Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: 5LsdnPwDp3CG/o/+75IqDuCaCwpj37YxGZdwM5yvH6E=
Subject key identifier: C4:B9:AB:4B:C6:5F:C6:C3:A9:F2:F4:C8:B9:91:F1:C4:33:AF:C8:7B
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01A0C21FE217A426D4E7240783AFA30D96D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 0957
Signing time: Mon 21 Sep 2026 04:01:04 +0000
Manifest this update: Mon 21 Sep 2026 04:01:04 +0000
Manifest next update: Tue 22 Sep 2026 04:01:04 +0000
Files and hashes: 1: C2GLv0dGNCao1_0HEwp6AditxpI.roa (hash: HuDF/UCemhO8SP95BTvUPi2D19Ml2oUl+EraBNuRq2U=)
2: WX8OHeFW7uVTKm81GUm1-5bI_C0.roa (hash: Cd/aZ+njw3PtAr/xAyegvbQ3V2RCY7kyE2EhKVUSDW4=)
3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: xJwct20XCYzBWypc7gnuKh5jvxqIk+LvPZbeRahl6qs=)
4: m2rhcLtDAhHVh1is8GRHlaB6uTY.roa (hash: IiS++8F/4esTK0RCxdtGVUX8nWwykcoAM/sULYuj/UE=)
5: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (hash: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:e2:17:a4:26:d4:e7:24:07:83:af:a3:0d:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Sep 21 04:01:04 2026 GMT
Not After : Sep 22 04:01:04 2026 GMT
Subject: CN=c4b9ab4bc65fc6c3a9f2f4c8b991f1c433afc87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:7f:94:93:c3:2b:96:e3:a6:b1:2e:e1:ba:
47:21:d0:a7:95:c6:52:6d:8b:6b:be:23:71:73:a7:
94:92:c1:4f:c1:9d:e3:26:2a:89:21:99:e4:d7:0f:
3b:6e:51:cc:00:88:e8:c2:2f:ce:53:ba:04:55:f2:
a5:91:40:a2:25:3e:43:93:9e:e7:9c:77:3f:02:c3:
2d:40:11:59:d4:ce:af:9c:b4:45:f2:4c:41:5b:ad:
a0:43:6d:c0:67:fb:90:2d:5c:1c:1f:37:5e:9a:3e:
2b:d2:83:64:41:8d:7b:c8:5d:79:96:9a:81:c1:f6:
9b:09:cc:bc:25:8b:b2:58:c6:e0:e8:18:8d:52:19:
f1:1e:87:4b:82:d5:90:c2:ed:9d:9f:35:bd:56:c1:
e0:a9:c3:87:6c:b4:06:89:f0:87:3f:32:4b:7e:d3:
ad:9c:1d:5f:6d:15:e6:a9:b1:19:cf:1a:e2:69:09:
ff:62:a2:dc:9f:64:33:37:0d:86:91:74:94:77:5f:
70:e6:17:03:7c:41:fb:65:07:be:1a:25:26:b2:48:
4d:73:86:4c:32:f1:46:4e:1a:6f:97:56:5d:dc:93:
b3:d5:e7:fb:0a:13:fa:06:50:d1:fa:19:2f:fa:b1:
9a:d7:b7:21:cf:4d:b2:01:61:92:5c:eb:e2:b7:fe:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:AB:4B:C6:5F:C6:C3:A9:F2:F4:C8:B9:91:F1:C4:33:AF:C8:7B
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:4a:df:35:09:5e:2c:ba:cd:de:a5:1d:14:a1:f7:b3:cf:
79:70:26:13:55:18:1e:98:72:d7:e8:50:bd:08:b7:cd:7e:44:
89:0d:d2:21:a1:ea:81:7e:4b:07:f0:5b:99:7e:a0:c3:58:29:
39:61:68:6d:4a:f4:35:b5:f7:f1:d1:8e:b1:9f:33:ab:9a:b4:
cb:22:0f:73:37:17:d0:30:95:34:61:7a:a2:f3:da:ea:1d:1f:
3f:b9:d6:0f:65:3f:98:82:45:a2:a8:1b:e2:b2:78:06:f1:70:
12:30:c9:1a:a2:a7:95:6a:86:c2:60:d5:56:28:db:85:a6:99:
65:54:9d:5c:2b:6b:05:ee:0e:92:c3:07:f5:d1:8e:fb:f7:2c:
04:e2:2b:f5:ed:cd:c9:88:f5:c3:df:ed:79:78:21:a9:8d:53:
1c:0f:29:b6:09:b9:17:5d:5f:8c:19:e1:8c:6f:eb:25:d2:8e:
6d:31:ca:bf:de:15:58:1d:90:89:27:c3:b0:75:7f:23:e6:3c:
94:49:13:81:a5:e4:b6:19:e8:c8:c2:0e:3a:48:8f:59:07:e9:
2a:b0:01:d8:ad:83:77:cf:08:eb:d8:8e:95:4c:f9:e0:0e:1e:
1c:9b:58:1d:1e:5e:1b:06:52:e1:b3:ca:7a:25:c1:b0:fb:5f:
de:c5:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:54:12 2026 by rpki-client