Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: gnSgC23KOu36Gq6267m0h6stcP7f/JDHoTGQzqd8vWI=
Subject key identifier: E3:F3:4F:DD:AC:18:68:60:9A:CA:2B:A3:FE:B7:B7:FA:3A:38:2E:DE
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019DCFAC75C0DD2F39C8812629BA50021286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 15EF
Signing time: Mon 27 Apr 2026 16:01:19 +0000
Manifest this update: Mon 27 Apr 2026 16:01:19 +0000
Manifest next update: Tue 28 Apr 2026 16:01:19 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: d7rcTqekmS5Zx0uh4V957khZTOPASzP/s/yafROK1u8=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:75:c0:dd:2f:39:c8:81:26:29:ba:50:02:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Apr 27 16:01:19 2026 GMT
Not After : Apr 28 16:01:19 2026 GMT
Subject: CN=e3f34fddac1868609aca2ba3feb7b7fa3a382ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:2b:43:51:9b:d9:27:ec:62:26:43:88:c9:
c0:c7:d9:86:3d:8c:5e:ac:54:82:e4:d8:d3:67:64:
bb:b3:01:97:36:96:56:31:b6:e1:94:3a:f2:c9:bd:
c2:06:ff:c3:5d:81:f6:8a:c4:5a:3d:85:22:0c:bd:
e0:22:3c:29:2b:87:46:a6:c0:ca:2c:ac:37:92:b9:
bf:7e:bc:f4:f7:3f:79:af:76:d0:4c:3b:75:4a:c2:
27:da:cc:34:9e:73:a2:65:7f:ee:29:e0:2e:72:01:
2a:40:8e:2c:14:2b:82:6b:c9:e8:96:b5:45:b4:ca:
10:12:c7:b9:2f:a0:a5:3f:a0:3e:8a:e1:44:91:d9:
43:3f:6d:3d:45:59:38:f5:e6:c3:d3:27:f4:ec:3f:
4f:af:89:39:e7:b3:cb:40:a7:f0:52:83:3e:88:de:
e3:40:2c:a9:fd:20:25:49:90:a1:88:68:45:c0:62:
a2:c8:40:52:83:32:85:2f:c9:31:f5:df:f7:7d:f6:
07:d7:3a:1b:2f:04:7d:37:de:f5:ce:c2:9b:95:f2:
de:a0:67:09:c7:62:bb:05:c3:8e:52:d3:fc:6d:cf:
54:72:62:f3:47:98:8c:38:a2:31:74:76:26:2d:f1:
33:bb:7b:e0:03:cc:5a:af:24:12:ea:08:88:1b:c0:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F3:4F:DD:AC:18:68:60:9A:CA:2B:A3:FE:B7:B7:FA:3A:38:2E:DE
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:de:b5:d8:9c:e7:f6:9d:4e:38:01:3b:eb:55:34:03:74:
ba:3a:cf:72:ae:cd:4a:7d:b6:0e:e5:1d:03:95:0d:d7:4e:2e:
77:5e:92:da:fc:16:f9:ce:06:39:ea:f2:53:9a:21:a4:9b:13:
06:1b:bb:82:38:a9:32:d4:51:1b:93:37:ae:2f:b7:a0:d2:b4:
84:72:48:cc:0d:0b:35:cc:c0:00:93:3a:0d:a9:05:f9:35:83:
cd:3e:0d:08:a0:87:92:64:6e:62:50:0d:8e:e4:03:32:66:66:
f3:8d:f6:04:0f:dd:27:50:91:8b:bb:bb:33:6e:84:f5:9e:62:
54:f1:c1:af:79:ab:59:84:4e:27:ca:db:ee:63:d4:eb:a2:56:
34:52:1a:b5:cb:49:df:f6:2d:da:35:14:fc:88:88:53:75:21:
5e:52:0a:ab:d3:95:8f:01:2b:98:4e:79:74:3a:74:3a:09:e6:
a3:78:bf:06:ec:a3:4f:f9:49:ef:d5:d5:1a:20:68:06:55:6e:
c8:bb:6d:86:d5:35:3c:cb:2d:43:f2:6c:fa:5c:df:65:d1:c1:
e0:1b:f6:72:fc:48:ae:0f:26:c6:ce:3a:07:3a:ed:a4:d6:ab:
f1:fb:b7:af:b3:f9:57:59:30:16:66:ad:d5:0e:5d:37:f8:80:
e5:51:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:56 2026 by rpki-client