Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: ocBgyBOu/jbAxr7CBlIlBP+5P0tEJWNCNcovSe5BoR4=
Subject key identifier: 2F:89:C0:40:B3:46:7A:A9:FD:82:21:F1:5E:CA:29:7E:AD:28:62:2B
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 01A08CB21B7E1001801C0AE180FA9C93DC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 175A
Signing time: Thu 10 Sep 2026 19:01:17 +0000
Manifest this update: Thu 10 Sep 2026 19:01:17 +0000
Manifest next update: Fri 11 Sep 2026 19:01:17 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: QphwgmmWEiL2f8FMRWBgFybi/VVXm33Xtb9EmFuX2rU=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:1b:7e:10:01:80:1c:0a:e1:80:fa:9c:93:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Sep 10 19:01:17 2026 GMT
Not After : Sep 11 19:01:17 2026 GMT
Subject: CN=2f89c040b3467aa9fd8221f15eca297ead28622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:4f:09:1f:ad:9b:cb:de:6b:a2:02:f4:d7:
ba:be:42:9a:83:71:e1:db:f9:44:7c:cf:99:0f:ce:
c2:d7:2f:6e:b0:04:e8:77:df:d0:4c:42:8f:3d:ea:
86:29:8e:80:c3:f7:a3:d7:a5:c0:9c:ad:a5:4d:c2:
3f:e4:9c:51:08:a5:75:3f:8e:2b:fe:55:0e:43:26:
1a:46:a7:3d:50:40:47:56:65:df:fe:a7:0b:73:ad:
d9:7a:16:2d:30:bf:16:17:eb:5d:e9:09:cf:bd:4e:
74:98:65:76:75:9c:02:61:3a:77:5d:46:90:04:f1:
0c:88:fe:50:42:16:50:f7:87:b9:26:43:98:74:a5:
6b:2c:41:1f:82:5e:0b:04:5f:76:9d:bd:75:1a:4e:
99:14:97:58:51:d0:fb:ac:6f:d2:70:f2:b9:65:04:
92:02:31:66:a3:3e:5d:a5:71:17:24:3b:59:d7:ac:
e7:f5:ab:e3:2b:81:ea:58:39:c4:5f:a5:b3:ed:ad:
c2:e6:df:a3:e1:6d:01:e4:da:a7:f2:34:b6:5a:28:
ee:03:f5:92:b7:4d:53:d9:4f:de:39:38:dd:ab:9b:
c7:fc:0e:6c:c6:ee:5a:a4:68:da:01:78:69:f0:fa:
b5:46:e3:12:b0:18:75:65:8d:a9:b1:b2:c3:29:cc:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:C0:40:B3:46:7A:A9:FD:82:21:F1:5E:CA:29:7E:AD:28:62:2B
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2f:72:4a:a6:44:d6:e5:b6:70:ac:e5:1b:2e:61:e2:82:0e:
b7:47:40:de:14:85:1a:43:0e:34:c9:0d:ea:8f:06:84:17:de:
b3:cc:85:e0:39:dc:0d:65:04:bc:34:db:8b:5c:51:59:f7:85:
a1:f0:c9:2b:3a:6f:ac:a0:dd:a7:91:73:2b:e3:d1:45:ae:32:
24:f2:27:59:ef:97:55:cb:75:ae:17:a5:70:84:90:78:9d:cd:
b0:5d:6e:ea:f1:f0:11:e2:b9:6a:7b:a2:ff:48:51:09:1a:32:
20:21:32:39:d4:63:27:bb:c3:cb:3b:20:94:5f:3d:71:2e:7c:
b8:f0:83:8e:91:98:0d:db:74:b2:4e:82:4f:3b:f4:0f:c0:9a:
15:51:f9:3d:b8:71:06:11:a1:dd:5b:d9:0d:a2:6c:a9:0d:f7:
e1:16:e9:de:db:fc:12:49:fa:8c:36:95:c0:76:da:be:30:b6:
45:9e:61:19:5f:87:1b:9c:b0:49:76:27:51:7d:13:fc:f2:e5:
54:de:c4:a1:58:4a:83:7f:bc:f4:98:ca:a7:bd:18:3b:52:d2:
e6:1f:b9:47:0c:fe:05:13:79:f6:34:cc:f5:d0:40:aa:96:cf:
8b:07:dc:ba:d4:cf:48:90:ac:e0:26:84:d6:07:93:9d:b4:ff:
d8:f9:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:02 2026 by rpki-client