Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: ihfPad3PRBoCSq+8MUJVWEp5foq32U9vwWfMoPUbPQ4=
Subject key identifier: 3E:FD:07:1E:60:C1:AD:1C:FB:12:8E:CC:FD:81:D3:E1:D3:75:C1:F3
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01A0DD97BA039139DBB408BC449685E25B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 12:01:43 +0000
Manifest this update: Sat 26 Sep 2026 12:01:43 +0000
Manifest next update: Sun 27 Sep 2026 12:01:43 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: vimaPQLGkqlu1a+8TTGx6qAikGFzwoCphQYbcNq7zMM=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:ba:03:91:39:db:b4:08:bc:44:96:85:e2:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Sep 26 12:01:43 2026 GMT
Not After : Sep 27 12:01:43 2026 GMT
Subject: CN=3efd071e60c1ad1cfb128eccfd81d3e1d375c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:df:6c:09:b8:72:7a:a8:74:bc:47:99:44:
9b:25:36:0a:89:b9:27:94:88:50:5b:68:da:73:3b:
62:10:54:16:d0:17:7a:65:fb:03:35:af:ba:1c:dd:
ba:2e:fc:97:a9:d4:41:c2:9e:8d:64:71:e0:bc:e6:
07:d2:d7:a8:3d:85:22:2d:d2:60:4b:ae:9a:01:70:
7e:5b:43:19:e3:9e:3e:88:67:72:56:87:5d:cc:e0:
f6:b6:35:07:35:a7:90:ca:14:f9:c9:73:9e:4f:49:
cb:47:89:8f:a5:7f:cc:09:52:6b:35:e9:26:f8:ed:
82:7b:6f:24:03:92:11:3b:6c:2f:df:0f:0a:c0:83:
9e:af:aa:af:44:7d:29:12:b7:b4:05:55:c3:10:dd:
18:02:4c:c4:e8:91:f3:9c:9e:67:5a:4b:f4:f3:77:
05:04:f5:75:2a:71:56:1b:ad:6e:5c:16:bc:f0:2f:
bf:61:6f:1e:f4:82:3e:70:ac:8b:1a:28:cb:53:b4:
da:d7:f2:53:4d:66:c9:3f:1a:2d:7d:e2:86:44:1f:
3b:9d:b8:ac:42:c7:1f:87:9a:72:fd:ed:2f:04:99:
2d:1b:48:9d:f9:2b:e1:35:58:ee:27:7b:07:bb:82:
34:ed:51:12:0e:ef:3d:c5:39:81:fa:7f:be:c3:10:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:07:1E:60:C1:AD:1C:FB:12:8E:CC:FD:81:D3:E1:D3:75:C1:F3
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:68:b9:56:cc:b4:ea:29:f2:4e:ed:90:3d:3f:24:9f:e0:
2b:83:de:46:61:1c:8a:22:b5:f7:92:6c:23:43:3b:be:f5:42:
d1:1e:53:11:a4:85:8d:3a:26:bd:c7:4e:ae:8c:a6:88:af:c5:
b4:af:d5:bb:9f:9b:f3:bb:28:c8:74:c0:b8:0c:ee:4b:45:92:
4e:a4:19:0a:4e:b2:f6:f8:b5:30:e6:e4:d7:42:bf:ea:71:3f:
b2:58:66:66:50:39:7d:58:54:04:41:37:98:66:49:68:1c:be:
97:23:97:3f:4b:7a:9b:a5:5b:59:fa:78:68:cb:60:45:c3:60:
2d:ae:75:2d:41:8e:d7:58:98:05:9c:57:3f:5c:e1:ee:3b:cf:
d3:d4:1c:52:81:3a:97:fb:e9:dd:77:01:4b:91:3a:bf:1d:c6:
39:79:92:1e:1b:f5:76:25:56:8c:89:9f:cb:d8:b1:99:83:a2:
ef:ed:d7:0e:47:17:84:81:cd:80:83:f4:c7:8d:ba:b6:57:a3:
e6:53:9c:0d:38:a5:3d:e2:da:b7:00:2c:41:86:b4:77:b3:23:
e4:25:78:7b:3d:d3:9e:17:3b:b2:fc:96:98:89:2d:e7:82:48:
42:61:91:6c:c3:04:62:62:d2:1c:1f:96:c0:fd:08:7f:68:f3:
35:bc:2a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl7oDkTnbtAi8RJaF4luDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjYwOTI2MTIwMTQzWhcNMjYwOTI3MTIwMTQzWjAzMTEwLwYDVQQD
EygzZWZkMDcxZTYwYzFhZDFjZmIxMjhlY2NmZDgxZDNlMWQzNzVjMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd3fbAm4cnqodLxHmUSbJTYKibkn
lIhQW2jacztiEFQW0Bd6ZfsDNa+6HN26LvyXqdRBwp6NZHHgvOYH0teoPYUiLdJg
S66aAXB+W0MZ454+iGdyVoddzOD2tjUHNaeQyhT5yXOeT0nLR4mPpX/MCVJrNekm
+O2Ce28kA5IRO2wv3w8KwIOer6qvRH0pEre0BVXDEN0YAkzE6JHznJ5nWkv083cF
BPV1KnFWG61uXBa88C+/YW8e9II+cKyLGijLU7Ta1/JTTWbJPxotfeKGRB87nbis
Qscfh5py/e0vBJktG0id+SvhNVjuJ3sHu4I07VESDu89xTmB+n++wxCUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD79Bx5gwa0c+xKOzP2B0+HTdcHzMB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi9ouVbM
tOop8k7tkD0/JJ/gK4PeRmEciiK195JsI0M7vvVC0R5TEaSFjTomvcdOroymiK/F
tK/Vu5+b87soyHTAuAzuS0WSTqQZCk6y9vi1MObk10K/6nE/slhmZlA5fVhUBEE3
mGZJaBy+lyOXP0t6m6VbWfp4aMtgRcNgLa51LUGO11iYBZxXP1zh7jvP09QcUoE6
l/vp3XcBS5E6vx3GOXmSHhv1diVWjImfy9ixmYOi7+3XDkcXhIHNgIP0x426tlej
5lOcDTilPeLatwAsQYa0d7Mj5CV4ez3Tnhc7svyWmIkt54JIQmGRbMMEYmLSHB+W
wP0If2jzNbwqGA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:02 2026 by rpki-client