Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: ng/6UUMkC+kgNb2XiKMspe0hmPAk70h20idqAPYBfOA=
Subject key identifier: E1:28:CC:06:D2:87:AD:DA:70:74:61:25:BC:78:67:F9:B7:C2:30:B7
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019D37F78E12572BD4C539D2B9B47A592F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 05CF
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: 7UEDrOOy9i1zvSP2H5GlRtx6jrpQHCnz/K+ZkQcwSHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8e:12:57:2b:d4:c5:39:d2:b9:b4:7a:59:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=e128cc06d287adda70746125bc7867f9b7c230b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:df:54:7b:06:a2:a3:bc:76:17:3b:f8:c7:
04:d6:5a:3a:a2:69:9c:50:6d:72:e7:81:72:fe:08:
b1:94:78:01:db:bf:47:69:23:94:30:b2:21:05:39:
b8:13:7e:22:02:07:01:c6:c6:ba:55:01:c0:a0:f4:
81:13:43:26:cd:3b:c2:ad:83:25:69:83:c1:a7:b5:
3f:59:11:86:43:b5:6d:86:b9:cd:8a:b0:99:c5:68:
88:e5:c4:e8:c3:98:62:96:6d:ad:ac:c9:f5:ad:43:
e2:45:7c:c5:2b:0d:a7:aa:bf:6e:25:0e:22:99:02:
cc:d4:43:29:d5:08:b6:83:24:07:8d:07:79:27:04:
3e:c5:59:a7:60:5c:00:20:e9:3c:08:3d:32:17:41:
7a:00:92:f9:fb:86:59:b6:fc:bf:37:41:a3:60:d5:
4e:4b:3b:78:0f:96:74:7a:f0:e8:f3:b9:0e:fd:18:
ec:ad:be:c0:41:6f:77:52:7c:af:35:45:1d:b3:44:
22:59:b5:8b:9d:75:63:08:ca:91:c4:bb:af:69:77:
23:0f:05:71:1c:c6:40:1b:6c:81:d8:05:f8:0f:88:
6f:ce:04:a8:84:13:02:ce:43:9e:fe:15:e2:e9:0f:
39:5d:7b:96:b7:7a:30:f9:e7:84:f5:f3:25:b5:e8:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:CC:06:D2:87:AD:DA:70:74:61:25:BC:78:67:F9:B7:C2:30:B7
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:48:4d:69:8f:8f:0e:04:0c:1a:7c:fd:08:33:83:73:1e:
b2:2e:b2:b7:f2:61:f1:50:16:31:8b:6e:97:9f:bb:1e:18:21:
92:0c:ef:a9:34:97:a5:dd:fc:b7:7a:a8:69:60:e3:3e:0f:3a:
ac:f4:e7:c4:82:9b:2a:36:48:3c:22:c5:3b:30:71:1d:d7:f7:
a2:29:72:c5:3f:0b:97:36:3e:5a:5b:b8:bd:11:c1:a2:a5:0f:
7b:8f:71:67:e7:1c:83:fc:2c:9f:ea:04:30:fb:32:69:54:30:
32:3b:50:55:bf:ec:3c:7b:18:ed:f2:ec:75:6a:32:6f:24:f1:
0e:7a:bc:c7:30:b3:47:70:4d:df:d2:30:ea:82:c0:42:6f:77:
04:eb:34:ef:8d:f7:df:f5:3a:b8:5d:cd:bd:6a:5b:91:70:d6:
82:71:39:05:ec:59:04:9c:7a:2d:bd:e7:ef:24:e1:03:9f:23:
d0:ce:0b:a6:df:48:c8:9d:bd:c7:32:0c:e0:03:ee:67:ba:ea:
ca:4d:82:21:9a:17:8e:96:4e:03:35:7f:1c:05:23:b3:3d:63:
5f:c7:68:d4:65:00:b5:d4:ae:a8:45:3c:19:45:b2:fc:cc:7f:
a5:05:08:c7:09:dc:49:72:ee:6f:c2:a2:ba:94:06:7f:56:55:
3b:8f:67:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03944SVyvUxTnSubR6WS9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjYwMzI5MDUwMTAzWhcNMjYwMzMwMDUwMTAzWjAzMTEwLwYDVQQD
EyhlMTI4Y2MwNmQyODdhZGRhNzA3NDYxMjViYzc4NjdmOWI3YzIzMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtPfVHsGoqO8dhc7+McE1lo6ommc
UG1y54Fy/gixlHgB279HaSOUMLIhBTm4E34iAgcBxsa6VQHAoPSBE0MmzTvCrYMl
aYPBp7U/WRGGQ7VthrnNirCZxWiI5cTow5hilm2trMn1rUPiRXzFKw2nqr9uJQ4i
mQLM1EMp1Qi2gyQHjQd5JwQ+xVmnYFwAIOk8CD0yF0F6AJL5+4ZZtvy/N0GjYNVO
Szt4D5Z0evDo87kO/Rjsrb7AQW93UnyvNUUds0QiWbWLnXVjCMqRxLuvaXcjDwVx
HMZAG2yB2AX4D4hvzgSohBMCzkOe/hXi6Q85XXuWt3ow+eeE9fMlteiBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEozAbSh63acHRhJbx4Z/m3wjC3MB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5lITWmP
jw4EDBp8/Qgzg3Mesi6yt/Jh8VAWMYtul5+7HhghkgzvqTSXpd38t3qoaWDjPg86
rPTnxIKbKjZIPCLFOzBxHdf3oilyxT8LlzY+Wlu4vRHBoqUPe49xZ+ccg/wsn+oE
MPsyaVQwMjtQVb/sPHsY7fLsdWoybyTxDnq8xzCzR3BN39Iw6oLAQm93BOs07433
3/U6uF3NvWpbkXDWgnE5BexZBJx6Lb3n7yThA58j0M4Lpt9IyJ29xzIM4APuZ7rq
yk2CIZoXjpZOAzV/HAUjsz1jX8do1GUAtdSuqEU8GUWy/Mx/pQUIxwncSXLub8Ki
upQGf1ZVO49n1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:59 2026 by rpki-client