Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: btvwV5VkJm7NRODV7DhCWF4DwNfetSwDhh7jRxntukU=
Subject key identifier: 48:6A:F6:50:AB:BC:6C:E1:2C:A6:CF:08:62:70:DC:C9:64:2A:E3:EF
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019D2884C3C89711E4F3AD4C403ED9A17705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 05C7
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: HSZFOMw9lCEeDpzcCEoAathfxh7JIAgF6XFBwc5Z/MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c3:c8:97:11:e4:f3:ad:4c:40:3e:d9:a1:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=486af650abbc6ce12ca6cf086270dcc9642ae3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:18:43:30:d0:1a:d4:de:c0:54:e5:29:46:
4c:35:6e:69:4d:96:01:c4:7d:d9:8f:70:2d:fc:3f:
67:41:b6:8e:67:a2:d3:e3:ba:fc:7b:2c:da:a0:10:
3a:90:6a:c1:55:25:7f:72:11:c9:74:32:f9:9e:a4:
c6:d3:71:f9:79:b6:a4:d0:31:0b:53:70:2c:d5:8f:
c9:71:8a:4d:23:30:3c:01:6e:40:5c:51:1f:f7:8e:
9c:e8:41:ca:4c:42:c1:dc:37:4f:40:f8:39:c1:86:
0c:63:93:9a:01:b1:53:f1:3e:51:ad:b5:bb:00:ec:
ef:74:13:79:09:f2:0c:ec:3f:6b:71:e7:cf:d0:fb:
88:e0:f7:c1:03:0b:85:3a:cb:d5:9d:ae:d2:89:7f:
05:0a:1d:ba:9c:c8:df:41:e8:e5:a5:c7:a5:8b:49:
05:cb:00:74:11:11:45:77:8f:6b:ee:8a:53:3a:7b:
40:09:10:f7:62:e6:34:ca:9d:06:9a:69:e3:a0:88:
85:48:b9:2a:40:64:45:2f:fa:e5:1d:53:ba:c0:5f:
98:22:eb:86:4c:9e:0a:40:d9:58:73:e9:64:14:33:
d3:bc:fb:50:e5:ad:d3:31:89:49:b5:73:26:b4:1e:
8d:a9:06:5f:a4:86:69:af:c3:f3:a8:ca:d2:5c:e4:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:F6:50:AB:BC:6C:E1:2C:A6:CF:08:62:70:DC:C9:64:2A:E3:EF
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c7:a1:62:72:ce:86:23:21:cb:30:fa:92:f8:30:c3:4b:da:
f7:f9:42:c3:3f:bc:47:39:8d:39:fa:5b:54:18:6f:f6:bc:96:
71:3b:1d:dd:ec:fa:82:0a:56:36:98:3f:0f:d8:0b:66:d7:5f:
ea:bd:7a:51:f7:dc:ad:e3:30:26:af:77:a3:95:34:38:df:28:
02:90:0c:19:cb:3d:d9:64:50:31:9a:31:cc:32:2f:a8:13:87:
bd:1b:af:c5:c2:7c:19:0a:ef:08:51:9c:98:77:92:20:7a:31:
22:04:94:a6:77:f3:f0:e2:dc:f5:bf:2d:f9:d1:44:08:de:dc:
7f:de:f3:a6:8a:60:35:ea:71:7f:a2:6e:9d:72:de:2d:37:ce:
32:4e:ca:23:37:d3:93:89:2b:4e:4e:a4:10:31:05:8a:47:e0:
ed:bc:a6:a7:5e:46:b1:f8:9d:0b:93:43:9c:40:01:80:a4:7f:
87:bc:f2:1d:aa:f8:10:fa:de:f7:d1:fb:c0:65:aa:fe:67:2a:
55:73:6e:2b:c0:6d:85:a5:4a:f3:da:3e:b3:58:91:74:57:53:
e7:4d:e7:25:72:2d:8c:fc:95:9f:72:c2:74:f2:23:f6:61:8e:
d1:f0:f2:47:ac:e5:be:5e:34:f1:e6:35:f7:1e:6f:f3:9b:d1:
62:79:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:05 2026 by rpki-client