Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: d+HMv6BZEpuXnWyr4unaeejz68xCKkMORnVeRm84Ad8=
Subject key identifier: 7C:47:B4:AD:D6:B8:B1:59:7E:31:D8:BE:0D:6A:C2:7A:B7:92:48:2F
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019D98F486B0603023D47B1B0E316AB3FC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 07B4
Signing time: Fri 17 Apr 2026 01:00:55 +0000
Manifest this update: Fri 17 Apr 2026 01:00:55 +0000
Manifest next update: Sat 18 Apr 2026 01:00:55 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 6YwVRJtyBQAuumpb3jdEHXs7qZwFrkBZNh/um5kGmDE=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:86:b0:60:30:23:d4:7b:1b:0e:31:6a:b3:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Apr 17 01:00:55 2026 GMT
Not After : Apr 18 01:00:55 2026 GMT
Subject: CN=7c47b4add6b8b1597e31d8be0d6ac27ab792482f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:15:66:07:38:6c:2b:ec:b1:a5:38:bb:1d:
a7:4f:ad:13:1c:4f:19:00:6a:83:8c:52:18:d3:06:
ae:4f:3a:22:47:bf:0f:84:ed:14:e1:a4:26:22:62:
90:64:08:0a:71:95:65:34:d8:4a:86:27:a7:36:bd:
6c:6e:f3:39:89:7d:63:45:29:9b:d1:84:22:92:d0:
f5:d6:52:25:1f:23:56:c0:6e:cc:0a:45:c8:55:0f:
4a:54:7b:db:9c:ac:b2:d9:93:56:f2:55:bd:45:87:
55:05:3f:db:80:f8:ad:49:2e:7b:c3:e9:15:0a:74:
2b:d8:2f:88:ee:81:c9:c7:ef:f9:a9:30:82:11:bc:
e9:63:6c:77:73:5d:ad:7d:ee:68:42:42:95:cc:6a:
71:4a:cd:07:e2:fa:26:80:26:33:84:87:69:8c:c4:
6f:ae:32:76:c4:da:2d:7e:7c:81:b9:28:9f:68:62:
05:03:fe:ff:aa:67:09:55:b2:4e:f5:3d:db:2c:49:
de:dc:9b:ca:c4:9b:62:14:be:a1:e2:b5:1c:a3:19:
e9:f7:65:26:52:13:1c:fb:aa:ef:e9:e9:30:26:0c:
4c:35:8e:4d:7b:d1:f9:ef:01:eb:7b:65:b8:e2:7b:
68:a1:f3:63:ae:46:bb:25:6f:f3:20:02:1b:0b:11:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:B4:AD:D6:B8:B1:59:7E:31:D8:BE:0D:6A:C2:7A:B7:92:48:2F
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:57:86:4f:21:b4:f7:55:2c:7a:66:8a:7f:ec:a7:fd:a9:a3:
f4:16:a6:77:73:8b:ac:5e:a0:6e:93:f4:60:01:54:04:a2:44:
e9:b4:1b:5b:95:a8:e8:89:a7:5a:ab:32:2b:69:cb:0d:cd:5c:
6b:e7:7a:d7:6e:28:3e:55:70:86:00:88:7f:b2:22:1b:2a:25:
1c:7f:b8:12:26:7e:c8:72:41:d8:be:06:d4:5e:44:ff:7a:44:
8b:da:59:d1:53:d2:57:0c:d3:6b:00:ff:b1:2d:62:40:6d:66:
d4:a1:30:51:e5:09:90:d4:ab:bd:77:0b:f1:f5:be:7b:92:ee:
08:56:dc:a3:0c:e3:83:54:f5:53:f3:62:6c:5e:37:86:bd:60:
aa:8d:98:78:f9:0b:12:c8:b5:c1:ea:59:03:03:35:bf:ca:2e:
f7:3d:e1:51:f1:fd:5e:6b:c6:dd:ed:f3:da:8e:d9:8d:df:03:
92:7a:d9:7b:5c:44:1f:13:b3:f3:ec:ec:13:cb:37:0b:6c:0e:
95:d2:95:72:7d:a0:67:c6:85:62:be:ea:3b:1a:64:b8:8b:06:
c2:7d:d5:79:70:b9:57:7a:5a:9e:28:50:9c:3f:ce:76:13:3b:
ea:c5:64:e2:56:c5:00:d7:bd:82:d8:e2:21:14:cf:23:42:c8:
c9:08:38:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9IawYDAj1HsbDjFqs/wNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjYwNDE3MDEwMDU1WhcNMjYwNDE4MDEwMDU1WjAzMTEwLwYDVQQD
Eyg3YzQ3YjRhZGQ2YjhiMTU5N2UzMWQ4YmUwZDZhYzI3YWI3OTI0ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufwVZgc4bCvssaU4ux2nT60THE8Z
AGqDjFIY0wauTzoiR78PhO0U4aQmImKQZAgKcZVlNNhKhienNr1sbvM5iX1jRSmb
0YQiktD11lIlHyNWwG7MCkXIVQ9KVHvbnKyy2ZNW8lW9RYdVBT/bgPitSS57w+kV
CnQr2C+I7oHJx+/5qTCCEbzpY2x3c12tfe5oQkKVzGpxSs0H4vomgCYzhIdpjMRv
rjJ2xNotfnyBuSifaGIFA/7/qmcJVbJO9T3bLEne3JvKxJtiFL6h4rUcoxnp92Um
UhMc+6rv6ekwJgxMNY5Ne9H57wHre2W44ntoofNjrka7JW/zIAIbCxFQUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxHtK3WuLFZfjHYvg1qwnq3kkgvMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1eGTyG0
91UsemaKf+yn/amj9Bamd3OLrF6gbpP0YAFUBKJE6bQbW5Wo6ImnWqsyK2nLDc1c
a+d6124oPlVwhgCIf7IiGyolHH+4EiZ+yHJB2L4G1F5E/3pEi9pZ0VPSVwzTawD/
sS1iQG1m1KEwUeUJkNSrvXcL8fW+e5LuCFbcowzjg1T1U/NibF43hr1gqo2YePkL
Esi1wepZAwM1v8ou9z3hUfH9XmvG3e3z2o7Zjd8DknrZe1xEHxOz8+zsE8s3C2wO
ldKVcn2gZ8aFYr7qOxpkuIsGwn3VeXC5V3panihQnD/OdhM76sVk4lbFANe9gtji
IRTPI0LIyQg4tQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:37 2026 by rpki-client