Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: F1Xrg6dMzfs3EQjsWqgsZuCPe8oT1PExrlk7VD3d0cY=
Subject key identifier: 2C:3C:F6:F8:C0:B5:6D:13:2B:E7:9E:EF:7F:9C:41:51:84:AE:A3:3E
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019D99623D9ADBBA99049D2772BFF12866C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:45 +0000
Manifest this update: Fri 17 Apr 2026 03:00:45 +0000
Manifest next update: Sat 18 Apr 2026 03:00:45 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: Vf0X01vNULjvdSLNNemErXmqpKxUFL2BjilYUHqTRjk=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3d:9a:db:ba:99:04:9d:27:72:bf:f1:28:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Apr 17 03:00:45 2026 GMT
Not After : Apr 18 03:00:45 2026 GMT
Subject: CN=2c3cf6f8c0b56d132be79eef7f9c415184aea33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:39:b0:27:a2:a8:c2:81:a4:c9:ec:e3:be:
7f:d2:07:0e:d0:70:29:ec:d6:f2:a8:9b:5d:75:74:
c7:9d:31:89:4e:64:3c:f2:4a:68:22:d5:67:9c:5c:
0d:39:e2:16:bb:d5:07:3d:8d:c1:c8:61:50:e4:06:
7a:99:6e:a6:92:8c:18:90:01:f1:a0:ce:99:1f:66:
0c:b9:2c:7b:35:24:f2:4d:3c:c4:66:14:6e:a5:ac:
f0:bf:79:dd:22:e8:e1:4b:a4:b0:00:7f:86:3d:06:
d7:de:30:77:d9:e2:2c:84:1f:2e:70:ab:bc:5a:83:
01:ef:38:e9:f1:f4:dc:cc:d9:14:56:e5:61:bb:94:
88:c0:73:81:b5:cb:c7:a5:cf:cc:76:2b:fb:f4:63:
f2:9a:6c:26:53:6e:a5:39:4b:d4:8c:86:f1:2d:8c:
ca:bf:50:cd:0a:8e:2f:25:0c:bc:0b:10:67:f9:0f:
75:33:6c:32:79:64:00:3a:08:38:56:6f:bf:b2:70:
47:7b:c1:84:8c:cd:94:02:3d:25:ce:95:a0:5e:e9:
83:72:da:d4:5f:41:dc:dd:aa:d1:1d:6b:ec:b5:5e:
06:03:03:54:45:2e:ce:2b:ce:5b:47:f8:48:9d:fa:
5f:d0:61:1c:23:3c:42:04:15:30:4a:96:cd:ef:e8:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:F6:F8:C0:B5:6D:13:2B:E7:9E:EF:7F:9C:41:51:84:AE:A3:3E
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:e0:16:8c:5b:44:81:09:d6:fd:62:5b:af:35:3b:4f:db:
27:cf:c3:10:36:89:4e:08:d7:30:ef:e4:4b:eb:25:04:5a:1c:
75:15:7a:b1:05:42:dd:5f:23:61:21:be:9f:e7:43:d7:af:c0:
02:7f:f5:28:80:b0:23:cf:03:4d:a9:ef:5f:9c:3c:fb:76:14:
95:31:ce:f0:7f:3a:b3:a1:f0:d2:11:f5:aa:ad:2f:24:c5:ff:
de:15:eb:4b:46:9a:13:38:b2:32:53:3a:3c:4d:48:23:36:0f:
e2:3a:7a:87:db:1c:a1:4a:88:3f:12:e3:1f:95:eb:86:14:5c:
ca:f9:66:cc:d1:9c:33:de:3f:ba:18:ff:76:87:59:1a:28:b5:
33:58:ba:c9:42:a1:80:7f:45:f1:88:cc:1a:43:cf:d0:ab:64:
f8:f0:c7:71:b8:b5:f1:c1:ce:8a:ba:ae:19:31:66:e4:e9:97:
69:26:f8:8b:32:52:f0:14:81:95:62:54:34:05:d8:ed:41:3c:
a3:b3:cc:24:14:37:76:b3:6d:28:2e:80:10:58:14:26:30:06:
e1:cc:f6:c0:30:c9:2a:21:f8:e7:46:03:54:fd:ad:b0:7b:8f:
f3:83:16:a8:b9:f5:ec:50:46:47:b5:f5:8e:0d:b2:eb:c1:65:
5c:77:04:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYj2a27qZBJ0ncr/xKGbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjYwNDE3MDMwMDQ1WhcNMjYwNDE4MDMwMDQ1WjAzMTEwLwYDVQQD
EygyYzNjZjZmOGMwYjU2ZDEzMmJlNzllZWY3ZjljNDE1MTg0YWVhMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbs5sCeiqMKBpMns475/0gcO0HAp
7NbyqJtddXTHnTGJTmQ88kpoItVnnFwNOeIWu9UHPY3ByGFQ5AZ6mW6mkowYkAHx
oM6ZH2YMuSx7NSTyTTzEZhRupazwv3ndIujhS6SwAH+GPQbX3jB32eIshB8ucKu8
WoMB7zjp8fTczNkUVuVhu5SIwHOBtcvHpc/Mdiv79GPymmwmU26lOUvUjIbxLYzK
v1DNCo4vJQy8CxBn+Q91M2wyeWQAOgg4Vm+/snBHe8GEjM2UAj0lzpWgXumDctrU
X0Hc3arRHWvstV4GAwNURS7OK85bR/hInfpf0GEcIzxCBBUwSpbN7+hbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw89vjAtW0TK+ee73+cQVGErqM+MB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4XgFoxb
RIEJ1v1iW681O0/bJ8/DEDaJTgjXMO/kS+slBFocdRV6sQVC3V8jYSG+n+dD16/A
An/1KICwI88DTanvX5w8+3YUlTHO8H86s6Hw0hH1qq0vJMX/3hXrS0aaEziyMlM6
PE1IIzYP4jp6h9scoUqIPxLjH5XrhhRcyvlmzNGcM94/uhj/dodZGii1M1i6yUKh
gH9F8YjMGkPP0Ktk+PDHcbi18cHOirquGTFm5OmXaSb4izJS8BSBlWJUNAXY7UE8
o7PMJBQ3drNtKC6AEFgUJjAG4cz2wDDJKiH450YDVP2tsHuP84MWqLn17FBGR7X1
jg2y68FlXHcEqA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:57 2026 by rpki-client