Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: 6Tnbdu7uOeJPUmPaUQY9jOWXzkkYwLWZrRpARkoMuJ8=
Subject key identifier: 95:FA:8C:46:6C:F1:28:96:AB:7E:31:EE:B3:9C:E0:CF:66:46:A0:B4
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019EC06D2E0FAB0CAD2048E6E7315DB6EDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 084D
Signing time: Sat 13 Jun 2026 10:00:41 +0000
Manifest this update: Sat 13 Jun 2026 10:00:41 +0000
Manifest next update: Sun 14 Jun 2026 10:00:41 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: Y7dFk12mJizKMaqZYuPs2ob31alTuNUO5GFbTVCAlHQ=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:2e:0f:ab:0c:ad:20:48:e6:e7:31:5d:b6:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jun 13 10:00:41 2026 GMT
Not After : Jun 14 10:00:41 2026 GMT
Subject: CN=95fa8c466cf12896ab7e31eeb39ce0cf6646a0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:e5:f0:4a:43:fe:d7:aa:d4:72:19:bb:ff:
46:53:bd:c9:8b:88:05:00:46:d5:5f:57:93:8e:34:
c6:10:44:d5:d6:47:b1:d4:4d:87:4f:a4:4d:39:eb:
ad:e8:71:27:14:13:69:71:44:ad:46:15:34:30:b9:
cc:59:f8:35:9b:a5:f7:71:64:52:24:e8:72:bc:58:
e3:26:e9:74:61:3a:53:05:7e:5f:bb:93:47:5a:d2:
6e:22:0d:31:b8:6a:0a:a5:1d:5c:8e:05:df:e3:c4:
1e:38:55:2e:97:37:c7:ff:d9:f9:20:d0:77:0a:c7:
2a:60:ab:93:97:d2:da:fb:60:f8:93:95:5e:ca:f1:
74:9b:4a:c0:76:2e:b7:26:c5:9e:b4:2b:50:05:8e:
81:1c:81:4a:c3:61:c7:61:1c:b5:f8:18:0d:de:2e:
d6:ea:f1:d8:ed:1e:98:3b:99:04:fc:4a:d1:f0:9a:
d0:18:64:e4:b9:92:ff:18:7f:cf:cb:eb:d5:db:90:
30:37:2f:e3:62:04:d6:bc:b1:b5:ca:1b:25:45:1e:
76:02:d2:fc:95:79:8b:1b:53:ea:76:85:ca:79:50:
58:d3:5a:b7:6b:7e:a0:2e:39:1b:87:9c:ce:05:c9:
f3:91:53:9e:62:52:40:f9:48:6e:14:29:76:f4:f4:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:8C:46:6C:F1:28:96:AB:7E:31:EE:B3:9C:E0:CF:66:46:A0:B4
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a5:68:79:8b:be:05:a3:ba:5d:59:ca:39:df:bf:fe:ae:68:
0e:07:ca:12:99:72:15:fe:e4:e6:d3:bf:c0:34:8f:32:b4:b4:
41:57:c0:86:2b:71:05:64:9b:84:f5:2d:66:ea:c5:1d:1b:b7:
b7:46:92:0c:ce:81:88:57:97:15:30:5b:5a:95:e4:6f:87:0c:
7d:27:ff:cf:15:35:ce:b8:91:7a:da:bc:92:ce:da:25:09:48:
30:e2:88:b6:58:a7:ef:35:85:51:0f:21:4f:2d:57:e4:c1:29:
30:b1:c9:1b:48:3e:0f:59:9f:8f:3d:5f:d9:8e:ca:b7:a3:d5:
bc:82:e2:8e:c5:eb:e4:4b:32:43:7e:3a:2e:a0:99:21:d2:ae:
6f:f7:4c:1b:dc:e1:0b:c2:bc:a1:b9:39:dc:05:7d:14:aa:13:
68:4f:ba:1c:b2:c0:a5:d8:67:c6:b9:82:7b:8b:89:95:ee:bb:
d3:ee:83:0c:20:82:ce:a8:4e:4e:57:07:69:ac:06:87:12:56:
12:9e:45:90:9b:50:84:31:22:a8:3e:e5:2a:a4:a9:0f:34:ef:
70:cb:2f:cb:83:65:7b:0f:b0:74:76:c3:fa:33:41:35:21:03:
51:7c:5f:b4:ba:3b:7a:ce:db:80:8c:e3:bb:b4:f6:dc:fe:8b:
43:14:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:58 2026 by rpki-client