Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: a09uc0SYsCXO5MJ94Yx8rYU9Tiq2CawinC/aJkcwr1s=
Subject key identifier: AF:83:65:71:EC:D2:13:1A:F5:68:A2:2F:A2:AC:E2:15:E9:85:4E:1B
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 01A1DEA7BA241BBBB63DD8FBA103D1C1D72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1809
Signing time: Sun 15 Nov 2026 10:01:36 +0000
Manifest this update: Sun 15 Nov 2026 10:01:36 +0000
Manifest next update: Mon 16 Nov 2026 10:01:36 +0000
Files and hashes: 1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: /gQvDf5Ks8jatt/m5HR3nzmQ9wngNllW/brEcp7P5o0=)
3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:ba:24:1b:bb:b6:3d:d8:fb:a1:03:d1:c1:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Nov 15 10:01:36 2026 GMT
Not After : Nov 16 10:01:36 2026 GMT
Subject: CN=af836571ecd2131af568a22fa2ace215e9854e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:89:c9:1f:76:fc:79:cc:c2:cd:a6:09:5b:
87:55:48:b5:ca:98:6c:b9:ed:a5:41:46:5f:14:7e:
97:58:30:ee:89:4d:52:51:31:98:83:2e:2e:69:14:
5e:9c:da:98:59:11:c5:1c:94:c6:eb:52:a9:b7:1a:
88:62:b3:e9:26:de:13:26:19:41:0b:8e:32:ed:22:
76:3c:dd:34:f8:86:ac:fa:98:bb:6b:f9:07:f1:27:
56:5a:7c:9f:5d:40:ea:52:fc:ac:89:cd:2c:51:7e:
a8:c1:1f:30:c9:d2:46:49:ab:53:ee:ce:a2:1c:77:
2a:7d:33:1c:39:13:b0:d1:0b:6b:4d:30:2a:b0:a2:
36:f4:75:c9:a1:cc:42:29:91:3d:70:ca:a8:b9:37:
04:82:c0:65:cb:88:88:df:24:9c:ad:3e:84:e9:99:
33:9a:0c:bc:d8:df:c4:c4:e5:dd:6e:37:d5:b0:81:
ed:31:cc:bb:95:d1:0c:bf:f3:63:0a:39:c4:35:d1:
6b:46:db:34:fd:d3:59:6d:51:09:e3:a9:33:73:ec:
ac:be:c1:2e:2f:e4:a3:0b:49:8c:58:ce:dc:38:d2:
b4:34:be:8a:f0:19:a4:48:cc:ed:42:a0:99:96:b1:
5c:f8:08:6b:55:57:d1:52:6a:d6:60:c7:49:b9:1a:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:65:71:EC:D2:13:1A:F5:68:A2:2F:A2:AC:E2:15:E9:85:4E:1B
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:10:05:9e:eb:bc:77:49:2f:7b:c9:ff:b4:d4:84:b3:26:
5b:8c:d9:d4:11:6e:4b:7c:e3:f9:d0:1d:a6:f6:5c:dc:9e:ca:
6f:83:71:06:d5:0c:e5:d2:db:7b:09:ec:ba:84:e3:77:70:f7:
62:30:22:e3:56:65:06:19:26:f6:69:08:98:e0:78:57:c7:76:
6a:c6:73:bd:63:78:7a:9a:cb:d4:fe:5b:bf:88:5b:7e:9b:aa:
2d:8f:1e:7d:74:58:2c:d5:c5:19:56:b4:4e:8f:35:bf:2f:bf:
c6:b1:a6:e3:61:68:84:d5:ef:90:3c:73:c1:7f:db:c3:65:f4:
5c:73:9a:38:83:a3:9c:d6:8d:6f:ac:e9:a6:91:ec:1f:5d:c4:
64:f9:18:9e:22:28:47:12:fe:bd:f4:51:83:ed:f5:9c:48:ff:
62:c2:92:69:b8:a1:01:4a:84:e0:60:da:86:ed:1b:38:76:ec:
1e:6f:aa:6d:0b:2f:98:c7:69:bc:1c:37:f4:eb:ec:e5:37:04:
2b:05:20:7f:2a:7b:a0:11:5a:8d:55:3d:83:17:6c:10:db:a3:
2b:ad:16:4d:58:00:69:66:79:c3:1c:d9:5b:48:4e:71:e7:83:
8b:0c:ef:1a:ac:14:f7:82:13:4e:17:ee:7c:7e:d3:bd:ae:fb:
ac:d3:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:10 2026 by rpki-client