Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: mBGyHAJ87gAT++Rk3f4PRtMGIVOU33417vL/1DOtIAg=
Subject key identifier: 74:94:04:AB:42:28:98:5A:25:5E:FB:2B:0D:4A:45:C9:22:D5:BC:DB
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01A056689BD408256CA13E36ED82432E9B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1A2C
Signing time: Mon 31 Aug 2026 06:01:31 +0000
Manifest this update: Mon 31 Aug 2026 06:01:31 +0000
Manifest next update: Tue 01 Sep 2026 06:01:31 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: rIXHtf4+DNVCLFghfngldKZ8SZclsfLfY6/VBkLZOcs=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:68:9b:d4:08:25:6c:a1:3e:36:ed:82:43:2e:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Aug 31 06:01:31 2026 GMT
Not After : Sep 1 06:01:31 2026 GMT
Subject: CN=749404ab4228985a255efb2b0d4a45c922d5bcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:52:2a:6c:0b:f3:44:60:12:c6:0b:64:c4:
a0:4d:a3:d0:34:ec:5a:30:81:ec:e8:e0:d4:06:2f:
46:be:45:9a:44:41:b7:2c:ad:51:f1:bb:c4:c7:f1:
9f:bf:0e:b6:68:68:33:2f:9c:f0:d1:5c:7c:66:a0:
08:1e:49:23:00:28:41:0e:53:de:a4:0a:c4:20:3a:
c3:14:d6:bf:2c:27:64:3a:ca:bc:6a:67:e4:de:3d:
32:38:39:7f:5d:7d:63:ce:a5:38:a4:93:0a:56:ff:
0d:eb:13:dd:45:0d:85:7f:ff:24:11:97:9d:71:bc:
ee:a2:bf:55:af:4e:89:b3:2c:c0:2a:c0:48:1d:37:
b7:db:a9:43:3a:c3:50:e2:d6:c9:1f:32:b9:06:9d:
c1:17:01:f7:24:fe:5d:0f:e2:e4:09:da:70:70:fe:
bb:6d:9b:99:7c:fc:c1:af:26:74:1e:6f:07:23:15:
b3:a7:4c:39:19:e0:17:86:01:86:b5:22:63:02:6b:
a6:e4:c8:90:3a:a6:1c:56:8a:4a:e0:2f:94:3f:1f:
b6:a0:5b:fa:a4:f0:72:d0:10:bb:d5:08:61:3b:fa:
64:3c:b3:c7:cf:80:37:56:1d:8b:e8:f5:47:28:ca:
c5:93:ff:87:c0:25:d7:9c:a1:b5:b0:f0:da:64:20:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:94:04:AB:42:28:98:5A:25:5E:FB:2B:0D:4A:45:C9:22:D5:BC:DB
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:08:19:d3:4c:89:d7:cf:e9:f7:da:25:71:7b:8d:82:89:
25:27:be:39:22:b2:79:c7:fb:cc:04:f7:ed:01:bc:67:5e:81:
3e:2f:79:4e:09:2d:de:9d:3a:da:3d:47:3e:b7:0b:c3:96:46:
a3:7a:c1:70:a5:e2:3b:1b:fb:05:32:0a:62:51:8b:7d:d6:9b:
fe:26:3d:ff:56:3c:52:2c:02:f2:2a:27:3a:3f:b5:b2:55:ce:
19:ac:80:f6:97:32:71:b7:4a:5f:f4:21:91:f7:40:a6:58:0b:
ce:c8:21:ce:41:29:55:19:76:37:cb:82:22:1a:bc:d0:1a:50:
4c:7b:e4:43:58:b4:83:99:4d:07:ef:26:ce:ad:19:0b:66:bc:
71:b2:70:21:ac:da:31:5b:19:63:37:e2:4a:0f:51:96:eb:d9:
8d:87:c9:31:90:b5:72:0a:d0:90:f8:c5:9e:ed:73:b3:61:e6:
aa:a6:be:53:6b:0d:35:52:cf:03:c3:0a:4f:e8:fd:45:4a:43:
05:64:f1:87:89:e1:b7:5b:80:fa:4b:10:cf:ab:3e:9d:33:17:
04:32:96:48:18:0e:ea:fc:a8:6a:81:79:55:cc:f9:b0:03:a9:
ef:cf:e2:6c:c8:25:4e:44:86:fc:13:19:51:e4:f3:e7:b9:39:
21:62:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:02:30 2026 by rpki-client