Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: ZobTl2PiLaGELeH9M1ix4JVHmSKnb3Mz+2E3ipnV1TI=
Subject key identifier: E2:14:58:7A:F5:4F:37:98:A8:37:5C:34:4E:AE:F0:B4:0B:A7:D1:C9
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019CABD99622121EB2E662459D886AAA9D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:29 +0000
Manifest this update: Mon 02 Mar 2026 00:01:29 +0000
Manifest next update: Tue 03 Mar 2026 00:01:29 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: 5SFBUAzKrV1qQcyoOjCFgFrKoZQSyxdjZ3uN/AZ4Tcs=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:96:22:12:1e:b2:e6:62:45:9d:88:6a:aa:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Mar 2 00:01:29 2026 GMT
Not After : Mar 3 00:01:29 2026 GMT
Subject: CN=e214587af54f3798a8375c344eaef0b40ba7d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:54:57:c4:36:bc:ed:fd:0a:61:0a:10:8c:
04:96:cd:af:c6:d3:33:d0:2c:8a:db:87:c9:ad:af:
5c:7c:cb:27:ce:61:cb:e6:a1:ec:7f:6f:35:22:96:
76:2c:a0:71:29:17:09:bb:a0:f9:39:7a:4f:f1:cc:
47:df:03:4b:0d:87:74:f7:f6:e4:b9:31:73:96:92:
6c:c5:f3:8f:2a:77:ce:e1:b5:56:5d:5e:d9:46:88:
45:a2:a4:89:84:a3:38:0c:97:99:67:35:60:05:fe:
24:ca:7d:82:51:ee:bc:02:ce:d3:5f:21:af:3d:02:
1d:25:cd:d4:7d:c6:66:84:09:42:d8:12:af:f7:94:
61:65:86:f3:b2:f9:39:84:f7:76:94:73:92:7a:5d:
fb:eb:d9:df:18:c2:f9:72:e4:00:0f:26:21:0b:6e:
9a:ea:30:d8:08:9a:9f:9f:6c:6c:35:19:bf:76:27:
0e:07:e6:04:13:0f:d6:15:91:fb:52:5a:25:cf:2a:
dc:67:d7:7f:e3:99:61:1a:ff:57:49:e2:27:de:67:
48:bc:61:ab:a0:61:da:7c:44:14:69:13:68:97:16:
78:ba:f3:01:f3:ea:8c:44:99:9d:1f:74:21:4d:c3:
06:0c:2d:18:26:f2:f6:9b:2e:88:16:57:52:a2:53:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:58:7A:F5:4F:37:98:A8:37:5C:34:4E:AE:F0:B4:0B:A7:D1:C9
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:33:46:15:55:a1:af:75:b0:40:45:6b:c9:4c:20:5a:4c:d8:
5c:e5:9f:e7:a3:ea:8f:fd:1e:5f:82:e5:7e:5f:0a:c9:0c:e2:
12:0c:19:c5:bf:c9:71:42:c3:97:c2:86:2c:cd:c9:f2:37:62:
a8:fd:54:a9:58:62:8c:12:65:20:e6:32:b9:de:65:c3:98:62:
6e:a2:ba:9b:26:23:a9:12:cf:6b:53:52:91:1a:49:52:02:f1:
7c:6a:4f:16:51:ec:5a:af:af:7e:0a:6f:11:a5:c5:f1:2b:7e:
4c:84:a3:19:3b:09:86:e4:70:c6:f3:f3:c6:ea:1b:94:99:18:
60:24:61:d8:4d:16:52:b0:d0:7d:1e:a3:67:57:98:2a:81:ef:
f3:21:be:4c:83:c0:72:e4:0c:fb:03:89:b8:85:03:fd:42:5c:
90:99:cd:74:45:14:71:54:a6:d3:28:aa:12:1c:8a:ba:ff:b9:
5e:0c:b0:dc:6e:da:2a:e6:33:1e:6a:94:32:20:e0:0b:16:cf:
4f:56:82:d4:7d:d3:28:21:65:74:e3:c6:ed:94:22:9a:2e:df:
47:7d:f4:11:f5:fb:85:c1:2d:39:14:e9:ce:d6:4e:86:fb:81:
c6:f1:1c:8c:75:a0:a1:55:25:4d:da:e9:9c:a1:8c:bf:ca:1e:
12:69:4a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ZYiEh6y5mJFnYhqqp02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjYwMzAyMDAwMTI5WhcNMjYwMzAzMDAwMTI5WjAzMTEwLwYDVQQD
EyhlMjE0NTg3YWY1NGYzNzk4YTgzNzVjMzQ0ZWFlZjBiNDBiYTdkMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3JUV8Q2vO39CmEKEIwEls2vxtMz
0CyK24fJra9cfMsnzmHL5qHsf281IpZ2LKBxKRcJu6D5OXpP8cxH3wNLDYd09/bk
uTFzlpJsxfOPKnfO4bVWXV7ZRohFoqSJhKM4DJeZZzVgBf4kyn2CUe68As7TXyGv
PQIdJc3UfcZmhAlC2BKv95RhZYbzsvk5hPd2lHOSel3769nfGML5cuQADyYhC26a
6jDYCJqfn2xsNRm/dicOB+YEEw/WFZH7UlolzyrcZ9d/45lhGv9XSeIn3mdIvGGr
oGHafEQUaRNolxZ4uvMB8+qMRJmdH3QhTcMGDC0YJvL2my6IFldSolOnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIUWHr1TzeYqDdcNE6u8LQLp9HJMB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozNGFVWh
r3WwQEVryUwgWkzYXOWf56Pqj/0eX4Llfl8KyQziEgwZxb/JcULDl8KGLM3J8jdi
qP1UqVhijBJlIOYyud5lw5hibqK6myYjqRLPa1NSkRpJUgLxfGpPFlHsWq+vfgpv
EaXF8St+TISjGTsJhuRwxvPzxuoblJkYYCRh2E0WUrDQfR6jZ1eYKoHv8yG+TIPA
cuQM+wOJuIUD/UJckJnNdEUUcVSm0yiqEhyKuv+5Xgyw3G7aKuYzHmqUMiDgCxbP
T1aC1H3TKCFldOPG7ZQimi7fR330EfX7hcEtORTpztZOhvuBxvEcjHWgoVUlTdrp
nKGMv8oeEmlKuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:41 2026 by rpki-client