Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: lfnBudJjFAjgiJX76nw97odUEacx9I//YBFU2hx5bH4=
Subject key identifier: CE:9E:D9:96:8C:D6:AB:4D:3F:3C:57:DA:CA:ED:B8:E6:50:76:5F:96
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019D97AAD866B10DF79963DAA3D2B9CD3E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 15D2
Signing time: Thu 16 Apr 2026 19:00:49 +0000
Manifest this update: Thu 16 Apr 2026 19:00:49 +0000
Manifest next update: Fri 17 Apr 2026 19:00:49 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: Hk6xMwBBeIBOZAhzdz0pA+5L0B0YPSnovAYWWh4MGY0=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:d8:66:b1:0d:f7:99:63:da:a3:d2:b9:cd:3e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Apr 16 19:00:49 2026 GMT
Not After : Apr 17 19:00:49 2026 GMT
Subject: CN=ce9ed9968cd6ab4d3f3c57dacaedb8e650765f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:f8:af:76:2e:d1:3c:08:0b:d1:c1:90:1d:
d7:1d:90:35:be:2a:85:fa:45:82:e7:b4:25:e7:c1:
27:6c:64:32:1b:cb:9d:e8:ef:7d:10:d0:8a:3a:d4:
be:73:d8:2a:1d:63:d5:a8:76:d2:95:7f:fd:f6:8c:
ce:ed:97:5c:25:8e:f6:31:f3:c9:71:cf:1f:b7:b6:
94:50:71:ba:49:bf:fd:fd:a5:c6:7c:f3:93:f1:34:
0a:b7:61:91:74:3f:d3:93:51:5a:03:f1:00:78:39:
21:17:2e:78:09:95:13:34:eb:6c:65:e4:d6:22:6a:
f5:db:80:13:64:28:dd:77:1b:a4:99:da:63:98:f7:
89:55:4f:b4:ed:c3:b2:11:2d:ff:55:1c:87:cf:f3:
f1:8f:38:03:50:42:83:7f:46:0a:9b:3a:61:03:10:
b2:a7:b8:b7:92:d8:c6:9d:b8:28:cf:09:67:4c:65:
7c:04:2d:4f:f1:20:94:80:17:f8:00:59:c3:05:bf:
ee:81:35:6a:f2:16:1c:f2:ff:4b:02:e9:78:41:b3:
63:61:80:57:12:96:b2:fd:7e:75:d7:aa:b7:da:83:
1f:93:9e:2c:97:62:2a:4b:f5:53:bd:ac:16:22:66:
c8:7c:87:e7:bc:8d:5e:c5:8f:88:9a:c7:02:88:46:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:D9:96:8C:D6:AB:4D:3F:3C:57:DA:CA:ED:B8:E6:50:76:5F:96
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:d3:5c:a5:17:a8:52:b9:2c:40:da:c4:e2:dd:58:a5:d5:
08:73:fc:6b:b6:36:70:3a:45:a3:d3:4f:7a:fd:ae:09:2a:64:
ef:db:43:98:34:f4:01:98:08:f4:f6:55:11:00:99:bd:e9:61:
78:fd:cb:11:1f:1e:76:c3:03:73:41:0b:18:dd:dd:27:bd:cc:
be:ad:47:9c:97:c9:f0:33:26:c3:0b:11:4c:66:e5:dd:2d:f1:
28:42:aa:87:58:f3:f3:64:38:c6:17:d2:56:10:ed:cb:a8:ad:
00:df:21:7d:51:86:16:28:85:4c:b7:f7:de:20:a2:f7:3a:14:
53:36:2b:c8:30:55:e6:22:29:85:50:84:c9:63:eb:9c:00:0c:
fe:fc:61:c6:75:2e:8c:c5:0e:e1:62:cf:28:6e:e0:88:f8:16:
8b:84:9a:dd:5f:d8:45:ca:c5:9a:54:70:7f:8d:eb:40:76:5c:
da:c0:4e:75:83:c1:64:0f:59:df:ff:4c:67:88:18:8a:89:39:
3b:0a:ca:95:a9:dc:f2:a9:b7:a4:e5:c9:ea:18:82:6f:b6:3f:
13:61:1f:04:5f:29:73:8b:e0:34:e2:ab:ce:bc:f8:cf:c9:65:
56:1b:2f:98:c2:29:a7:05:9f:4b:40:de:7b:54:80:62:8b:70:
e3:f9:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:16 2026 by rpki-client