Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: ccpZ0P6+LDE46CCN/heOyRZxdMBf8GPbwS+8tXQgRW4=
Subject key identifier: 5E:50:D0:32:7F:71:2F:62:D6:6B:00:5A:8F:94:A1:42:C1:25:A2:62
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019FAB9AC4AC03AB4B54EEFABD2F7787AB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0714
Signing time: Wed 29 Jul 2026 02:01:14 +0000
Manifest this update: Wed 29 Jul 2026 02:01:14 +0000
Manifest next update: Thu 30 Jul 2026 02:01:14 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: ucwpagNvf0tmbuHK/jOndvDy+szwsfmdkHcUxlmviTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c4:ac:03:ab:4b:54:ee:fa:bd:2f:77:87:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jul 29 02:01:14 2026 GMT
Not After : Jul 30 02:01:14 2026 GMT
Subject: CN=5e50d0327f712f62d66b005a8f94a142c125a262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:47:1a:f0:d0:5e:12:e7:c9:0f:ad:77:c4:
f6:92:77:dc:52:0a:1e:1e:21:15:f1:e1:66:ed:e0:
89:56:56:94:c9:78:73:de:c2:5f:c2:7b:69:1a:8e:
7f:f4:48:cb:26:87:d1:96:82:2d:00:30:d9:9b:c0:
21:92:d3:41:f0:e6:5d:05:fc:2e:95:9c:f8:b4:86:
cd:a6:31:80:34:84:b3:c3:65:b5:a6:5f:1e:1e:0d:
1d:22:d1:da:fd:1c:ae:c3:fe:71:f8:c8:6d:da:5f:
93:e5:05:a4:f5:1e:d6:a8:36:d5:5f:63:b8:83:c7:
c0:f3:9d:1b:a7:d3:27:b6:09:b3:9a:cc:7a:0e:0a:
ff:b2:30:7a:2c:ba:38:5d:41:c2:65:51:ea:22:22:
1e:0c:33:ae:83:d1:dc:a4:70:8b:0c:80:f9:f5:e8:
05:4c:f5:f0:51:81:5f:eb:d7:a8:38:ad:92:8c:3f:
15:ab:26:87:6e:75:f6:c9:d2:16:75:54:5c:64:44:
0e:cb:41:f0:c6:0a:10:e9:58:f1:05:c7:7f:30:ba:
56:07:33:06:84:1e:e9:20:9b:c4:bb:86:37:1c:5a:
f4:b7:d6:c4:72:bb:9e:53:1c:8d:78:41:2a:22:74:
be:32:2d:86:6f:c4:c2:14:8a:cc:73:fe:8b:fe:25:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:D0:32:7F:71:2F:62:D6:6B:00:5A:8F:94:A1:42:C1:25:A2:62
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:89:be:d9:00:28:49:c1:a2:3f:ae:bc:22:61:8f:f0:73:
53:52:75:fe:c0:21:06:c3:2e:b5:dd:fe:3b:ff:71:15:27:c7:
3f:a3:ca:b0:33:d6:c0:a8:66:85:b4:55:9b:4f:47:e9:77:78:
27:13:06:ec:30:5c:5f:4c:9e:7d:8e:16:05:dd:a4:73:de:fc:
0a:c9:76:9a:3c:29:40:3b:d4:bd:f1:75:48:b1:16:fd:05:8a:
f6:26:4d:d0:87:9d:ae:a2:d7:eb:ef:4a:b3:93:8e:d2:2f:45:
65:05:f1:15:2a:b1:de:d9:6a:1f:46:10:95:29:f7:21:07:a1:
90:8e:b5:f8:ee:b9:8f:ef:c6:57:f9:f9:55:2b:c9:6c:93:f3:
82:44:23:73:d6:3a:5f:9a:05:eb:91:38:58:84:2e:b0:16:21:
3a:6b:cd:df:62:28:55:7d:a7:af:ea:05:b7:fe:84:c1:43:36:
99:30:73:cd:ef:51:92:37:19:39:ac:ed:1b:1a:d3:80:9f:fd:
04:0b:19:ec:82:9a:fd:d3:1f:fd:60:26:2c:2d:ef:3b:c8:f0:
ed:0c:f5:35:be:21:b8:af:5f:01:8e:13:d5:62:66:ff:82:7a:
24:17:68:19:1e:b4:3b:5f:57:7e:e8:d3:7a:69:65:08:e4:14:
41:90:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:50 2026 by rpki-client