Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: m5zP61SrtwWpXVb0bQSkByjAqnzXbHpbrxC1afcSsqk=
Subject key identifier: 88:7A:DE:72:2A:E7:49:13:7F:84:A8:E7:42:76:E5:A8:BE:56:1F:0D
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01A0D5DE5640B035F98CE0D79CCD2667A62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 00:01:53 +0000
Manifest this update: Fri 25 Sep 2026 00:01:53 +0000
Manifest next update: Sat 26 Sep 2026 00:01:53 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: rvp6X1kHHCrxD7UGKKEv9ClIF0iGqMRYm9j4wL2J8d8=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:56:40:b0:35:f9:8c:e0:d7:9c:cd:26:67:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Sep 25 00:01:53 2026 GMT
Not After : Sep 26 00:01:53 2026 GMT
Subject: CN=887ade722ae749137f84a8e74276e5a8be561f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:ae:4d:6a:4e:cf:41:11:d8:ac:9f:3d:36:
fb:89:ef:ca:4d:dc:af:a5:60:c7:46:d3:4e:21:5c:
2e:8a:ec:97:cd:da:a1:9d:c0:d0:dd:6e:b5:e0:f2:
f0:3e:1f:cd:b8:be:d3:d8:67:d8:e4:5f:80:ef:17:
73:78:f2:f0:aa:cb:2f:74:e4:c3:41:66:c9:c9:0b:
64:bb:2b:24:24:31:b1:74:ad:28:1c:4e:7c:3e:2d:
1b:66:d7:5b:04:81:4f:7d:5e:d7:9f:e3:58:dc:64:
df:03:34:0e:15:29:81:5c:b7:8e:b0:5c:13:2f:3a:
ee:c5:f2:3f:3d:4f:71:64:e5:c7:1e:28:28:a5:a8:
ec:b4:11:b8:3b:d1:f6:a4:97:43:81:37:33:32:e4:
09:56:42:34:13:e9:5f:ee:0a:a0:41:7b:c6:25:88:
c1:3e:95:be:1b:0f:22:69:d6:86:57:ea:c0:ec:d1:
b5:7e:cd:12:1c:a2:13:50:26:a5:85:2a:d0:31:14:
7f:88:36:97:f8:6e:9f:89:ab:f7:42:35:e8:28:7d:
26:71:eb:21:5d:a5:7d:95:e0:fb:32:1f:e7:60:b0:
89:3d:f3:eb:d4:75:9d:bb:3a:40:c3:53:25:00:15:
0f:6c:2c:3e:29:1b:c1:d6:7e:07:ef:17:3d:01:39:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:DE:72:2A:E7:49:13:7F:84:A8:E7:42:76:E5:A8:BE:56:1F:0D
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:d3:d5:b9:ff:1b:ed:87:bd:a7:55:48:ec:0b:f4:8c:48:
d8:64:e0:64:a6:3b:ce:17:30:67:c4:d7:2a:ac:b7:31:63:d4:
97:fd:8d:ef:61:46:7a:10:c4:b5:f4:29:e2:45:c0:50:f7:c2:
d1:ff:ef:02:1e:e5:16:0e:4f:57:ec:79:dd:89:71:bb:fa:57:
34:7f:96:fb:5d:74:0f:16:4c:20:f6:b8:be:68:0c:a8:57:ef:
c9:93:21:fd:1b:59:1e:fe:5f:7b:c1:10:58:32:31:01:6f:6a:
4f:43:26:59:20:7d:bb:bc:31:c3:0c:2f:e9:c0:e8:98:86:6e:
25:10:f5:59:53:43:7c:0b:99:cb:3c:2d:f6:3c:4f:e2:ae:22:
9c:7b:1e:42:88:5f:95:4a:77:c9:08:6f:d7:fd:37:c8:2a:c6:
76:95:60:35:a7:71:b2:70:a9:6e:7c:3b:67:47:5a:f5:87:e1:
d4:f2:19:e9:3f:79:a6:5c:7b:2f:db:25:5a:db:b1:ca:b2:97:
be:50:1e:8d:1f:89:c9:e8:d2:f1:74:20:50:f9:2e:d2:ec:4c:
f8:85:88:70:29:2f:5c:ec:01:38:a5:80:27:fb:d6:06:6b:53:
55:58:f4:04:3b:72:43:11:b2:3d:b5:36:ee:50:61:c0:4b:5b:
a8:e4:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:39 2026 by rpki-client