Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: YlNdi/kGg6S1WELrovUBBNDiutmTkQ7vlmCWgkw8ypA=
Subject key identifier: 0A:9F:48:7E:7A:23:DE:96:91:49:9A:BE:03:6F:A9:8D:28:90:B2:78
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019CAAC69F4E555806F6FC175AAC06E492BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 0737
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 4r95XS9XFWFTLjK6CsGkICQKXf0iNyKR2cVEhubSIgI=)
4: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9f:4e:55:58:06:f6:fc:17:5a:ac:06:e4:92:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=0a9f487e7a23de9691499abe036fa98d2890b278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:5d:ef:81:fb:b6:86:a9:98:f9:cf:e5:81:
c5:d8:04:4a:ca:1b:1f:c0:73:a4:e7:c3:5e:29:22:
2d:90:5d:df:d6:e6:19:e7:c3:e5:18:ca:17:21:b3:
0c:d8:16:13:26:a4:fe:71:34:ea:ec:2a:bc:c7:7a:
47:5f:56:4f:7f:b5:89:4a:f5:cc:c7:c7:a0:14:8d:
02:98:b5:2a:44:6d:d7:d8:66:4a:52:59:50:b4:88:
a9:9b:1f:24:e1:6b:0e:dd:4e:94:db:ce:34:4d:f3:
87:f7:43:b3:c0:b0:05:24:32:f4:c0:77:53:38:ff:
aa:52:ee:25:61:80:8f:2a:d0:0a:e6:0f:2e:2d:9b:
9b:2f:18:b8:f5:07:dd:a1:20:6f:ee:e3:c6:be:4a:
26:d0:2c:bd:0a:36:6a:8c:b8:cb:06:0f:ed:ee:80:
91:00:8e:3a:e8:7f:34:d6:00:c2:ec:c3:31:5d:1f:
a8:48:71:de:3b:f9:d5:5b:25:d9:42:25:23:3b:1a:
a6:37:c7:b2:18:de:8d:d1:96:c4:79:2e:75:cf:f7:
91:54:c3:00:79:e3:a7:06:2b:09:72:33:ba:c1:c5:
c2:dc:aa:48:35:ba:c2:68:55:47:63:8c:47:30:37:
35:b7:a6:ec:56:03:cc:41:8b:d7:db:bc:6c:2d:ac:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:48:7E:7A:23:DE:96:91:49:9A:BE:03:6F:A9:8D:28:90:B2:78
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:89:7b:12:89:80:c0:ed:d6:75:d7:64:80:61:10:4e:15:
a8:ca:60:97:a7:45:e9:c0:52:0c:28:95:01:62:9d:a4:fc:05:
6b:db:c8:6a:a9:87:b0:f2:db:9b:0a:d7:ec:98:7a:aa:53:23:
c5:0c:56:50:ee:32:81:a6:2c:cb:ac:8b:25:0e:88:dd:56:e3:
28:51:00:fb:59:47:85:47:3a:32:e3:35:79:76:d8:1e:66:db:
31:a2:8b:b5:ad:17:4a:79:a8:a4:d3:3e:fb:c1:45:a2:22:0b:
59:9e:b6:5f:10:1d:bc:85:b8:f7:9b:ad:6f:c7:0f:c7:51:c4:
2c:83:45:b1:02:42:ac:39:7b:ce:6d:a8:09:ee:a4:6b:a8:d0:
d3:b9:b0:d8:94:b7:90:69:f9:a9:60:c7:c9:7d:2b:b9:3e:93:
31:b4:88:c6:2e:d2:20:30:a1:19:a3:c7:09:45:38:df:4e:ce:
49:ea:2f:98:40:15:e2:75:96:aa:59:c5:40:5f:ed:85:39:14:
98:74:ba:6f:e0:f1:44:dc:4c:63:54:8e:cc:fc:31:f2:eb:25:
f2:07:96:19:e6:bc:ec:d6:e8:b1:8f:91:39:57:a7:30:0f:f8:
bd:98:ae:00:06:be:8d:bf:47:ef:e1:01:ae:d8:39:2d:3e:bd:
c2:46:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:07 2026 by rpki-client