Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: JVDFtsinOfwZx6pZzjpJ5V7yYVZNUmV0KwNPqvPfYs0=
Subject key identifier: 65:8B:F5:20:0D:96:FE:D8:3B:58:50:AA:E0:7D:8E:73:28:25:45:C3
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019F92ED21523F62C1BE3118809B3923B5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 08BA
Signing time: Fri 24 Jul 2026 07:00:41 +0000
Manifest this update: Fri 24 Jul 2026 07:00:41 +0000
Manifest next update: Sat 25 Jul 2026 07:00:41 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 8uPbvnDOsMHVozffpWBVoLJn/REOGXh1wdKYWBPlDuw=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:21:52:3f:62:c1:be:31:18:80:9b:39:23:b5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jul 24 07:00:41 2026 GMT
Not After : Jul 25 07:00:41 2026 GMT
Subject: CN=658bf5200d96fed83b5850aae07d8e73282545c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:46:99:83:69:48:3b:36:d9:d8:5a:96:ba:
1a:59:15:b0:bd:e0:bd:bb:b2:2f:94:69:25:ab:e9:
eb:eb:dd:a9:b2:3d:c5:bd:be:d4:83:af:22:0b:f4:
80:5e:24:2d:e0:03:1d:75:e4:89:7b:3a:98:c9:2b:
cc:1e:31:f9:03:5d:7d:96:e7:d7:a5:e3:20:d7:7d:
67:05:a2:4d:1f:ac:e2:86:02:21:ad:f7:52:33:c7:
c8:6c:4d:0b:19:dd:6a:28:3c:c5:c1:66:2b:a6:af:
b5:b4:97:32:2b:d7:7d:7f:dc:bd:1b:49:10:d9:35:
3d:6e:fc:47:81:e0:7a:9a:0b:d5:b7:bf:3f:ad:80:
00:56:5e:78:2e:a6:05:8a:69:a9:2f:f4:19:a4:d2:
d1:6e:8f:5f:11:1f:62:7d:76:dd:44:64:d7:56:08:
8b:55:95:52:7a:7a:af:02:ef:18:25:81:3c:ca:e0:
c6:db:30:d9:23:19:02:10:9c:73:dc:94:a6:34:63:
69:1e:d6:22:fd:3b:88:f4:f1:1d:e2:02:d7:45:c7:
fc:0e:0c:06:c2:27:9c:60:c4:67:cc:90:fc:7c:d1:
7b:8f:9c:ee:2b:63:72:2a:0b:4e:e4:a9:ad:40:17:
a4:ff:85:30:bb:7f:94:30:e2:1e:b1:79:fa:88:77:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:F5:20:0D:96:FE:D8:3B:58:50:AA:E0:7D:8E:73:28:25:45:C3
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:13:0a:c6:88:f1:3b:16:7f:d5:6a:63:74:e3:e9:26:a3:
21:e9:f4:d7:95:e5:2e:a7:42:6e:c0:f2:de:41:22:a6:38:bb:
e0:65:70:42:ae:f0:b1:75:ce:23:ed:ef:ae:7f:fb:0e:ae:35:
a0:97:fe:7c:c1:6b:72:78:d4:ee:19:c6:ad:f1:1b:92:12:70:
e9:cc:06:ee:3e:64:46:db:4f:77:0f:a4:f1:88:8e:6e:1d:00:
cd:ff:a0:f9:de:33:8a:1a:29:6e:8a:f0:98:0e:42:98:44:d6:
14:8a:2b:ec:c8:9a:ef:9c:2e:9d:32:1c:be:81:9f:19:3a:ac:
ff:04:e8:4a:73:3c:28:39:7c:3d:bd:cb:ae:69:f6:34:06:1f:
cd:44:8a:36:e7:25:cf:44:8c:6e:24:a3:56:e6:af:b7:97:a2:
94:69:6b:b2:a2:c0:89:04:5d:18:fb:c2:98:cb:42:e2:94:69:
62:86:5c:4a:5b:a4:c5:13:cb:82:a5:45:db:ef:b8:5d:3d:1c:
47:73:e3:c0:6f:8d:ef:85:d4:c7:66:25:9f:d0:92:41:08:fa:
34:fe:b7:50:2e:77:f8:52:4a:9a:be:7b:97:2d:94:29:e3:7b:
b6:b3:e5:2a:ae:89:1f:9d:95:2b:e2:e6:4f:d3:4f:f3:13:f3:
b4:26:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:56 2026 by rpki-client