Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: nV5ka9SAzj0hiLzM5f4nHhk5kPFM0hkzj/nK9WMWxDE=
Subject key identifier: AA:E5:F4:3E:F7:E6:4F:22:30:10:DF:48:9A:A4:8D:3A:B1:77:14:83
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019FAA1A144132E9326AFF881252F029EC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 08C6
Signing time: Tue 28 Jul 2026 19:01:03 +0000
Manifest this update: Tue 28 Jul 2026 19:01:03 +0000
Manifest next update: Wed 29 Jul 2026 19:01:03 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: PfS4adwREyIc9YC7ytLKqaw5J6en160XEiE7bBVz6Tk=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:14:41:32:e9:32:6a:ff:88:12:52:f0:29:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jul 28 19:01:03 2026 GMT
Not After : Jul 29 19:01:03 2026 GMT
Subject: CN=aae5f43ef7e64f223010df489aa48d3ab1771483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:12:00:d2:35:ac:0e:fd:2d:02:eb:7b:3a:
47:6a:34:3b:f9:24:37:92:0d:66:52:c2:3a:89:0f:
fb:fc:cb:92:95:77:df:fb:cb:2f:d2:41:ff:c9:cf:
6d:83:85:d1:7e:0e:ea:91:6e:ed:b9:c2:1c:9b:b9:
7b:92:36:e8:9e:b8:3c:12:ef:2d:8d:61:68:78:ee:
7c:5b:c0:26:27:e8:0a:42:c3:6c:03:d3:74:ca:40:
70:bc:34:a7:ce:f1:4a:5c:88:ec:55:ef:13:06:e8:
8d:df:61:5d:60:f0:57:14:60:23:d2:8f:96:34:49:
fc:bd:e1:85:4e:dc:28:a2:71:ad:ec:3b:b4:16:bd:
cc:2a:52:ea:6e:f3:a9:7f:e0:e4:85:95:c8:02:78:
d7:27:15:be:3a:3e:44:14:0d:18:a9:f3:e5:88:22:
bd:5c:9a:93:08:c1:a8:5e:98:c6:19:f4:a6:af:61:
5d:56:c3:74:ca:7f:4c:95:85:79:94:8e:78:dc:32:
b0:24:ad:26:55:32:70:7b:df:71:8f:c3:28:4c:21:
37:95:9d:cd:65:8b:69:f6:e8:83:0f:6a:2f:c4:2e:
73:4a:f1:75:19:85:b4:6b:4e:37:7e:43:a7:85:6e:
36:f7:9f:2a:57:83:9a:49:6c:04:59:2d:0c:3b:bc:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:F4:3E:F7:E6:4F:22:30:10:DF:48:9A:A4:8D:3A:B1:77:14:83
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:51:66:04:eb:87:09:f1:2e:b6:45:85:19:36:8f:bd:a9:19:
74:18:cd:a9:43:b5:ce:a8:48:bc:76:28:92:61:1a:46:65:87:
60:06:d9:8d:1e:48:81:ba:2b:a9:56:8f:9e:10:07:6a:28:84:
85:ad:31:46:72:a2:9d:73:43:61:9c:d8:78:c0:37:b3:2d:c0:
f4:80:37:5d:e3:26:42:e0:fb:18:68:eb:e3:08:4a:21:5d:75:
bd:be:69:e8:24:20:fb:e1:d3:cf:c0:08:2e:a0:a4:f4:e2:0f:
52:c3:5b:71:5b:ae:00:f1:f8:e5:53:8f:e8:e5:65:44:fd:fd:
41:eb:90:af:63:23:e2:76:91:05:22:f1:5f:28:ed:a5:a7:f7:
b5:3f:17:b2:c1:7d:24:f0:47:c2:aa:e2:a9:a7:84:6b:4b:07:
a4:9e:26:29:37:1a:d3:49:45:d7:47:97:17:81:58:d6:96:eb:
f2:27:a9:ef:f5:fb:35:ae:1e:8e:dc:f2:de:a8:bf:ef:cc:0a:
1b:35:70:43:23:3d:6b:7d:c0:86:7a:bf:0f:ad:63:9b:12:b1:
ed:54:e2:6c:da:9b:54:44:3e:bc:93:db:01:b6:95:d5:62:f9:
77:3e:6b:64:5d:fe:df:3b:29:36:09:e1:e3:d7:84:2d:56:df:
e3:13:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:28 2026 by rpki-client