:69:6a:da:
ca:3f:34:3f:db:21:03:b4:c0:d9:98:41:f7:99:4e:
12:d6:0d:dd:f9:4d:49:90:7c:3b:8a:a7:2c:80:0c:
bb:ed:bd:87:68:b7:de:d1:99:96:b9:c5:0a:90:06:
59:86:bf:17:d1:f9:f9:65:3a:cd:75:38:76:f9:56:
24:31:fd:a4:d2:83:08:bf:e9:7f:17:be:11:77:ca:
16:d4:a4:ab:96:eb:68:b6:42:94:40:10:a0:6f:e3:
53:5e:bd:b3:06:62:73:8b:dc:28:8f:c2:3a:ae:f4:
ea:7c:a3:bd:85:39:d5:58:70:70:eb:b6:d1:84:a9:
4f:68:85:1f:8b:65:0e:e8:47:49:91:43:d7:4c:cd:
46:29:5a:69:b5:ca:70:29:f6:ad:17:de:31:0c:5b:
b0:2e:81:e3:b1:36:52:dc:d5:03:9c:fe:9e:04:1f:
db:84:e6:0b:2d:86:68:7e:c9:b2:0f:31:82:7b:3e:
6e:17:43:93:a8:58:6f:43:84:12:48:26:e5:de:5a:
45:92:a7:8c:3d:fc:5f:3f:c2:c7:dd:d8:4d:bc:97:
08:98:8f:c7:8a:b7:3e:d7:a7:9c:9f:a4:b6:12:9d:
46:3d:c1:d4:2e:5a:30:74:6d:94:b1:06:29:65:8e:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:24:F7:9C:0A:B5:AC:88:AB:E4:95:F0:C7:9C:7F:B0:96:A7:18
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:89:5a:15:5f:a1:2a:20:19:19:29:ae:9e:66:ec:4d:89:
43:f9:d5:01:e8:b8:b7:bc:ac:de:a9:2a:d4:09:2a:b4:47:cb:
6d:f0:8a:9c:9e:96:69:05:07:a1:2b:e8:af:3f:64:89:38:2d:
81:12:31:e1:d3:81:3b:51:15:84:94:7b:4a:fa:e4:b8:19:9e:
ac:6f:53:21:08:cc:a0:64:9b:e6:71:c2:74:ef:a2:61:7a:df:
65:85:f7:28:58:9b:5e:a7:df:4c:35:be:a9:50:c5:e6:28:7c:
00:7e:70:5d:68:bf:47:cf:7f:eb:b5:f0:db:2e:2c:55:b3:bf:
7f:94:c8:e7:ce:04:ac:b1:58:77:47:d2:32:33:04:8c:0b:c8:
d6:4d:bd:9c:59:07:1a:02:54:ba:0b:32:4d:61:ee:e9:c7:cd:
61:2d:cf:ae:57:cb:72:6e:ee:e6:8f:96:1b:1a:dd:ca:69:39:
32:d0:9f:f0:e6:44:f3:38:d2:74:6a:56:66:88:c9:5f:94:38:
51:6b:a0:52:6f:d7:45:17:bd:d6:0f:d3:d4:eb:ea:69:09:28:
1c:9a:f9:29:ed:97:67:2b:44:e6:fc:74:3a:47:da:5f:0e:36:
fa:66:33:45:5a:90:48:5f:7b:9f:d2:ab:d0:76:71:e3:e2:74:
92:98:d5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2oZ2LPNPODAHb9B07k1UWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjYwNDIwMDEwMDQwWhcNMjYwNDIxMDEwMDQwWjAzMTEwLwYDVQQD
EyhjZTBkMjRmNzljMGFiNWFjODhhYmU0OTVmMGM3OWM3ZmIwOTZhNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mmNeRz4L44egMBpatrKPzQ/2yED
tMDZmEH3mU4S1g3d+U1JkHw7iqcsgAy77b2HaLfe0ZmWucUKkAZZhr8X0fn5ZTrN
dTh2+VYkMf2k0oMIv+l/F74Rd8oW1KSrlutotkKUQBCgb+NTXr2zBmJzi9woj8I6
rvTqfKO9hTnVWHBw67bRhKlPaIUfi2UO6EdJkUPXTM1GKVpptcpwKfatF94xDFuw
LoHjsTZS3NUDnP6eBB/bhOYLLYZofsmyDzGCez5uF0OTqFhvQ4QSSCbl3lpFkqeM
PfxfP8LH3dhNvJcImI/Hirc+16ecn6S2Ep1GPcHULlowdG2UsQYpZY5TwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4NJPecCrWsiKvklfDHnH+wlqcYMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqmJWhVf
oSogGRkprp5m7E2JQ/nVAei4t7ys3qkq1AkqtEfLbfCKnJ6WaQUHoSvorz9kiTgt
gRIx4dOBO1EVhJR7SvrkuBmerG9TIQjMoGSb5nHCdO+iYXrfZYX3KFibXqffTDW+
qVDF5ih8AH5wXWi/R89/67Xw2y4sVbO/f5TI584ErLFYd0fSMjMEjAvI1k29nFkH
GgJUugsyTWHu6cfNYS3PrlfLcm7u5o+WGxrdymk5MtCf8OZE8zjSdGpWZojJX5Q4
UWugUm/XRRe91g/T1OvqaQkoHJr5Ke2XZytE5vx0OkfaXw42+mYzRVqQSF97n9Kr
0HZx4+J0kpjVyw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:51:28 2026 by rpki-client