Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: ViVbkZtEpK3kFMMBwZrBm5JKfzDxjqXsbHdznUWBecM=
Subject key identifier: D9:56:70:8F:6B:66:8A:1C:64:FD:CD:50:DA:2E:10:4C:89:CC:76:71
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 01A1800651C1ADF952A2509CFCAD025105F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 17D8
Signing time: Wed 28 Oct 2026 01:00:59 +0000
Manifest this update: Wed 28 Oct 2026 01:00:59 +0000
Manifest next update: Thu 29 Oct 2026 01:00:59 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: EblL++voPEg23ObtGO6zi3kFups9yrpmiX/iwII3Hf4=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:51:c1:ad:f9:52:a2:50:9c:fc:ad:02:51:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Oct 28 01:00:59 2026 GMT
Not After : Oct 29 01:00:59 2026 GMT
Subject: CN=d956708f6b668a1c64fdcd50da2e104c89cc7671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:f5:f8:0a:38:bf:ff:75:5b:ae:1b:7a:bb:
9c:d6:4b:f6:f2:16:5e:6c:59:89:96:fd:09:35:8b:
16:57:9c:b0:f0:bd:12:79:8f:07:64:99:9d:c9:28:
01:db:53:a8:1b:6d:0c:ec:bf:c0:e2:6b:dd:65:21:
ab:ed:84:a7:d5:36:4a:b4:1c:5c:22:a5:a5:5d:77:
00:fe:40:62:1f:1c:4e:b7:5d:14:9c:23:43:27:17:
09:f1:35:fa:e8:16:b0:96:e7:47:e9:78:33:9c:f2:
bb:f5:e2:b6:d8:91:95:28:44:fd:0d:0d:28:77:ed:
1f:70:87:41:11:de:6d:c6:02:4b:75:a8:82:42:55:
16:a2:b6:c7:47:53:d7:83:bb:ed:21:72:e0:dc:56:
fa:c0:0d:bf:30:ee:77:84:9d:5d:fb:0e:8d:d0:d2:
52:89:e8:7c:0a:89:d4:b4:f6:1d:e4:ea:a5:c6:3d:
f2:9f:bc:d4:78:48:4b:32:a3:5a:49:94:14:ff:f3:
a1:07:46:59:ed:d9:32:e1:b9:c7:33:46:ea:f0:a4:
88:e7:1c:22:0b:67:86:b1:6d:90:5a:17:f4:d0:e9:
37:24:8d:60:6f:69:73:e0:a8:06:23:02:54:a2:86:
69:94:d5:09:0c:4a:97:a4:38:28:ea:b5:5f:17:6f:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:70:8F:6B:66:8A:1C:64:FD:CD:50:DA:2E:10:4C:89:CC:76:71
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:80:d8:fa:e1:32:20:78:86:cd:86:fa:b9:3c:51:c9:ab:
33:ae:77:78:82:64:c0:8e:dc:82:e8:f7:ce:b4:fb:99:49:08:
38:6b:cf:ba:f5:49:ee:18:05:8c:60:c2:74:c1:f2:be:9c:69:
9e:e9:52:04:87:ca:e2:fb:0e:c9:f0:76:e4:7e:1f:0f:aa:2e:
43:f4:b0:b7:e7:31:bb:3a:f8:a2:41:50:e6:16:5b:8f:7f:fa:
f7:54:fc:a1:78:e3:db:f6:3f:ce:23:6b:26:05:f9:3b:3c:a8:
a4:6c:9e:a2:04:7f:ca:11:b6:e6:26:42:d0:55:f9:9a:c2:a0:
7f:e0:40:dd:39:42:35:3b:e4:27:a4:47:a5:c2:49:3f:7a:a8:
38:69:79:ba:a9:a9:6a:52:40:1c:b5:fd:5d:58:5a:f0:71:2e:
9c:89:0c:33:1e:6c:de:db:2f:d3:50:59:fc:ee:20:4a:93:8a:
ba:c4:7c:dd:8f:7e:e2:93:b9:d5:53:21:95:e6:73:09:3e:25:
34:9d:5f:f4:2d:21:3f:3e:bf:12:00:68:6f:ec:47:2e:0d:2a:
7d:5f:bb:1d:64:02:e0:5c:f7:86:ec:53:ba:6b:e0:9a:03:51:
04:cc:91:c4:22:3f:da:5d:24:1f:21:c9:86:a8:52:07:13:33:
a8:8f:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:00:38 2026 by rpki-client