Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: k3q9PwKcl7n2knwZO8b9Uy8N0v8NUNg3mCG95PCR4BI=
Subject key identifier: 30:A4:29:1D:94:FF:44:AB:E0:C1:4E:B1:A0:8D:27:61:E8:AB:CD:EA
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019D2703D5440663A3B5763F6B23322C3CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 0779
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: dS9tmrNbJQpTKO9N3MnvcD5M8d27DiFcNNIjwyWPX9A=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d5:44:06:63:a3:b5:76:3f:6b:23:32:2c:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=30a4291d94ff44abe0c14eb1a08d2761e8abcdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:2f:04:f3:28:67:ad:49:f5:17:81:a5:8b:
86:c2:c1:fe:a4:20:41:dc:b1:4f:0f:09:d5:3d:c8:
05:1f:ef:7b:7a:9d:a4:c0:90:61:b8:2e:6b:32:ba:
d0:70:aa:dd:ba:f2:44:9d:47:96:cb:f3:63:2a:60:
26:65:26:21:2d:6e:73:5e:00:95:5e:a9:79:6e:8d:
18:a3:84:3a:3b:81:1e:dd:1e:18:81:46:16:04:83:
67:ec:4b:c9:77:29:a5:80:b7:b1:20:3b:9d:0e:76:
0a:8d:fa:83:19:28:88:5e:aa:49:e7:00:47:b0:98:
fc:f5:f6:7a:69:7d:7f:4f:f7:21:6e:ba:76:61:d8:
b8:2b:7b:9b:5d:8c:cd:8b:18:fe:0c:04:29:8b:d1:
0f:ea:73:dd:4e:51:84:22:9e:64:71:3d:8f:0b:a9:
b4:1e:5f:86:4e:87:2f:1b:7f:a6:d6:f3:6b:e6:82:
82:43:c7:59:f7:8a:9f:cf:75:30:ea:a8:cd:2d:4a:
1a:9e:4a:d7:29:ec:32:32:f1:d4:03:db:c0:e6:79:
e0:64:6b:30:10:06:5d:8e:f7:64:d5:01:f2:66:65:
a4:23:7f:4c:c3:16:2b:12:9e:3a:7a:a2:c5:60:89:
4c:ef:a2:b8:87:11:9e:46:11:35:06:4e:cc:3c:db:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:29:1D:94:FF:44:AB:E0:C1:4E:B1:A0:8D:27:61:E8:AB:CD:EA
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:19:d9:82:af:3d:4b:a4:8d:8b:37:f9:2c:a7:d9:23:e1:
c6:c8:75:bd:cf:78:4f:ea:4f:91:de:38:ac:74:7d:1c:5f:17:
a2:2e:31:ba:5f:bc:e7:25:ac:a9:40:2f:08:5b:c7:4e:b5:44:
23:07:cd:bb:40:33:ff:4a:34:ba:df:2b:11:14:e0:3a:2a:e3:
17:d4:e1:e2:d4:7f:43:86:19:f5:2c:51:2f:e5:66:85:9f:2f:
0a:54:1a:38:bc:cc:24:b8:dc:69:21:6d:ec:d0:76:5d:87:6c:
9c:d7:3e:6e:08:e3:ce:a3:cc:76:95:4e:33:c2:b7:de:e7:05:
eb:02:db:9f:2d:3b:fb:1f:6b:78:ba:49:13:a1:0d:0c:d5:83:
50:99:32:e4:02:a2:70:41:a0:b1:d8:ae:f3:5f:93:fe:9e:4f:
aa:b7:aa:61:0a:70:82:5f:19:c8:0e:6b:95:55:f6:f9:3f:39:
ea:d9:8f:28:ae:fa:39:f9:7d:54:65:62:e5:b6:3c:6f:dc:a2:
13:15:a0:87:0f:71:da:59:14:0d:10:81:f7:79:f6:f9:dd:11:
de:0d:a6:b1:9c:6a:50:4c:7f:73:28:97:cc:f3:a5:90:a0:de:
97:38:15:0f:20:41:e4:82:fe:58:79:03:74:70:ed:74:55:32:
81:ef:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client