Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: 41mn7YcLA2rjsAkCARneLekAI8dgBEtN3DV/tuNQsPE=
Subject key identifier: 27:3B:60:0D:4A:96:CC:81:DC:2B:91:3A:61:AA:0A:94:99:C9:1C:50
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019E311724C3F363834139429301EFA1DDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0650
Signing time: Sat 16 May 2026 14:01:00 +0000
Manifest this update: Sat 16 May 2026 14:01:00 +0000
Manifest next update: Sun 17 May 2026 14:01:00 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: Qi+o96MjXO2ccRSkBTQPXFqEYFvElFEGM0oU2NHArGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:24:c3:f3:63:83:41:39:42:93:01:ef:a1:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: May 16 14:01:00 2026 GMT
Not After : May 17 14:01:00 2026 GMT
Subject: CN=273b600d4a96cc81dc2b913a61aa0a9499c91c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:8f:b0:db:e8:87:e6:f2:89:8d:b3:37:b3:
0d:ca:e5:53:67:91:64:85:01:20:d0:a7:00:82:65:
52:08:0f:96:1d:04:2c:36:be:14:b9:86:a6:7b:60:
c0:44:01:9b:1e:39:c2:09:9b:c3:c7:78:2f:32:42:
bc:fe:ef:f0:fc:fd:be:a3:dd:f2:64:71:c2:11:bd:
5d:12:58:da:21:3d:ae:f1:3f:50:0d:9d:b5:2c:4b:
73:f2:c5:a8:1a:0b:7a:2f:88:e3:a5:7f:33:21:d4:
3c:c7:b0:b9:e7:95:0d:e4:f7:e5:23:1d:9b:f3:01:
5c:9d:c6:4c:04:3f:dc:0a:8f:2e:8d:40:3c:aa:17:
3b:4a:6f:de:af:9f:56:53:5b:75:6b:03:22:b8:2a:
3e:ac:51:f0:6b:4f:95:40:e2:b9:41:75:c0:cf:10:
dd:96:fe:75:d4:24:21:8d:94:77:3d:d8:ff:81:3b:
5f:48:da:6a:e8:e8:03:eb:a0:a7:9b:05:00:26:2b:
ad:0a:39:92:b6:57:d2:db:18:67:f1:ce:b3:9b:80:
60:9f:79:b9:8b:68:9e:91:3d:8f:ff:d7:67:b0:81:
5e:49:83:30:c9:27:34:01:6d:99:8d:5c:d5:d6:90:
a9:9b:a7:fa:fc:4a:fd:bf:62:a1:7d:cb:47:52:89:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:60:0D:4A:96:CC:81:DC:2B:91:3A:61:AA:0A:94:99:C9:1C:50
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:79:88:28:34:3e:41:09:6d:b5:69:76:eb:f8:e4:5d:6a:
4d:dc:19:95:9e:c7:4f:be:3f:fd:d5:84:2d:08:34:d5:1f:a0:
25:66:01:39:b1:17:ca:93:bf:eb:e3:08:b4:8a:08:02:51:4e:
1f:bd:d0:07:43:92:9a:2e:96:a0:31:be:63:fa:68:75:1f:c2:
d5:73:70:c3:83:e8:4a:c2:97:65:0f:30:e1:ae:97:b6:1d:e5:
6a:70:86:b6:f7:50:e7:9f:f3:db:af:9d:65:84:4a:bd:54:4c:
24:fc:88:56:82:31:f4:f4:5d:d7:1c:b8:44:80:29:e0:58:e5:
43:e2:22:db:1d:5f:fb:0b:f0:69:be:db:cd:e3:02:25:1f:c0:
f4:96:32:75:fc:3d:3e:e7:bc:e4:dd:9c:1c:27:9c:1c:2a:9b:
6e:a5:db:4d:d9:cc:e4:dd:62:23:a0:d4:df:3d:e9:43:70:c1:
f3:6d:ad:a6:b7:39:5a:70:01:4c:eb:53:39:83:65:e8:6a:4a:
ef:38:b2:f0:c4:a4:3f:a1:a8:16:04:a2:7d:de:41:80:2c:38:
1b:e9:6e:75:9a:1f:4b:b5:2b:7e:f8:a1:f5:0a:4e:af:4c:f8:
be:e8:a9:9b:e2:b0:e2:9c:f0:62:68:64:9f:ad:fc:a0:35:55:
e7:ce:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:29 2026 by rpki-client