Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: SCsoCSxAOqIasQME8PatDhxqtyl7HoDqcQtUdnfU22M=
Subject key identifier: A5:AE:CA:10:F8:4F:9C:42:5B:4F:18:32:65:02:E5:B4:BE:B5:35:0A
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019D3AC1D13E110753686318A7BC7BB19BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 18:01:13 +0000
Manifest this update: Sun 29 Mar 2026 18:01:13 +0000
Manifest next update: Mon 30 Mar 2026 18:01:13 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: t1mWC3d9ku5MrCKc2A0hzjZUhSfKfl9z7pro7tE1FgE=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d1:3e:11:07:53:68:63:18:a7:bc:7b:b1:9b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Mar 29 18:01:13 2026 GMT
Not After : Mar 30 18:01:13 2026 GMT
Subject: CN=a5aeca10f84f9c425b4f18326502e5b4beb5350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:70:0f:cd:c1:91:3d:68:d1:f4:19:4f:61:
79:89:9a:9f:45:d5:7c:46:57:b8:03:0d:3e:20:1f:
c5:20:d8:0e:ef:68:b1:43:e6:c0:b2:37:2a:f6:fd:
03:04:ca:d9:be:43:68:0c:d7:b5:95:88:e8:5f:8c:
be:5b:e5:38:4a:34:13:d6:0c:43:1b:5a:71:f6:20:
af:66:6f:02:99:ca:8f:98:04:36:b5:23:e4:1a:20:
dc:f6:de:4a:a4:4e:c2:f1:48:04:9b:45:b7:d0:96:
9a:dd:d5:3e:87:96:d4:20:58:93:3f:54:a6:f2:2e:
5c:57:cd:4d:41:8e:bf:43:96:43:02:76:05:55:c4:
b9:d0:c8:9d:10:2d:c0:28:21:8f:ce:dd:07:f6:a7:
af:f1:d5:15:fb:b0:59:f2:b4:19:04:2f:bc:c6:2f:
c5:6e:f1:f4:6d:ee:fd:e8:af:45:e6:1f:3b:80:17:
50:d8:19:dd:1d:75:2f:18:b0:93:da:78:f9:a9:12:
5b:da:2c:ba:c0:f9:a8:94:53:d5:7a:13:b1:5c:29:
b6:2d:0b:1d:5e:3f:3a:22:7b:8b:f8:7b:4a:b5:e8:
7f:8a:f1:88:5b:4d:f6:3e:98:03:40:ee:f8:0f:00:
f5:34:7a:51:32:c7:f2:8f:af:45:27:b6:e3:20:82:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:CA:10:F8:4F:9C:42:5B:4F:18:32:65:02:E5:B4:BE:B5:35:0A
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:47:74:e5:ac:ed:24:21:70:29:74:f6:bd:a0:67:16:27:
ff:3f:6b:23:18:ab:39:b0:97:ed:2e:f3:99:78:3e:06:9e:f5:
82:bf:c5:ec:cb:90:e7:6c:94:e8:a7:d7:d1:73:7a:ae:84:a7:
73:59:9a:c4:04:db:15:f4:bd:6a:f1:6a:ed:6e:8c:d4:b4:23:
de:e1:c5:f6:ba:c0:f6:5d:91:5c:05:73:94:6e:f1:73:ca:37:
de:61:e9:b4:4e:6e:3e:fc:36:f6:29:1c:8d:58:d3:a9:56:ab:
76:a1:86:d6:8f:80:31:fb:91:c5:d9:51:94:09:f2:0a:26:ea:
70:9f:d4:cf:a6:f8:fc:be:a1:97:09:be:c0:a2:e9:1d:98:ae:
a0:b0:16:61:49:54:d4:0a:60:c1:e1:fd:02:39:03:44:75:7e:
eb:47:28:5a:95:99:8c:1b:97:7c:8b:76:da:2f:f1:57:82:a5:
c1:aa:0f:48:76:cc:5b:21:e5:51:47:9b:26:f9:48:c8:4e:23:
94:7e:32:ad:d0:29:8f:82:d0:0e:f6:b7:01:3c:7d:ed:a6:09:
d0:33:c2:e3:ca:dd:64:8b:65:5a:3a:05:8c:69:c1:9e:e7:ff:
ef:65:d2:09:61:6e:ba:a2:ea:60:8e:9f:a0:0a:2b:1f:24:db:
9a:33:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:44 2026 by rpki-client