Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: O1lbOmH2uCoqS/7x8ZiDyVwllkpzFor0F/NV5pxXmio=
Subject key identifier: D9:54:19:C0:1F:DF:7D:07:58:D5:30:81:ED:B2:27:E4:BA:37:FD:49
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01A15EFAFFAB5CD2AF693261ABC93B914201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1AB5
Signing time: Wed 21 Oct 2026 15:01:10 +0000
Manifest this update: Wed 21 Oct 2026 15:01:10 +0000
Manifest next update: Thu 22 Oct 2026 15:01:10 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: OjyXGtkP+/LcDiNMOB6dGlnqfcWuoSkYA1PVsoCT6Tc=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fa:ff:ab:5c:d2:af:69:32:61:ab:c9:3b:91:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Oct 21 15:01:10 2026 GMT
Not After : Oct 22 15:01:10 2026 GMT
Subject: CN=d95419c01fdf7d0758d53081edb227e4ba37fd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:a5:a8:60:56:c7:59:4e:31:b3:88:ca:ea:
71:5d:77:af:9b:81:12:1f:3a:7a:4a:08:78:f4:e4:
c3:fe:8d:9d:16:38:ed:bb:ee:36:72:ad:fa:05:d3:
b6:05:29:89:9b:5d:17:cc:9f:a9:10:28:84:a5:fa:
57:86:75:86:04:42:8b:03:ad:f4:98:f0:a9:fe:b6:
0e:9d:40:f3:6f:c8:db:97:55:d6:f0:dc:1c:1d:f5:
dd:62:e2:49:ce:4d:07:9b:6e:30:ff:59:f6:8f:04:
f0:74:61:d4:b1:13:94:c9:7e:4e:e1:cd:03:b3:97:
1b:c2:49:e6:05:d0:79:3b:59:66:5e:72:ec:0c:92:
f0:ed:14:b3:72:f2:63:51:94:e2:24:aa:f5:7e:37:
63:96:58:18:14:11:92:96:5a:34:2a:b1:c8:d4:9d:
89:3f:6e:8c:ee:38:f9:08:8f:78:38:bd:86:4a:38:
ad:87:55:3a:dc:1d:1b:d0:35:b9:c4:d8:36:9e:1b:
64:f8:61:4a:48:59:1c:22:df:19:8e:02:65:49:bd:
a9:85:2e:db:db:43:29:62:ed:fe:f3:10:48:35:df:
7f:86:09:62:a4:78:9e:3e:04:dd:1a:87:ac:0c:20:
7e:89:21:3f:4d:f6:e2:c6:ce:24:15:08:a5:8c:b5:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:54:19:C0:1F:DF:7D:07:58:D5:30:81:ED:B2:27:E4:BA:37:FD:49
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:46:de:1b:15:8a:5d:d1:4f:52:98:a8:76:e0:8a:82:41:90:
c5:5f:c5:ad:7a:b6:b3:4f:9c:38:9d:d8:cb:80:4f:5d:7c:73:
aa:ba:d2:47:14:7e:ea:df:29:e4:a6:78:66:f7:15:03:78:52:
6a:97:21:5f:b8:c4:7b:a4:45:d1:81:f5:75:d4:72:99:78:ee:
e5:8f:13:22:47:04:1a:4c:0c:d6:1f:84:22:17:ca:17:70:76:
69:d1:c7:d4:84:5e:16:4e:b6:2d:c2:df:a0:fc:8f:f9:95:98:
c5:83:78:78:b5:4f:4c:06:a5:7d:a6:d4:f4:48:5c:91:ab:96:
61:5e:e5:2d:96:9d:c0:a1:17:ec:3b:3b:c1:74:96:40:21:ef:
1a:d0:a5:0d:f7:74:be:06:fe:a8:81:2b:6e:7f:e0:3e:31:21:
e1:01:e8:1a:1c:74:73:6b:f7:ab:84:14:5d:ed:b9:d7:85:7f:
36:31:51:af:40:8d:7c:38:e2:38:66:92:28:34:05:69:27:26:
48:ef:40:ca:ca:50:fb:56:4f:a6:d9:e6:e3:ee:ce:5b:02:08:
06:df:ce:82:78:0c:02:6a:8b:56:f2:06:0a:f7:1c:84:06:4d:
3f:0b:cd:1b:59:c5:0b:bc:4d:09:03:f4:e5:a1:15:4a:ca:30:
ed:88:9f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFe+v+rXNKvaTJhq8k7kUIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjYxMDIxMTUwMTEwWhcNMjYxMDIyMTUwMTEwWjAzMTEwLwYDVQQD
EyhkOTU0MTljMDFmZGY3ZDA3NThkNTMwODFlZGIyMjdlNGJhMzdmZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP+lqGBWx1lOMbOIyupxXXevm4ES
Hzp6Sgh49OTD/o2dFjjtu+42cq36BdO2BSmJm10XzJ+pECiEpfpXhnWGBEKLA630
mPCp/rYOnUDzb8jbl1XW8NwcHfXdYuJJzk0Hm24w/1n2jwTwdGHUsROUyX5O4c0D
s5cbwknmBdB5O1lmXnLsDJLw7RSzcvJjUZTiJKr1fjdjllgYFBGSllo0KrHI1J2J
P26M7jj5CI94OL2GSjith1U63B0b0DW5xNg2nhtk+GFKSFkcIt8ZjgJlSb2phS7b
20MpYu3+8xBINd9/hglipHiePgTdGoesDCB+iSE/Tfbixs4kFQiljLVmKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlUGcAf330HWNUwge2yJ+S6N/1JMB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkbeGxWK
XdFPUpioduCKgkGQxV/FrXq2s0+cOJ3Yy4BPXXxzqrrSRxR+6t8p5KZ4ZvcVA3hS
apchX7jEe6RF0YH1ddRymXju5Y8TIkcEGkwM1h+EIhfKF3B2adHH1IReFk62LcLf
oPyP+ZWYxYN4eLVPTAalfabU9EhckauWYV7lLZadwKEX7Ds7wXSWQCHvGtClDfd0
vgb+qIErbn/gPjEh4QHoGhx0c2v3q4QUXe2514V/NjFRr0CNfDjiOGaSKDQFaScm
SO9AyspQ+1ZPptnm4+7OWwIIBt/OgngMAmqLVvIGCvcchAZNPwvNG1nFC7xNCQP0
5aEVSsow7YifwA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:09:35 2026 by rpki-client