Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: QAaFA8mwrAaGK0Yv0kaZGJE6rWx3ntbQOUMtabOqVRA=
Subject key identifier: B3:E8:CE:D2:87:24:D6:00:A5:9C:61:A5:89:31:6B:38:02:60:C2:75
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019E1DC7645020B9FD57F50FD690C4BA054C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0646
Signing time: Tue 12 May 2026 20:01:06 +0000
Manifest this update: Tue 12 May 2026 20:01:06 +0000
Manifest next update: Wed 13 May 2026 20:01:06 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: /qj1EjEND20T6M7eAzVa1NZayEiTjsoiVe2UfcSdo0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:64:50:20:b9:fd:57:f5:0f:d6:90:c4:ba:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: May 12 20:01:06 2026 GMT
Not After : May 13 20:01:06 2026 GMT
Subject: CN=b3e8ced28724d600a59c61a589316b380260c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:0d:df:df:1e:21:83:2f:56:df:3f:0e:6d:
89:26:8d:ed:c5:85:99:2a:40:23:ff:bb:cb:79:6e:
2d:70:9b:c4:7a:4c:ca:2f:9b:9b:ae:43:65:2e:7c:
6d:6e:db:da:56:a1:9f:79:4f:cf:72:98:2b:c7:52:
cc:19:66:b3:7e:4b:fa:09:9d:a5:8a:ea:50:2d:1f:
7b:a7:9d:b4:85:ab:32:8c:88:60:5d:b4:6e:b5:e2:
fc:b0:d3:2c:0e:63:f0:6a:f4:90:a2:a1:66:74:a2:
d1:b1:01:12:0a:df:53:00:9d:29:3a:13:12:11:19:
66:9b:81:49:d9:b4:a5:fa:80:15:06:8c:88:30:f4:
41:93:35:8e:75:aa:31:d6:45:cd:1d:fb:d9:ef:24:
7a:4a:cb:c2:2a:37:6d:0a:91:70:1f:05:90:77:91:
a9:5f:87:e0:be:ff:ca:bd:97:44:02:af:65:6f:f8:
8f:75:f3:9e:88:94:69:4b:41:29:b4:1b:a4:46:05:
d4:1a:a7:8f:1c:0c:94:a3:f0:d1:e7:bd:33:b2:e0:
2c:10:f9:1b:c3:e1:bb:3e:ad:6f:ec:9b:ea:fc:3b:
88:f8:ec:d9:6e:83:d1:85:0f:26:93:d2:0f:1e:72:
2c:bc:b9:49:fa:de:30:71:e4:10:27:e7:d0:23:6a:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E8:CE:D2:87:24:D6:00:A5:9C:61:A5:89:31:6B:38:02:60:C2:75
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:39:3a:0b:84:a8:d5:ba:f1:86:8b:7f:c4:09:10:cb:84:
a5:55:35:f1:88:59:7c:3a:37:84:8e:2c:52:de:84:1d:49:7e:
0f:21:ca:a8:4e:44:40:9e:ac:f2:35:4a:b3:73:b3:bc:c2:50:
ed:07:b5:07:9b:7f:5d:e7:b4:19:cc:1d:5f:81:9f:3b:be:c0:
b1:08:8d:a3:7c:ef:62:00:ed:70:8f:08:49:67:49:be:f2:0e:
9f:c9:f0:79:46:f6:c7:c3:14:02:88:c1:68:5f:ea:6d:bf:fd:
46:36:96:8f:94:80:6c:bf:9a:53:f9:ca:2b:d6:d9:fc:82:80:
b1:96:38:79:8f:4f:21:c6:bf:c7:bd:88:d9:ab:8b:10:af:11:
d2:dc:fe:4b:fc:0b:00:a9:dd:24:a5:2d:5d:cc:14:69:c8:ef:
3f:5d:7c:2b:82:3f:54:c7:50:92:86:f1:51:9f:39:2e:c5:5f:
93:bf:0f:d2:6e:74:76:fe:0f:ef:ac:9f:c6:29:d5:73:b8:51:
e5:48:44:b3:2a:c1:7e:4b:d9:20:7b:c3:e9:1f:75:75:8d:5e:
a0:e2:e4:d2:aa:82:4c:21:4a:c6:3a:30:fe:de:ac:17:29:c6:
90:71:ed:81:11:df:25:4b:f2:92:f2:e8:05:46:1b:b3:89:2c:
1d:b5:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:18 2026 by rpki-client