Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: ptk9fNymomo2JtIoERGz1/eAKFfupUPWkLfPd+eUZJQ=
Subject key identifier: D2:A3:8F:D5:FF:77:53:18:DF:B6:17:A6:52:54:97:94:07:25:AE:2B
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 01A1528885F3A6C57A1245744D80F4245B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 07EF
Signing time: Mon 19 Oct 2026 05:00:41 +0000
Manifest this update: Mon 19 Oct 2026 05:00:41 +0000
Manifest next update: Tue 20 Oct 2026 05:00:41 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: 8GscauS/kT+65rFB6zYW5GVcNqfhaLCxGQGII63hmBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:88:85:f3:a6:c5:7a:12:45:74:4d:80:f4:24:5b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Oct 19 05:00:41 2026 GMT
Not After : Oct 20 05:00:41 2026 GMT
Subject: CN=d2a38fd5ff775318dfb617a6525497940725ae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:69:cf:cf:84:f3:4c:1a:0d:90:c0:49:49:
04:af:21:d4:81:d2:65:06:b9:80:a6:ee:d5:13:3e:
a4:13:b3:5f:c4:8e:48:c8:26:d3:44:75:48:65:f9:
a5:46:7b:aa:4a:95:b9:df:f6:c3:0f:f4:b8:ad:78:
9b:81:cd:8e:71:4a:70:7a:5a:d7:f3:8d:fd:91:be:
9a:ac:e4:0c:a8:43:45:96:b1:6f:7c:74:9b:c1:4e:
eb:42:67:b9:c9:44:24:44:e8:ad:1d:ca:fa:7d:ff:
46:2d:dd:9b:e9:14:42:5d:cd:17:9d:07:43:9e:e9:
4a:f6:b6:01:26:be:ba:ca:eb:ea:69:5a:e1:d6:55:
ed:97:a6:5b:36:e0:be:81:8b:5a:b5:05:6b:dd:c6:
02:a7:c4:d9:23:d4:4e:2f:13:4b:d4:e6:6a:55:0c:
0a:83:3c:09:60:c3:ae:06:42:9e:c7:83:fa:11:46:
cf:d3:09:d8:ac:e3:b8:fe:51:bd:df:5a:d0:c5:b7:
09:4d:85:e7:15:94:ea:c5:ee:02:80:de:82:cb:71:
0c:9b:11:bb:5a:0b:d6:89:33:06:62:b6:4b:6a:e7:
1b:c3:40:60:fb:b8:39:2b:d2:d5:8e:da:dd:04:56:
f6:ab:f1:14:3f:aa:71:b5:15:5d:cb:9f:94:39:e7:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:8F:D5:FF:77:53:18:DF:B6:17:A6:52:54:97:94:07:25:AE:2B
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4f:56:32:68:a4:39:9f:c3:d0:84:a1:65:c7:d4:58:59:e9:
c7:4c:ac:15:b2:9d:e1:8a:ae:16:70:b7:20:66:cd:89:d5:33:
1f:87:bb:3b:cf:cf:ab:5b:a9:fa:79:db:fd:f7:3d:d5:11:80:
f1:29:ac:62:3a:ba:4f:47:e5:cb:ed:f3:06:85:7c:c2:51:b9:
a4:7d:51:17:fd:48:1c:9f:21:16:76:9c:04:08:e3:2c:91:a3:
db:db:dd:b8:78:3d:a6:eb:8a:c1:57:df:4e:d1:54:d1:13:8e:
1b:2d:a2:c6:dc:db:5b:3f:5d:a6:b2:d3:98:33:d4:28:f7:4c:
46:d0:56:ed:38:a2:fd:c6:a2:28:0d:35:fb:1e:a1:d4:e8:97:
75:7e:2a:38:f7:66:cb:5e:90:d9:c4:6e:7f:f3:e0:6b:07:d7:
16:24:68:28:78:34:6e:d6:56:3a:df:7c:bd:7f:7e:4a:74:eb:
b7:b3:87:28:6f:18:2c:54:db:b5:9d:fe:eb:a7:75:a5:bc:06:
94:22:0c:c7:8c:a2:b7:9b:f7:29:ea:d7:d1:77:8d:b6:2b:a6:
21:37:85:56:61:fb:b2:e3:13:a1:34:a4:00:d8:8b:03:58:18:
f4:5e:88:6d:9e:72:21:b0:28:26:6a:9b:c3:3f:e7:8a:6c:59:
b0:0c:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:37:45 2026 by rpki-client