Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: D+b0iz06UAq5a4CFwj8Psm8kGQGLg4NTpJWV2iu5Kfk=
Subject key identifier: 46:82:53:7A:EE:C1:95:06:5A:34:25:25:57:2C:82:53:B6:41:40:2C
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019E1CEBFF7DFC1D888A63820D94A0CBB839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1617
Signing time: Tue 12 May 2026 16:01:28 +0000
Manifest this update: Tue 12 May 2026 16:01:28 +0000
Manifest next update: Wed 13 May 2026 16:01:28 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: I/uWU10+dbpHJaQqZ/ANVAKqFKHUrlVrEoK9KMs1WEQ=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ff:7d:fc:1d:88:8a:63:82:0d:94:a0:cb:b8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: May 12 16:01:28 2026 GMT
Not After : May 13 16:01:28 2026 GMT
Subject: CN=4682537aeec195065a342525572c8253b641402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:d2:32:9c:3e:93:73:83:2a:9c:ed:4a:89:
d1:c8:12:a5:bd:18:e9:9b:fb:b5:98:40:65:85:e8:
53:5d:f3:69:2c:39:64:91:ee:75:e3:ac:b7:31:d8:
d3:92:54:fc:05:9b:bc:b5:c7:2e:62:bd:cc:f1:79:
31:eb:10:20:fd:66:e7:f2:31:9f:fa:63:25:12:40:
3e:7d:a5:5e:b8:5f:c1:1c:60:17:fc:6f:d7:71:49:
b1:09:06:88:87:8f:31:29:e3:26:9a:eb:36:62:2c:
7e:89:df:81:ff:28:71:f6:8b:3e:f4:42:01:09:2b:
4b:b8:f8:4d:99:f8:ee:1a:e2:10:ff:51:d9:96:79:
d9:d6:4a:0b:6c:b7:26:22:67:17:e7:23:ba:94:e8:
a0:33:a4:c7:fb:5f:d5:ce:85:4e:6d:5d:dd:43:6d:
46:d1:6c:b3:8b:a0:8f:07:78:53:a0:be:7e:a3:ff:
db:ad:c5:12:d2:5c:5e:d6:51:75:75:bd:7b:57:d6:
90:c7:cc:05:44:68:e0:e6:7e:09:4f:9a:3f:bd:ee:
c7:5a:d9:b6:c3:8b:8f:19:10:d0:05:01:ab:fe:aa:
a6:65:87:f2:7c:23:a3:63:1d:4c:ac:01:02:21:6c:
78:c0:57:8d:28:6d:5e:c9:86:4e:12:5b:53:65:f4:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:53:7A:EE:C1:95:06:5A:34:25:25:57:2C:82:53:B6:41:40:2C
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:28:18:02:b3:e4:b6:cd:26:f1:55:87:ca:a9:1e:6b:2c:fe:
9e:e7:d8:25:f4:81:62:63:51:5e:15:98:10:11:7e:ca:f2:fe:
d3:a6:c7:43:1c:ee:92:6b:50:87:72:fd:74:07:ba:1b:38:92:
da:6a:c9:cf:03:e5:80:2f:a7:32:96:36:46:4e:b1:dc:d1:65:
38:f7:b7:cb:0a:20:44:47:62:e1:9b:9b:ca:24:d5:51:9c:ed:
50:bc:86:7c:45:c6:5c:0f:f2:dc:b8:86:3f:05:96:46:9c:36:
48:82:34:f5:23:b4:93:65:7d:36:5f:de:d5:ed:f6:45:54:54:
63:22:ae:02:9e:b7:7b:c8:6d:08:21:9e:c0:0e:ed:6c:73:40:
40:43:93:34:27:09:4e:07:24:a0:56:f8:2d:79:be:19:fe:52:
fd:35:84:ba:4d:03:48:59:a2:e6:d5:67:89:90:cd:e2:c0:7f:
01:01:eb:13:71:69:c4:b2:40:c9:b6:da:9d:0a:e9:9d:5f:58:
5c:52:e4:0e:1d:f1:39:0c:a6:86:5d:37:67:35:81:0a:29:88:
b8:10:6d:85:3d:a0:f9:73:22:f8:b2:51:e6:31:fa:35:a9:9a:
5d:32:79:5f:39:d7:9a:fc:bd:a6:7a:69:cc:54:34:20:bd:27:
91:8b:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:53 2026 by rpki-client