Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: TQ/W+Xy5XKi29vWNCsryKfz4nVrP8mx79MtfhSHH/kw=
Subject key identifier: 45:78:0B:C8:9E:A3:45:3C:69:73:4F:55:CC:2D:4C:B9:17:A1:7A:DF
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019FA4F317C1D3DE3E599F4291597322D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 16E2
Signing time: Mon 27 Jul 2026 19:00:22 +0000
Manifest this update: Mon 27 Jul 2026 19:00:22 +0000
Manifest next update: Tue 28 Jul 2026 19:00:22 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: ce/gfl5bzyiXTTSiFWmZ5q+6kl8e9Y6OUJSeDMCAc04=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:f3:17:c1:d3:de:3e:59:9f:42:91:59:73:22:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jul 27 19:00:22 2026 GMT
Not After : Jul 28 19:00:22 2026 GMT
Subject: CN=45780bc89ea3453c69734f55cc2d4cb917a17adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:dc:fb:4f:2f:3e:d5:c9:72:9c:79:85:ca:
38:fa:0a:bc:5e:da:11:4b:11:d4:20:f8:e6:d2:fb:
6c:c0:d7:a4:27:dd:b9:46:81:f9:75:72:d4:5f:d5:
9a:d6:f1:1e:26:8a:e2:ea:d8:a6:45:f0:31:52:14:
e4:31:2d:33:35:83:8e:69:f8:df:18:cd:ff:2f:5c:
88:f7:68:a4:87:92:11:b0:66:c8:31:79:0b:cd:24:
bf:09:4b:05:59:48:52:31:2b:c7:5d:97:2d:8d:52:
68:89:56:cb:52:58:cc:ff:da:59:e0:38:95:d5:b0:
58:9c:59:52:2d:7e:58:e4:14:aa:81:59:ba:98:f2:
86:e5:f6:18:28:24:c2:db:5a:c0:c8:97:f0:95:cb:
9e:63:d5:2b:69:31:02:1c:53:04:50:21:32:17:75:
a2:22:26:40:f2:4d:70:ee:5a:18:e3:be:ca:0b:cc:
53:d6:05:78:e6:41:6e:5f:e6:4b:bb:7c:e9:af:c4:
c7:d6:fe:8b:c8:e8:08:4b:4f:c0:8f:82:db:d0:85:
57:c3:07:a9:35:d3:5c:fa:fc:62:63:eb:fd:44:36:
21:c1:cb:21:1d:49:43:92:22:e0:78:e4:4c:af:45:
63:8a:ae:1f:be:66:47:8f:fd:a9:71:8e:d1:99:b6:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:0B:C8:9E:A3:45:3C:69:73:4F:55:CC:2D:4C:B9:17:A1:7A:DF
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:f9:cf:74:0a:d6:4e:8b:c6:6e:26:85:0e:70:1a:c3:23:
d2:60:2d:ca:ac:fe:8d:6d:9a:94:fb:57:40:c8:d7:13:2c:75:
86:b3:a0:43:17:99:ed:29:98:b2:88:36:c0:76:19:5f:de:47:
b8:be:a5:53:62:f0:97:ae:3a:10:c3:15:cb:5b:65:12:a9:66:
89:b6:91:aa:40:3b:9c:36:e4:b4:3b:aa:fb:33:8b:e2:24:8b:
4a:11:e6:16:b8:6d:10:26:18:70:13:56:c9:90:06:13:3d:13:
b5:8a:a1:97:a3:e4:af:73:6d:75:36:86:de:5b:ae:fc:ad:41:
cb:ac:c3:75:af:36:07:d9:a2:07:4d:41:fb:5d:b2:d5:44:5f:
cb:72:2e:ea:87:0e:18:8e:40:cc:54:cb:3e:ec:a7:d0:c7:97:
5b:85:20:6f:34:6b:e4:2c:0c:d6:c1:41:fd:8e:c2:f9:ca:c2:
7e:17:9d:49:33:f5:f5:b9:7d:c6:21:2e:bf:bf:31:01:d5:19:
b1:b3:2b:54:c5:65:62:4d:f1:d9:4f:e7:cc:93:ff:d2:d0:fa:
44:6f:8d:df:e9:4f:25:26:e3:e6:ba:36:4b:28:d8:8a:4e:fe:
d0:59:3a:23:c6:92:7b:17:d1:48:29:8e:8f:44:76:96:d6:a4:
fc:d1:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:24:03 2026 by rpki-client