Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: j1s2ImqnwVOCZRFgxbAUZUqS4H91+F7hkuTFoWxsq8g=
Subject key identifier: 90:59:54:38:89:E1:AA:65:B7:21:0C:52:41:A7:FD:28:EA:F2:AA:F5
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019CE7ED8F2F3B04C5E6BA190D0E3E732772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1577
Signing time: Fri 13 Mar 2026 16:00:31 +0000
Manifest this update: Fri 13 Mar 2026 16:00:31 +0000
Manifest next update: Sat 14 Mar 2026 16:00:31 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: yqdjhDBnH6J+Zn5vMlhabNdc7sINdpg3Y3pVbtPdqHg=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:8f:2f:3b:04:c5:e6:ba:19:0d:0e:3e:73:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Mar 13 16:00:31 2026 GMT
Not After : Mar 14 16:00:31 2026 GMT
Subject: CN=9059543889e1aa65b7210c5241a7fd28eaf2aaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:23:26:c3:34:bc:51:4d:c8:e6:f2:95:82:
66:29:07:6d:f4:e3:14:2f:e5:09:a0:d3:15:9d:8e:
6a:40:a6:d4:7d:28:f8:cc:b5:97:8e:89:15:c1:4f:
30:dd:68:6f:0b:87:64:7b:43:32:17:6b:2c:20:76:
be:52:d3:63:f2:73:88:51:70:ee:a2:a4:bf:df:5e:
ba:b6:1e:ae:57:c3:a4:44:a4:0c:0a:f4:cf:55:5b:
33:d8:5d:80:87:e8:d6:69:7c:72:25:b4:e9:62:1b:
96:bb:ff:3c:ed:30:29:50:14:a6:3b:37:93:19:94:
93:22:dc:51:4e:68:58:3c:f4:bd:06:0c:b0:2d:3c:
ff:ba:0f:99:5f:6c:48:d1:50:d3:b7:38:09:a0:78:
d2:84:c2:8b:8e:bd:89:1a:b0:3f:48:16:cb:b1:17:
9b:64:67:dd:d5:1a:c8:f0:ac:0b:5d:9a:64:bc:5e:
79:a8:f2:81:a3:dd:b2:ae:39:de:15:c6:40:0d:da:
ba:d6:08:ce:7e:cd:60:a1:f3:54:16:96:68:ab:99:
1b:63:c6:48:54:63:34:19:28:cf:51:6c:48:21:7b:
22:38:ec:e3:89:a9:2c:b8:74:a6:31:0f:53:f2:65:
25:62:7e:37:d2:87:6e:b0:dc:f3:1b:85:3d:d6:10:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:54:38:89:E1:AA:65:B7:21:0C:52:41:A7:FD:28:EA:F2:AA:F5
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2e:b7:ef:01:b2:4b:4a:cc:08:3d:f3:a5:6b:30:2f:82:6a:
ef:68:c6:1d:1d:08:86:9c:f2:41:1b:ae:ea:29:d6:d5:bc:12:
80:27:56:8c:99:f9:67:56:a6:2a:af:5a:ff:cb:11:8d:e1:ab:
4e:1e:a6:53:9f:80:fe:f3:b5:a4:e4:1d:06:d8:80:36:aa:62:
ff:51:f8:e8:0b:4c:de:75:c3:4a:a0:c1:e1:85:28:d7:d0:24:
0f:aa:6f:5f:af:63:5a:c8:5b:00:5b:21:dc:04:f9:86:15:56:
41:01:cc:79:6f:de:4a:61:3c:84:3d:8b:fe:49:81:99:43:5c:
9e:54:04:3b:59:40:ed:ef:f5:f6:fb:6f:85:b3:08:84:7e:ec:
7a:71:e8:7f:d5:59:af:d6:48:c0:1c:d4:4c:03:5e:db:48:15:
e7:a2:c6:26:a9:7b:01:ef:a9:ac:dd:16:ec:29:6a:d8:ca:b7:
49:c2:2d:3d:01:d4:8a:4b:62:2c:33:3b:6d:76:e5:44:4c:a5:
1d:4e:dd:8a:4c:30:db:42:48:b3:c7:98:f3:a9:80:72:57:bb:
c2:62:d0:c2:ae:1d:79:f0:de:ff:bd:70:4f:ee:85:3e:b1:64:
5b:f2:60:c1:16:db:c6:69:7b:9e:17:ea:ad:44:c9:4f:da:73:
93:00:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:28:09 2026 by rpki-client