
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: wm0vhbfzwggAFNEQZUaBZm71H6BWQikn6Kk0yjWv88Y=
Subject key identifier: 00:78:7D:A1:B4:F4:9F:AE:81:77:D3:BB:F1:A6:CA:9B:77:94:79:7B
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019F935BB559799764250EB169F1E68599A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:01:28 +0000
Manifest this update: Fri 24 Jul 2026 09:01:28 +0000
Manifest next update: Sat 25 Jul 2026 09:01:28 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: ZhfI7r7tBsIpkerCSA/GUpx7+Ff9ZwfCWV7Bnsfm2P8=)
2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b5:59:79:97:64:25:0e:b1:69:f1:e6:85:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Jul 24 09:01:28 2026 GMT
Not After : Jul 25 09:01:28 2026 GMT
Subject: CN=00787da1b4f49fae8177d3bbf1a6ca9b7794797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:c6:3c:36:1f:83:78:db:02:63:88:58:90:
86:54:58:5e:5a:50:2c:6a:bd:e3:53:a0:37:72:b9:
d7:4e:2c:56:88:08:00:45:a3:2d:db:3e:99:7c:5b:
0e:62:c6:35:fe:16:70:42:bc:b4:8e:43:15:57:5e:
95:08:82:04:ca:17:bd:a5:b2:f2:38:04:a4:b6:0d:
b7:aa:44:76:44:e8:39:56:b3:d0:6a:e2:42:91:a7:
9d:c2:d6:f9:ed:b9:fd:7a:17:6f:e1:99:e9:dc:12:
ca:e3:b7:21:8f:5d:92:31:64:7d:74:14:34:f1:f1:
d1:c6:54:44:53:c6:01:40:65:24:0a:f1:d3:ec:b4:
44:5b:23:8a:5e:5e:d9:da:0f:fa:ed:00:e1:23:9f:
5e:c9:35:16:61:15:e6:48:fd:1d:49:37:a1:19:e6:
0b:cb:a4:82:0a:16:a0:3c:be:3f:d0:9c:c4:1d:59:
4e:c0:0d:45:2c:35:0a:6b:b4:d3:31:61:48:a0:3f:
5b:c7:a9:96:f4:11:1a:cf:85:a7:d3:3a:de:44:b8:
31:ec:00:91:93:42:50:af:b5:34:9c:ee:86:a5:33:
9a:3d:bd:a1:d1:37:f8:06:20:72:e9:b0:0e:e3:e8:
cb:7c:de:df:88:65:f3:55:a6:39:f9:86:bb:2e:5e:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:7D:A1:B4:F4:9F:AE:81:77:D3:BB:F1:A6:CA:9B:77:94:79:7B
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b4:7b:b9:14:bd:5c:1c:92:a6:96:37:99:ae:b7:ed:7b:2e:
22:54:08:ef:d4:f0:32:36:87:90:56:ca:b7:4d:05:1a:f1:0b:
e3:f0:e7:8b:8e:5d:95:88:ea:5e:90:b7:94:59:08:b2:59:e0:
e7:05:ce:09:c3:6e:96:7b:3d:31:fa:16:10:92:32:f5:dc:8f:
a2:ff:e8:96:ad:ef:ab:5e:fb:91:dc:5e:66:b8:ca:3c:ac:85:
3c:98:70:7c:0e:a2:c3:7e:d2:fc:99:57:18:59:9c:70:73:5e:
f0:24:af:eb:e9:e2:d4:33:96:81:04:5b:49:7b:26:6e:c0:2a:
9a:65:10:55:c4:70:65:bd:c5:83:6a:10:ca:b2:24:94:2b:2b:
6e:36:09:25:38:a0:bb:cb:71:c9:18:44:63:25:5f:1d:21:fd:
29:b1:b7:09:76:70:2b:f0:d5:df:11:81:5c:02:8c:17:7c:53:
4e:1a:5c:12:5b:ee:0b:e5:0d:de:7f:40:65:3b:90:51:48:30:
9b:a6:43:1b:98:6b:56:e6:56:a1:f1:84:f0:e0:58:32:1d:e3:
fc:ab:24:3b:57:5a:22:c5:31:d6:91:3a:2a:32:7e:bb:23:4c:
14:7b:41:94:51:10:bf:9b:19:52:17:9c:ba:e1:d5:2d:85:39:
23:4b:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:04 2026 by rpki-client