Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: oWQY2bg2v7aQFUqIOQpyDX5eMPN36DIG2h5Oqpl4mGc=
Subject key identifier: 10:67:49:90:0E:9D:70:19:F0:D3:DF:30:D3:3B:20:E3:4A:96:BE:37
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019EBFFF61FF99E58F41CE082FB9D921C8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 069A
Signing time: Sat 13 Jun 2026 08:00:45 +0000
Manifest this update: Sat 13 Jun 2026 08:00:45 +0000
Manifest next update: Sun 14 Jun 2026 08:00:45 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: dV6YMqxZnNY4hY+sWUVCbDh2sQqoltRx8YWsLSRY2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:61:ff:99:e5:8f:41:ce:08:2f:b9:d9:21:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jun 13 08:00:45 2026 GMT
Not After : Jun 14 08:00:45 2026 GMT
Subject: CN=106749900e9d7019f0d3df30d33b20e34a96be37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:f1:19:19:bb:36:72:cf:3d:88:9f:e5:01:
64:f9:b5:aa:50:f2:8e:00:07:69:64:3f:6a:f2:c1:
63:7e:c0:11:4f:16:99:3e:52:4e:59:e8:4f:be:7e:
8b:4b:d4:ec:56:0b:ef:b4:11:78:ea:04:3e:6b:bd:
d2:9a:d4:e0:6a:41:78:56:44:30:08:aa:e9:b2:78:
a5:9f:b9:76:90:75:9d:d6:57:ed:30:3f:e2:85:6b:
cc:eb:2b:0a:ed:99:82:b8:31:1c:84:a4:72:3a:35:
25:e5:aa:46:7d:78:b6:b7:01:fc:9d:1f:de:6f:2a:
a1:32:46:24:74:ba:59:83:61:67:cf:19:34:87:ea:
ea:21:81:94:63:30:61:9b:5a:08:54:9d:24:6b:13:
36:80:e6:30:19:f6:06:ad:17:40:23:a9:e7:d6:cf:
34:97:a7:f3:94:ca:96:f9:33:5f:2a:c6:e3:df:bb:
83:3e:93:62:c5:f7:85:fe:2d:a8:ea:5e:a9:17:5c:
b7:f7:0c:79:6f:cf:9c:ee:27:54:84:85:e4:37:2c:
12:4d:94:88:ab:46:a4:64:7d:67:24:7d:66:99:1d:
e7:5e:8c:71:9c:d4:f0:a3:e1:a7:b1:e1:44:f3:ef:
28:0d:ab:e6:91:bc:5e:f0:b7:71:e8:9a:31:19:30:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:49:90:0E:9D:70:19:F0:D3:DF:30:D3:3B:20:E3:4A:96:BE:37
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:64:7f:41:3f:0c:33:d8:06:bd:45:27:33:0d:bf:2b:37:
3c:f9:3f:b4:a0:b2:ce:9d:fc:a0:01:9c:75:c6:da:d1:ae:3c:
b1:c6:26:31:a9:84:f0:f9:c2:a9:47:d0:8d:db:45:52:cf:16:
c1:a2:1e:38:87:a2:93:6d:de:26:9d:0a:7a:1f:9f:8b:96:f8:
c8:5f:09:48:9c:82:7d:ab:11:57:5c:9b:55:55:c0:5b:ce:e1:
ff:c8:87:51:93:2b:b9:56:dc:f1:71:03:e1:43:51:05:7e:36:
ad:e3:00:ad:7b:6e:a4:f4:99:68:72:56:00:30:61:4e:8d:01:
10:c3:13:9b:90:4b:33:55:15:87:0c:ad:19:10:be:4a:0e:9f:
13:28:ae:26:7c:e4:d5:1c:1d:8d:c6:ba:21:1c:29:50:04:75:
a1:f1:00:2e:6f:21:34:97:c3:f6:ae:f4:57:13:82:6f:51:e8:
35:e6:21:c5:53:ec:64:2e:33:6d:44:e7:c5:14:e5:cf:39:b1:
d6:0f:13:aa:61:34:fc:d1:5d:a8:2e:4d:f4:b0:b0:a4:33:2b:
ce:66:29:ae:1b:e2:81:f2:8f:45:8f:f1:85:db:83:9c:25:4d:
06:6e:60:31:c8:d9:0c:c3:f6:42:e2:c2:6f:5e:12:3a:4f:93:
af:0c:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:46 2026 by rpki-client