Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: Kj1Xuwl1pggKvaWFtj7VWR0SN3gYxl0ZJGRqmESwrHM=
Subject key identifier: E0:73:19:D2:94:0D:73:D0:54:FF:F4:14:61:1C:EA:D8:9C:0C:C3:59
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019DA6793064BD65F296FAC049A3328AB694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 07BB
Signing time: Sun 19 Apr 2026 16:00:53 +0000
Manifest this update: Sun 19 Apr 2026 16:00:53 +0000
Manifest next update: Mon 20 Apr 2026 16:00:53 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 2MuKMmrwuINEt3mKaFLTU5zd95rItFl/6hs5y55SMU4=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:79:30:64:bd:65:f2:96:fa:c0:49:a3:32:8a:b6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Apr 19 16:00:53 2026 GMT
Not After : Apr 20 16:00:53 2026 GMT
Subject: CN=e07319d2940d73d054fff414611cead89c0cc359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:80:62:14:2f:56:43:b4:03:01:9d:23:4a:
42:68:fb:33:3d:ee:d1:8d:ff:8c:68:3a:c2:13:16:
fb:6c:41:ff:35:f0:e1:df:45:16:43:b6:f8:2c:10:
d9:96:6f:98:7b:b7:70:59:80:e6:2f:da:d2:3c:4a:
fd:14:e3:40:2e:78:a8:bd:0e:01:f3:31:3c:db:32:
9b:3c:59:7f:3a:ef:30:c5:8d:6b:41:56:95:b1:f8:
97:55:3c:47:40:30:96:53:47:fe:35:fb:7a:b8:c3:
d1:5f:f2:61:b9:3f:3f:58:27:94:df:42:fc:4e:21:
aa:68:c2:25:b1:3f:83:a4:9f:0e:7f:7f:49:ee:7f:
f6:ff:a8:c4:7c:c2:05:14:5f:75:58:33:54:d9:cb:
1a:cc:a6:54:ba:1d:11:04:15:7d:db:56:88:42:68:
36:ff:87:a6:04:6d:2a:c3:9e:7c:e3:14:ff:95:88:
90:44:f6:8c:ac:c0:75:27:4b:93:70:55:3d:12:53:
a2:22:55:7d:e9:70:0c:45:cb:59:a0:5d:ca:01:98:
91:fd:4b:23:e6:4e:fc:c9:ea:e3:09:14:72:fe:e8:
63:84:c5:78:a5:bb:97:23:54:3b:1f:0e:c2:f7:1b:
f4:f2:52:5a:57:90:23:dd:21:aa:52:a6:6f:f2:2f:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:19:D2:94:0D:73:D0:54:FF:F4:14:61:1C:EA:D8:9C:0C:C3:59
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e5:6f:b4:3c:80:bc:9b:bb:40:71:1a:ee:20:d5:ff:a3:6d:
92:33:8a:76:dc:dd:e5:27:d6:ee:c1:9c:24:7e:66:b5:c7:19:
27:18:73:07:2d:0d:f3:9b:41:e8:b3:6b:de:81:c7:b9:73:0a:
4b:2b:df:b0:77:20:01:bc:2c:ce:05:82:15:e1:93:b4:ba:24:
2f:5c:6b:0d:06:90:08:86:ba:19:45:2d:95:ac:e5:f0:6b:15:
74:89:0f:7a:6a:28:2e:8d:d1:91:03:3d:56:46:f2:13:49:e1:
d3:1e:b8:ff:a3:e3:46:fc:5b:db:f8:f6:63:cf:f6:97:b8:99:
d4:52:ae:8a:92:80:d5:47:2a:22:60:fe:85:92:5b:88:a8:7f:
f2:02:47:d6:f0:28:ab:83:82:fd:05:70:9d:8e:92:1a:bd:55:
d7:09:a7:11:10:de:96:58:a6:37:c4:a0:b8:e0:27:03:4c:b7:
58:49:a8:a2:e7:9e:28:32:c6:d8:05:19:65:ac:56:20:ee:ce:
15:c2:26:51:46:a4:ba:97:4b:e7:cb:1e:2b:2b:9f:be:bf:4d:
6a:cd:bd:a6:14:64:41:b7:9a:e2:2f:ec:94:67:91:2a:42:18:
8a:34:9a:07:b4:74:89:2d:cf:3b:e1:d1:e5:2c:4a:92:c3:74:
a5:8b:d6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2meTBkvWXylvrASaMyiraUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjYwNDE5MTYwMDUzWhcNMjYwNDIwMTYwMDUzWjAzMTEwLwYDVQQD
EyhlMDczMTlkMjk0MGQ3M2QwNTRmZmY0MTQ2MTFjZWFkODljMGNjMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3uAYhQvVkO0AwGdI0pCaPszPe7R
jf+MaDrCExb7bEH/NfDh30UWQ7b4LBDZlm+Ye7dwWYDmL9rSPEr9FONALniovQ4B
8zE82zKbPFl/Ou8wxY1rQVaVsfiXVTxHQDCWU0f+Nft6uMPRX/JhuT8/WCeU30L8
TiGqaMIlsT+DpJ8Of39J7n/2/6jEfMIFFF91WDNU2csazKZUuh0RBBV921aIQmg2
/4emBG0qw5584xT/lYiQRPaMrMB1J0uTcFU9ElOiIlV96XAMRctZoF3KAZiR/Usj
5k78yerjCRRy/uhjhMV4pbuXI1Q7Hw7C9xv08lJaV5Aj3SGqUqZv8i9k2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBzGdKUDXPQVP/0FGEc6ticDMNZMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuVvtDyA
vJu7QHEa7iDV/6NtkjOKdtzd5SfW7sGcJH5mtccZJxhzBy0N85tB6LNr3oHHuXMK
SyvfsHcgAbwszgWCFeGTtLokL1xrDQaQCIa6GUUtlazl8GsVdIkPemooLo3RkQM9
VkbyE0nh0x64/6PjRvxb2/j2Y8/2l7iZ1FKuipKA1UcqImD+hZJbiKh/8gJH1vAo
q4OC/QVwnY6SGr1V1wmnERDellimN8SguOAnA0y3WEmooueeKDLG2AUZZaxWIO7O
FcImUUakupdL58seKyufvr9Nas29phRkQbea4i/slGeRKkIYijSaB7R0iS3PO+HR
5SxKksN0pYvWyA==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:46 2026 by rpki-client