Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: wjafjuF2+rFkNADd5LET/BWjJa4iZcNY1eotksr5Yd4=
Subject key identifier: 49:52:20:B3:72:73:1E:D7:4B:D5:09:2C:A3:7C:1D:5F:CE:98:9F:01
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019D29972218CEC9ACBBA4587BF0B5A37EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1599
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: q5xQgcL/8im9YGHMD39akluOvItHX1CFVJdvyP43D54=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:22:18:ce:c9:ac:bb:a4:58:7b:f0:b5:a3:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=495220b372731ed74bd5092ca37c1d5fce989f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:0d:95:72:84:91:87:5a:57:1f:33:6d:e4:
6a:f4:04:54:2d:14:d1:2c:60:34:56:0c:d2:9d:a7:
bb:3c:6b:9e:25:0c:cd:34:34:e7:a7:9a:c9:78:93:
88:20:f5:10:bd:87:3c:c6:5b:9d:41:71:fb:8e:82:
3c:c4:02:5f:37:de:04:33:20:ac:a6:55:2b:21:43:
5d:2a:c2:78:10:6c:f3:72:39:ef:bf:d0:7e:c8:4a:
fb:fc:ca:92:fe:71:e5:a0:08:03:1d:a6:ab:a6:8f:
17:49:69:eb:19:08:12:45:61:ac:8f:89:ab:e5:9e:
57:df:0e:1a:6a:11:e8:c2:c9:21:71:41:54:70:66:
0b:9b:a3:79:55:17:cb:10:ad:06:c4:81:b3:19:a6:
e2:7d:6d:94:b4:61:2f:a5:27:52:29:b1:ef:bd:4f:
d7:5b:fd:e9:71:af:46:12:51:bf:dc:ca:9c:0f:a5:
62:b8:50:9d:58:29:dd:98:f8:41:1d:0d:36:39:eb:
0a:98:05:bf:c6:4d:64:f3:01:e5:e6:61:4c:39:ce:
3c:36:0f:8d:b6:b3:30:bf:44:5f:60:b1:fe:c9:a5:
c9:7c:c0:59:25:e0:42:57:84:72:b0:2a:e9:72:4e:
fc:1c:2b:5b:d2:37:d5:42:63:7e:38:82:5b:38:8c:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:52:20:B3:72:73:1E:D7:4B:D5:09:2C:A3:7C:1D:5F:CE:98:9F:01
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:21:62:7a:89:16:84:be:dd:01:07:b4:d1:cc:01:4f:1d:86:
42:16:13:aa:d9:51:2a:6d:0c:b3:b8:74:22:a0:81:35:e5:1f:
2c:57:d5:a1:0b:48:6e:29:2d:66:06:a4:18:8e:a0:10:23:36:
fc:57:d9:3a:18:5e:50:e6:36:eb:c4:13:de:f4:28:44:56:ca:
7d:3a:4d:35:dc:8b:d3:e6:84:4d:1f:85:80:48:ae:7d:19:cd:
23:79:dc:c7:7a:23:e1:7f:f4:e3:8a:93:2d:b9:da:a8:73:4b:
dd:81:53:81:2c:be:73:90:bb:58:9c:28:13:10:e5:3a:bd:9a:
81:d6:0c:c5:62:14:17:e6:fe:e9:14:53:19:70:88:9e:85:ac:
29:ac:aa:af:db:22:98:e7:fb:5c:5b:83:ab:66:cc:e5:35:4a:
84:7a:27:56:c2:fd:5b:e6:fc:2a:56:6c:38:4e:a7:0b:99:c1:
c5:05:4d:29:4d:29:92:c7:16:4a:5d:5e:27:f0:f7:e8:8d:58:
af:10:5f:97:22:ef:b3:18:50:f3:09:ec:82:5d:8f:26:68:a2:
a8:5e:5b:8a:0c:78:11:9d:13:b2:72:fa:5e:99:b6:42:95:3f:
67:b4:3a:96:25:ba:20:75:6f:99:b5:82:f5:39:fe:d9:70:02:
3e:09:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:48 2026 by rpki-client