Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: 9ioLIF9dZZSFl9M7jzUIWOsjgeBOkbuZD5TG4V+LD2E=
Subject key identifier: 87:CC:DF:EB:4A:E3:52:4E:D6:53:C5:4F:32:12:A2:AE:53:4D:87:58
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019F927F90A017D9DCEC1D3B7196EB812CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0707
Signing time: Fri 24 Jul 2026 05:01:01 +0000
Manifest this update: Fri 24 Jul 2026 05:01:01 +0000
Manifest next update: Sat 25 Jul 2026 05:01:01 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: XE0AXQbBpbt3YFYIpGnqAKYNC6xniP2yTjxmPjMj5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:90:a0:17:d9:dc:ec:1d:3b:71:96:eb:81:2c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jul 24 05:01:01 2026 GMT
Not After : Jul 25 05:01:01 2026 GMT
Subject: CN=87ccdfeb4ae3524ed653c54f3212a2ae534d8758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:2f:01:8a:5d:a1:1f:aa:a6:95:8e:5b:c8:
ca:c9:c4:81:8b:7d:24:0a:33:cc:ba:ed:82:e9:5b:
a8:5d:12:ea:73:a6:04:16:ca:e3:f5:74:a4:1c:6b:
c7:3b:04:cb:0e:d9:48:09:00:ad:87:ef:d6:36:6d:
11:e5:02:75:cb:eb:e1:3f:99:c6:2e:92:ce:54:19:
49:8e:62:3e:f8:2f:49:af:67:fb:4a:d8:da:82:f9:
6e:b2:86:cf:81:e1:e6:75:8d:c6:23:d0:e6:f7:04:
a3:36:f8:5c:97:98:36:d5:c0:2d:89:99:36:4f:85:
38:d4:43:b5:8e:9e:85:41:8e:54:77:52:64:d9:9a:
48:6a:c6:79:db:7f:74:7c:50:bd:96:43:e8:d8:cd:
d6:31:ab:27:c6:3f:c2:72:2f:c5:f2:5c:52:1b:16:
7c:76:4d:55:5e:79:98:c3:bc:1e:66:08:f9:6e:90:
9c:de:5f:67:6b:bf:1b:88:92:2b:26:a1:c0:fd:da:
36:0a:00:f9:a8:b2:16:00:cd:aa:53:19:bd:51:98:
0a:98:89:2a:6f:01:95:a5:55:2a:56:b3:f1:bc:92:
25:29:d3:8c:69:a4:dc:a4:c6:24:b1:45:96:d7:c5:
ac:af:e3:71:c2:3b:d8:f0:c0:51:a5:fc:c4:c7:e4:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:DF:EB:4A:E3:52:4E:D6:53:C5:4F:32:12:A2:AE:53:4D:87:58
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:5e:e1:d4:b0:b0:29:68:92:d1:c2:97:e0:49:cd:e1:fc:
a2:2b:e3:81:02:28:41:83:77:26:88:db:ba:d1:7f:8d:10:5c:
0d:3d:65:7f:75:f5:76:96:dd:05:a4:a2:f8:6d:be:89:99:f3:
14:bd:7f:fd:e1:7d:d6:19:05:80:fd:13:59:32:e4:68:61:5c:
5c:1c:e5:fd:a3:5f:32:a8:27:ed:31:c3:90:79:05:1e:29:bf:
92:30:a4:9a:ef:6a:f8:84:35:39:7b:08:3a:32:cc:56:e6:bc:
7d:f1:8f:e6:76:1b:0b:4c:b4:20:6c:74:4a:2d:e9:d0:01:f6:
d2:f9:cd:b8:8e:de:88:be:83:87:32:e2:aa:fe:fa:be:77:c7:
2c:93:ff:ee:40:9d:87:45:4f:f2:48:c9:2b:01:c8:30:34:73:
0b:ab:c8:1e:ec:2a:dd:77:89:b3:e2:fe:81:6e:3f:e2:18:7e:
b3:84:64:4b:77:9c:2d:6b:05:30:6b:ba:f3:13:1d:c2:eb:4c:
83:db:9b:93:37:c5:93:79:9a:4d:cc:b1:70:89:78:e3:5d:f0:
36:21:c5:47:65:c3:2d:b4:3e:9c:c1:41:40:36:46:89:62:2a:
79:73:53:e1:c7:0c:ea:de:32:90:90:19:e9:80:d2:27:14:29:
12:b4:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:28 2026 by rpki-client