Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: LgMt71XivgOQTSsSY1/7kDzfD60pjeWgS7n05hvhd78=
Subject key identifier: DC:54:DB:66:05:36:6B:0C:1B:D9:4F:40:E2:82:30:14:E2:5B:2A:5E
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01A15B1EDA58749F5F59DC93ED5DBB709CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 21:01:50 +0000
Manifest this update: Tue 20 Oct 2026 21:01:50 +0000
Manifest next update: Wed 21 Oct 2026 21:01:50 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: i4W+wXowzY84LneTOvKxoJJ+WA47BUPnJc5WSTtOdDM=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:da:58:74:9f:5f:59:dc:93:ed:5d:bb:70:9c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Oct 20 21:01:50 2026 GMT
Not After : Oct 21 21:01:50 2026 GMT
Subject: CN=dc54db6605366b0c1bd94f40e2823014e25b2a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:5d:5a:5a:e0:83:3c:1e:a8:f7:25:17:46:
76:b5:0c:b5:eb:e8:fb:91:fe:71:78:18:76:d2:0c:
94:0b:c2:53:98:50:7e:b9:8f:bb:89:64:c7:2b:79:
a3:ef:5c:a2:08:5b:e6:f2:c8:a9:7d:84:20:88:0d:
86:f5:cc:37:b9:d4:19:28:39:8d:e8:fc:60:30:cc:
7e:85:12:b4:36:c3:b2:a2:fb:86:9d:f4:67:37:9d:
2d:00:6f:18:bc:95:60:e3:a1:68:53:7d:f1:ab:d9:
70:3d:e5:cb:e9:22:f6:84:ef:68:ec:51:69:b9:ff:
c1:d4:ef:b2:67:2f:51:a2:5e:c5:45:fb:b1:a5:21:
1b:ba:a1:95:c6:85:d8:29:62:56:4d:06:77:6c:1b:
af:61:10:21:ce:2c:90:b7:e0:43:d9:5b:14:f9:6e:
30:fe:6e:9c:7f:df:02:a2:69:f5:b4:b5:21:08:c1:
a7:aa:05:52:70:19:87:8f:44:d6:cf:d0:41:ed:4d:
b2:13:9e:0e:7b:62:1d:fd:b4:c4:d2:95:bd:b4:ae:
6f:d0:59:d9:ed:0c:5b:66:ab:39:72:23:b9:89:7f:
59:54:9f:7d:a6:89:e2:ad:18:85:79:d0:3c:7a:8e:
2b:0b:5e:48:09:7b:08:ff:79:d4:4a:3f:54:13:53:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:DB:66:05:36:6B:0C:1B:D9:4F:40:E2:82:30:14:E2:5B:2A:5E
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:1d:e0:57:04:dd:c9:f5:68:75:2f:6b:c4:32:73:e2:d7:
e3:f3:da:77:36:3b:cc:49:92:ca:87:23:1b:9c:db:2b:26:1b:
7a:c3:62:9a:62:a6:4b:0f:c7:2a:ea:97:03:8e:12:df:23:75:
62:19:44:65:5b:f7:7f:57:80:15:77:f7:b9:5b:bd:98:03:c8:
91:68:ea:5e:01:97:49:2e:96:ea:f8:f1:f4:7a:3f:2f:29:cd:
85:a4:ee:17:55:34:58:8b:1f:90:48:d0:30:73:dd:52:d8:30:
84:1c:85:ba:0d:c5:d0:17:3a:14:1c:8f:1b:34:d6:84:c1:0b:
9d:d4:97:c1:cb:0c:d6:fd:c1:ea:57:1c:2c:9f:0a:60:85:20:
37:98:d6:95:6b:ba:16:a2:75:1c:fe:c5:01:ff:ca:44:f5:b0:
c7:5f:36:f2:42:6f:d7:39:f5:9d:4c:00:26:0a:83:c6:3d:ea:
6e:c8:6d:d7:d0:c0:ee:6a:7d:7f:48:b1:e2:fd:d3:06:b3:af:
92:99:40:41:78:cc:d4:a4:ff:0a:ca:36:31:6c:0f:c4:1b:6e:
f0:b8:06:b5:1b:4b:5f:f1:73:f7:6b:78:d4:1b:a9:a0:03:94:
06:f2:02:60:6e:43:f2:a3:5e:cc:d1:9b:86:2b:cd:d6:18:4a:
87:ee:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:49:16 2026 by rpki-client