Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: LIbdoJEzJifN0Kb51vIKhPP8OFZMEIpV3wPLLCjGt5E=
Subject key identifier: 37:12:7C:63:3C:53:DE:30:B1:33:4E:2A:30:7E:67:C6:4C:B0:2E:C8
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 01A0F7C49D9EA350864D6C635E626CBB8D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 07C0
Signing time: Thu 01 Oct 2026 14:00:52 +0000
Manifest this update: Thu 01 Oct 2026 14:00:52 +0000
Manifest next update: Fri 02 Oct 2026 14:00:52 +0000
Files and hashes: 1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: xccLehe4lxXrFtoR9hapvwYiSE+e6xt2tyGZhUJwpro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c4:9d:9e:a3:50:86:4d:6c:63:5e:62:6c:bb:8d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Oct 1 14:00:52 2026 GMT
Not After : Oct 2 14:00:52 2026 GMT
Subject: CN=37127c633c53de30b1334e2a307e67c64cb02ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:b7:f4:41:c8:f2:12:84:69:62:10:21:9f:
c7:69:ee:52:09:17:dd:57:aa:d8:a9:5f:45:a0:60:
49:26:4a:4d:6b:f9:26:12:5d:ff:46:91:21:06:06:
77:3e:57:4d:fb:49:ff:5c:11:d5:07:54:85:cd:da:
2c:7a:83:cd:c4:b3:98:5b:1d:24:3d:03:20:76:65:
97:fe:65:ee:3d:f2:99:fa:ba:4d:3e:b9:6d:cd:dc:
26:bb:d3:ab:bf:a3:29:18:6c:99:6c:69:5d:02:7b:
b2:d1:67:ae:05:ad:16:86:4a:12:42:2f:01:71:9a:
39:b3:cd:2d:66:c2:82:43:f7:ce:90:9c:70:fe:20:
29:e8:ed:64:67:32:00:af:4c:41:d7:e3:b3:7b:84:
69:08:b9:94:06:44:3a:fb:7e:26:a4:29:bd:84:78:
13:8f:e7:85:5c:37:79:72:54:00:e3:88:68:8e:4f:
1d:e5:12:23:a8:d3:1d:53:9a:52:a4:c7:47:c1:83:
a6:72:49:48:0e:fd:0f:55:1c:2e:b0:3f:91:f7:60:
3c:8c:b2:68:27:e2:8e:e7:50:56:f9:69:52:48:2b:
11:4a:9e:d4:6a:38:90:c1:81:20:1b:d8:2b:77:c0:
a9:a9:25:14:bc:10:cf:a0:32:8b:d2:56:25:21:fe:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:7C:63:3C:53:DE:30:B1:33:4E:2A:30:7E:67:C6:4C:B0:2E:C8
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:c7:05:77:7e:8d:50:51:a8:93:b3:8f:a7:99:f6:be:63:
8e:35:45:8e:26:57:39:49:a8:94:12:74:d7:57:3b:0a:1b:29:
e0:fc:09:2f:8d:74:3d:21:13:bd:e2:25:dd:4e:99:e2:1a:d4:
58:c5:63:17:c1:80:46:b8:8c:00:c5:78:c1:50:02:44:63:22:
46:ed:de:f4:9d:25:a0:f3:e1:d1:d5:07:f3:93:85:43:cb:7b:
42:68:8a:8b:c8:16:2f:8d:d7:2e:87:ed:a9:01:24:bf:6e:22:
dd:12:99:e4:cb:82:92:db:c1:c6:de:73:df:9a:14:0d:2d:76:
a8:16:90:af:10:d2:c1:48:03:10:63:b8:5d:a6:5b:a0:29:ec:
99:58:ab:73:d3:9c:3f:7d:9c:b8:f8:4f:f8:90:df:d3:f7:82:
27:2e:e0:b6:b7:f3:ff:9a:2e:7f:f2:4d:54:bc:94:c5:7e:97:
1d:73:69:69:79:5a:ae:e7:98:b8:0c:4f:0c:0d:63:13:66:cf:
32:97:c0:e5:e8:b2:e5:95:5f:5a:79:45:bb:bb:08:86:a8:ba:
65:e5:bf:bf:b5:e4:8b:f6:9e:b2:be:f9:16:40:9f:d6:76:7b:
2c:e9:ff:f5:28:e4:40:c1:0a:0c:b1:b7:da:2c:f1:93:cc:b2:
b6:45:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:20:06 2026 by rpki-client