Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: owC/O3RelZMmrh+6ykmB4BxAW8EaUZkhlhOOd+5ZnKA=
Subject key identifier: 0A:57:37:54:97:79:62:82:CF:F5:2B:41:C0:02:83:03:C7:D6:7D:84
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019CAC102438745AA666E2431A9727E76C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1558
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: OnaMza6ypKQZY6RIgDj6JDGtPLvrzFHJoTkrZFoYGbA=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:24:38:74:5a:a6:66:e2:43:1a:97:27:e7:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=0a57375497796282cff52b41c0028303c7d67d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:2d:d7:9f:53:6a:43:a8:7a:07:54:4a:a1:
50:86:af:53:0c:d7:02:94:09:01:4a:ab:1a:66:8c:
24:a6:2b:e0:46:b8:2a:c9:14:56:a8:cd:d7:f8:1c:
e7:f6:3f:3a:7f:9c:f2:46:2a:2c:7d:1f:72:bd:54:
7a:dc:b3:2a:21:9e:99:62:9e:64:48:22:0e:0f:3c:
79:92:e3:86:fa:13:33:76:51:ad:27:d5:ef:f5:ec:
e5:a8:6e:f7:5e:79:10:f5:40:cf:53:cc:a8:e6:f2:
98:97:30:6f:ca:7d:fe:bd:7b:f0:36:1b:1f:c9:17:
1c:7e:9b:a9:af:45:1d:71:a5:14:65:d6:0f:84:21:
25:d4:f2:2b:8d:18:b4:0f:06:6d:7b:36:7a:c6:25:
1c:75:6e:92:2c:12:67:6f:6c:52:40:70:7a:80:58:
6f:da:6c:4c:43:f4:1a:38:07:a2:7f:76:ea:29:1c:
9d:45:a6:12:4c:05:6c:85:22:ad:11:94:5a:8e:bd:
f4:c8:36:ef:4d:6f:60:92:79:3f:b2:90:28:38:20:
f5:b5:8d:cb:88:8a:64:e4:c2:61:9e:1d:ee:a7:6a:
ae:9a:aa:e4:22:0b:3c:e8:db:6f:0d:05:bb:ce:0b:
1f:32:39:7e:07:04:f3:84:8f:1c:94:10:c7:78:d4:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:37:54:97:79:62:82:CF:F5:2B:41:C0:02:83:03:C7:D6:7D:84
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e5:83:c6:88:68:48:e3:27:0a:10:cc:40:45:c2:d4:bc:41:
aa:62:38:82:ed:bf:8c:6b:6f:a8:34:6a:f8:ad:2c:03:e8:1f:
e6:1a:c7:20:66:d4:7e:e2:20:0d:1f:39:f5:13:2a:80:6a:cf:
f1:06:28:ca:f5:e4:c9:63:67:22:b1:2a:18:eb:aa:c8:69:b4:
db:fd:b0:5b:48:b2:03:84:56:46:ee:28:c6:ec:d5:e6:52:e1:
02:f4:88:14:a2:46:8c:b3:59:d0:74:00:1a:5e:14:8e:13:1f:
f6:e0:19:0c:06:65:ca:1f:79:97:ad:fe:79:bb:c8:ab:21:66:
a4:4b:8d:bd:86:47:4f:69:04:ca:d7:46:36:7c:2a:2d:10:23:
21:d6:a0:bd:1f:da:eb:29:fe:19:1b:cb:fc:31:e2:e3:ce:3b:
ab:dd:bb:79:fc:2f:50:b4:af:5b:0c:7c:d4:d6:5f:04:d3:29:
8f:65:80:9c:f2:7d:cf:ed:2b:9c:a5:ab:6f:d0:59:c5:10:f5:
0f:66:a8:cb:73:50:be:cc:28:09:5c:47:b5:45:0c:20:73:93:
90:ef:32:4e:45:c4:59:5f:c3:ba:07:f2:8d:d2:7d:10:4e:2e:
26:97:68:de:f3:01:b9:9c:6d:e3:91:21:1d:6a:53:0d:18:5b:
51:5d:a3:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECQ4dFqmZuJDGpcn52wwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjYwMzAyMDEwMTA0WhcNMjYwMzAzMDEwMTA0WjAzMTEwLwYDVQQD
EygwYTU3Mzc1NDk3Nzk2MjgyY2ZmNTJiNDFjMDAyODMwM2M3ZDY3ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t8t159TakOoegdUSqFQhq9TDNcC
lAkBSqsaZowkpivgRrgqyRRWqM3X+Bzn9j86f5zyRiosfR9yvVR63LMqIZ6ZYp5k
SCIODzx5kuOG+hMzdlGtJ9Xv9ezlqG73XnkQ9UDPU8yo5vKYlzBvyn3+vXvwNhsf
yRccfpupr0UdcaUUZdYPhCEl1PIrjRi0DwZtezZ6xiUcdW6SLBJnb2xSQHB6gFhv
2mxMQ/QaOAeif3bqKRydRaYSTAVshSKtEZRajr30yDbvTW9gknk/spAoOCD1tY3L
iIpk5MJhnh3up2qumqrkIgs86NtvDQW7zgsfMjl+BwTzhI8clBDHeNSzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApXN1SXeWKCz/UrQcACgwPH1n2EMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOWDxoho
SOMnChDMQEXC1LxBqmI4gu2/jGtvqDRq+K0sA+gf5hrHIGbUfuIgDR859RMqgGrP
8QYoyvXkyWNnIrEqGOuqyGm02/2wW0iyA4RWRu4oxuzV5lLhAvSIFKJGjLNZ0HQA
Gl4UjhMf9uAZDAZlyh95l63+ebvIqyFmpEuNvYZHT2kEytdGNnwqLRAjIdagvR/a
6yn+GRvL/DHi4847q927efwvULSvWwx81NZfBNMpj2WAnPJ9z+0rnKWrb9BZxRD1
D2aoy3NQvswoCVxHtUUMIHOTkO8yTkXEWV/DugfyjdJ9EE4uJpdo3vMBuZxt45Eh
HWpTDRhbUV2jbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:24 2026 by rpki-client