Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: mbIOeIEoziSd0BaeuRZ/bqBn0oetS4SHdgfJ5ckVLLs=
Subject key identifier: D0:1E:42:09:A3:DF:7E:DC:74:79:2A:89:16:23:7F:D7:38:60:A6:F7
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019FAC76E432BA6CC4330066A769E78F5994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 06:01:40 +0000
Manifest this update: Wed 29 Jul 2026 06:01:40 +0000
Manifest next update: Thu 30 Jul 2026 06:01:40 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: OfoYhcon7ngX7L/2ek5YPpv/AnUCJ/HFT3zobLoGolk=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e4:32:ba:6c:c4:33:00:66:a7:69:e7:8f:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Jul 29 06:01:40 2026 GMT
Not After : Jul 30 06:01:40 2026 GMT
Subject: CN=d01e4209a3df7edc74792a8916237fd73860a6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:34:1a:a4:c3:41:ca:1b:44:0e:58:5d:bf:
f0:3c:cf:5d:52:53:b1:98:6b:82:18:50:64:a5:58:
6b:f1:8a:45:a6:3e:ee:5a:f1:40:13:3a:cc:09:96:
61:8d:ca:d6:1b:91:ed:4b:77:bb:05:b3:7b:49:93:
0d:79:68:26:35:3a:40:90:ce:cf:93:c3:76:13:74:
28:b6:a3:0f:27:65:55:2c:fb:e4:03:e5:01:df:c2:
e7:4d:2f:57:36:2e:94:54:87:da:e3:25:a9:17:e6:
8f:d2:7e:b1:95:b8:12:3c:ca:d8:98:1d:96:9a:91:
30:50:60:ea:95:b4:07:8f:bc:b9:f4:79:d7:16:c0:
ce:fb:04:66:30:8d:02:c2:44:d1:b8:56:01:93:26:
ea:88:77:65:04:19:e6:db:a4:8e:06:ef:1c:4a:d3:
be:be:b9:a9:3f:89:5e:12:29:54:cd:0d:d4:53:92:
a1:0b:ed:bc:8e:7c:27:9f:ad:35:45:5b:f1:bb:f0:
c8:15:7f:20:9b:fd:05:ff:20:44:34:10:ba:47:58:
ca:53:f4:34:fb:a5:86:8e:f2:27:89:93:68:8a:98:
f3:1c:4f:b8:36:1e:1c:2b:4e:44:25:96:90:db:46:
4b:d2:f5:ce:a5:cc:a0:fc:e3:35:d1:23:47:5c:97:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:42:09:A3:DF:7E:DC:74:79:2A:89:16:23:7F:D7:38:60:A6:F7
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:a3:80:ae:92:11:60:59:36:f6:b7:c6:50:c2:07:46:53:
37:62:30:a0:be:e9:c4:91:3a:7b:a5:47:5d:1d:64:0f:f7:79:
05:4f:ce:a6:be:f4:b2:6a:86:3b:19:f6:85:a5:3c:10:c3:89:
fe:11:2d:09:dc:26:9c:6d:79:e0:84:ad:bb:19:67:5b:b0:45:
5e:82:78:a4:01:19:c7:c2:f2:7e:e1:b6:88:7f:69:91:5d:d1:
41:35:81:f0:aa:24:2d:f7:cc:b2:26:69:2d:d4:56:0b:6f:32:
73:a8:13:46:dc:44:2b:53:4f:d0:b1:f0:de:9d:dd:a1:50:e3:
0d:62:47:bc:b3:e7:e2:b1:89:c6:8f:7a:b0:d1:5f:a2:e6:70:
59:f3:44:37:95:1f:b0:95:90:fd:b7:3f:27:14:54:23:b9:76:
b8:eb:aa:7b:27:b1:80:fc:89:fa:c1:3f:f6:73:d5:56:70:5c:
65:e2:f8:19:91:7f:23:bd:e6:d0:90:01:f6:3c:86:b9:83:89:
46:ee:07:fe:e6:ab:32:29:63:66:c6:bf:24:20:6e:bd:e8:97:
83:9f:41:22:a4:a0:21:34:cb:96:7b:05:a3:7a:a9:94:e6:d5:
4b:ba:86:0c:fe:e5:7d:a4:b2:2c:fd:ff:9a:9d:1f:1e:00:ea:
7c:b0:ab:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sduQyumzEMwBmp2nnj1mUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjYwNzI5MDYwMTQwWhcNMjYwNzMwMDYwMTQwWjAzMTEwLwYDVQQD
EyhkMDFlNDIwOWEzZGY3ZWRjNzQ3OTJhODkxNjIzN2ZkNzM4NjBhNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJQ0GqTDQcobRA5YXb/wPM9dUlOx
mGuCGFBkpVhr8YpFpj7uWvFAEzrMCZZhjcrWG5HtS3e7BbN7SZMNeWgmNTpAkM7P
k8N2E3QotqMPJ2VVLPvkA+UB38LnTS9XNi6UVIfa4yWpF+aP0n6xlbgSPMrYmB2W
mpEwUGDqlbQHj7y59HnXFsDO+wRmMI0CwkTRuFYBkybqiHdlBBnm26SOBu8cStO+
vrmpP4leEilUzQ3UU5KhC+28jnwnn601RVvxu/DIFX8gm/0F/yBENBC6R1jKU/Q0
+6WGjvIniZNoipjzHE+4Nh4cK05EJZaQ20ZL0vXOpcyg/OM10SNHXJek1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAeQgmj337cdHkqiRYjf9c4YKb3MB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDejgK6S
EWBZNva3xlDCB0ZTN2IwoL7pxJE6e6VHXR1kD/d5BU/Opr70smqGOxn2haU8EMOJ
/hEtCdwmnG154IStuxlnW7BFXoJ4pAEZx8LyfuG2iH9pkV3RQTWB8KokLffMsiZp
LdRWC28yc6gTRtxEK1NP0LHw3p3doVDjDWJHvLPn4rGJxo96sNFfouZwWfNEN5Uf
sJWQ/bc/JxRUI7l2uOuqeyexgPyJ+sE/9nPVVnBcZeL4GZF/I73m0JAB9jyGuYOJ
Ru4H/uarMiljZsa/JCBuveiXg59BIqSgITTLlnsFo3qplObVS7qGDP7lfaSyLP3/
mp0fHgDqfLCrqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:54 2026 by rpki-client