Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: Q/TPNUR41qoYw+GoJwnJZTOF6yp8t1OT3tT5Owsy8WQ=
Subject key identifier: 99:34:1E:F5:6E:BE:75:E1:D8:DD:3D:5A:DE:4D:F6:12:7F:7F:ED:3F
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019E2A393DE694A1EB63D3A2091F0CFC7B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 190C
Signing time: Fri 15 May 2026 06:00:54 +0000
Manifest this update: Fri 15 May 2026 06:00:54 +0000
Manifest next update: Sat 16 May 2026 06:00:54 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: UPNpJ9rR1fXumsLsiLs/4kTV/sSq7NpQBB3gliZbcFc=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:3d:e6:94:a1:eb:63:d3:a2:09:1f:0c:fc:7b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: May 15 06:00:54 2026 GMT
Not After : May 16 06:00:54 2026 GMT
Subject: CN=99341ef56ebe75e1d8dd3d5ade4df6127f7fed3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:46:fb:43:52:b8:d5:37:32:87:0f:ce:6a:
d1:66:37:fe:c1:41:32:a3:0e:ab:b3:17:eb:88:b2:
a6:98:26:98:39:cd:0b:6e:6b:b8:9c:7b:30:ca:98:
5c:d4:49:4e:3f:3e:b5:92:aa:32:b9:32:40:7a:ee:
0c:76:d8:b5:8c:b0:0b:80:13:32:8b:33:35:d9:f3:
f1:34:84:a7:6a:31:cc:5d:90:43:a9:bf:85:34:3b:
31:31:c0:a7:e6:d7:5d:02:20:1f:c4:fc:40:99:eb:
4f:b1:cd:b1:c2:42:cf:99:9b:9c:aa:a7:78:c0:a1:
d2:5b:3e:77:1b:10:16:2a:d2:a7:00:15:cf:53:6b:
49:29:61:92:45:56:5a:4b:f4:2d:22:94:99:e8:1e:
43:ba:4b:f1:d9:54:cb:f5:bc:38:41:93:2c:ae:bb:
03:ac:31:79:d5:bb:80:44:12:af:a2:b5:c8:6b:15:
74:2c:b0:e5:65:33:03:69:cb:2e:4d:ab:e2:70:33:
8d:70:47:0c:07:d0:bc:e4:ec:f7:40:59:1a:72:f4:
3d:45:89:3f:cc:bf:34:9e:36:0c:07:8b:b0:6b:59:
7f:21:69:42:70:24:e2:05:33:6b:3c:4a:77:ea:35:
85:e9:4e:4c:52:13:82:0e:68:ac:40:d6:85:31:3d:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:1E:F5:6E:BE:75:E1:D8:DD:3D:5A:DE:4D:F6:12:7F:7F:ED:3F
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:16:3c:ca:61:e9:cb:e3:d7:b4:65:aa:03:17:1e:c7:77:
9e:c3:e6:9a:2e:f8:85:4e:6f:28:44:d6:28:95:67:3f:96:16:
63:05:51:01:4f:ff:58:47:d4:cc:9e:09:e6:cc:2c:33:21:0f:
06:81:4e:f1:ac:62:b1:0c:fa:2e:fe:a5:86:91:f9:e7:67:ac:
eb:6b:53:73:0f:ba:80:1c:15:9c:1a:de:f4:3e:8e:16:a6:0f:
72:58:58:a7:2f:36:ad:b7:6e:fe:d9:75:3d:5b:cc:e9:d6:b9:
84:c0:6c:f0:21:5b:77:6c:5c:cf:54:68:ec:2c:b9:d8:0a:c6:
12:df:0b:d3:7e:46:c7:08:34:14:19:b9:c8:33:f5:11:a5:5b:
5e:85:ee:da:9b:80:b0:ae:b5:25:f6:91:75:f7:fc:ab:60:38:
32:43:88:1d:f8:1b:ca:5b:17:f9:3c:a7:a7:a7:93:b8:08:e6:
5e:f8:ee:95:84:cc:e6:8f:3d:32:a2:04:ec:4b:c2:90:08:50:
b4:06:50:55:48:21:4b:90:8c:0e:9b:eb:62:2c:77:4d:0a:51:
bf:24:a1:d9:9e:ee:ca:72:d0:35:8a:2b:01:63:11:0b:9b:c3:
32:3c:20:d7:5d:50:83:9a:f0:13:51:7b:26:6a:29:07:43:bb:
87:06:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:14:28 2026 by rpki-client