Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: hgSMpoBUPGw9/EX256HuS1hWHPVk0+SeMkYlQFlKVlk=
Subject key identifier: F0:C2:57:A7:E1:15:46:96:FB:CA:28:B7:0E:00:48:69:BA:93:F6:7D
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019DA41C90EAE05E8287D378F2936FB4714B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0607
Signing time: Sun 19 Apr 2026 05:00:28 +0000
Manifest this update: Sun 19 Apr 2026 05:00:28 +0000
Manifest next update: Mon 20 Apr 2026 05:00:28 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: 2ERbRPk2+KXgE0lHz5fT4H8Eu+3TDtyYOtDzBfDzj8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:90:ea:e0:5e:82:87:d3:78:f2:93:6f:b4:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Apr 19 05:00:28 2026 GMT
Not After : Apr 20 05:00:28 2026 GMT
Subject: CN=f0c257a7e1154696fbca28b70e004869ba93f67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:5f:06:de:01:2d:0a:92:a2:fd:d2:90:0a:
93:3f:f7:4a:d6:ac:e9:04:43:37:44:21:23:a8:00:
0f:7f:09:03:36:05:ce:01:5d:60:3b:9d:20:61:bc:
3f:d1:74:d0:51:0c:3a:f8:97:70:79:bf:9c:e9:44:
31:66:b0:52:56:48:bc:ec:82:23:98:e4:db:8b:eb:
a6:9d:bb:de:47:21:15:05:cc:d3:a6:bd:d9:36:b2:
fd:17:74:70:91:e7:55:c8:c1:4e:9a:28:07:3d:99:
ff:d0:61:68:cb:d2:6b:02:15:f3:3d:8a:51:86:3f:
e8:24:a4:11:c2:ca:95:9c:d1:12:92:0f:12:8f:dd:
0d:76:1d:eb:23:67:1d:ad:78:4b:5d:59:00:cd:f7:
39:20:e8:63:a0:25:97:21:ee:21:c6:ad:e1:bd:2d:
5b:37:1a:11:c6:51:6b:63:d3:30:6e:f4:09:47:e3:
0e:9f:0a:7c:8a:60:0a:81:bd:5c:92:55:ad:25:3f:
6c:13:ab:97:e1:15:71:1c:a8:37:6f:23:57:7d:3c:
15:97:5c:3a:12:05:16:8f:f6:10:4f:21:97:db:12:
2e:1e:3c:5d:be:f2:69:49:14:02:e2:56:9e:39:05:
49:10:32:59:e6:21:bf:32:44:e6:92:48:25:81:13:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:57:A7:E1:15:46:96:FB:CA:28:B7:0E:00:48:69:BA:93:F6:7D
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:b5:f0:e3:f1:a5:e1:f0:64:4f:f4:30:9a:8a:33:32:53:
b7:f6:8b:58:b0:cd:49:68:85:57:34:26:68:5d:e1:d0:2e:65:
fb:b6:34:f6:c5:12:38:f1:b4:39:c6:52:51:4f:c6:b1:63:cc:
d6:7d:cd:33:3b:91:0b:ac:ab:36:b0:56:ae:23:66:df:5a:61:
97:c7:fc:a4:ad:02:61:e5:54:6f:ef:4c:41:60:d2:37:28:c6:
f9:85:68:95:7c:cc:31:74:92:4e:33:84:45:0f:e2:58:b9:ff:
0a:6b:53:c1:40:14:5b:d8:62:f7:f2:84:80:47:e7:ee:0a:82:
d7:83:a7:ce:b2:c8:2d:c1:38:57:b3:c4:9a:a0:cd:78:91:bd:
54:c0:ba:99:86:58:df:b2:98:6e:f3:05:a2:6e:08:7d:98:39:
79:de:99:81:72:14:85:00:b6:55:86:1a:bd:ea:47:89:f5:99:
cb:08:5e:8f:c3:38:15:1d:99:55:d7:de:c7:45:c3:b4:b2:2d:
aa:5f:bf:4d:f4:a9:c2:3b:fb:43:ab:3f:b3:ea:3e:5d:e0:fa:
dd:2c:09:9d:fd:7f:f7:c7:dc:d8:3f:7d:78:2a:9a:17:87:2a:
32:77:a6:d3:5f:59:9e:1d:8a:00:f1:a2:03:2c:5e:a6:85:7d:
29:45:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:13 2026 by rpki-client