Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: pXioKKRugHSR6YP6lxltBmEzKTpNWdMHvTNKuhwy5uI=
Subject key identifier: 0E:EF:A4:1F:0C:57:CC:3C:8E:63:8F:62:48:B7:A0:90:86:60:E2:83
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019F8EA2EED0D3336EA70ED89D3CB0767CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 11:01:10 +0000
Manifest this update: Thu 23 Jul 2026 11:01:10 +0000
Manifest next update: Fri 24 Jul 2026 11:01:10 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: OzrDEn3MJ8d1qN7GBMv4Qg6X+shDzVCYsb13+n/AYB4=)
2: QE5q_L-xb3ce6VSxlmHnUXEOOVk.asa (hash: xloMhlc6nR1DEKCsLn1/UPPfHdpRoMA49t3wNgrXI2A=)
3: niopwJZMn8lwde1NS8wt0Uc3Yoc.roa (hash: 2/gUiZX6EHQGEQMzfipjY0mkbjq0PaON38uwwnLdqZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ee:d0:d3:33:6e:a7:0e:d8:9d:3c:b0:76:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Jul 23 11:01:10 2026 GMT
Not After : Jul 24 11:01:10 2026 GMT
Subject: CN=0eefa41f0c57cc3c8e638f6248b7a0908660e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:5b:ab:df:b3:e2:1c:05:08:69:19:3b:a5:
b8:24:e0:1c:83:95:5f:18:11:78:cc:25:d5:3a:64:
8d:ee:0d:36:4e:ac:ea:b3:e0:75:fe:b8:e6:e5:bc:
79:7b:3b:6d:6b:b5:c6:2e:1c:10:85:83:c3:0c:bd:
24:4f:d5:3f:5d:cb:9f:05:cc:28:c4:1b:fa:f7:f6:
c6:a8:6e:d1:68:14:fd:35:ff:ad:a8:5c:9f:8b:6a:
9e:be:b8:08:27:f9:f3:ed:ee:eb:7a:57:49:43:77:
fb:1b:cd:4b:91:59:5e:fc:e5:15:e2:17:44:9b:ba:
2f:34:eb:57:e9:3e:61:61:16:0e:8a:48:8e:a2:7b:
a2:62:cc:69:c4:9f:67:fb:75:fe:25:8a:fc:45:2a:
32:1a:8b:8f:a1:1b:6f:1c:c9:b2:96:42:53:c2:79:
58:99:91:68:b2:19:84:d9:da:cf:d9:85:f5:c3:c7:
ad:66:bd:f0:99:a4:08:79:29:61:c1:96:20:62:44:
05:dd:bb:5a:b3:b0:f9:d1:a5:16:f2:23:e2:0c:a0:
dd:04:21:e2:37:92:e1:86:11:58:0e:5c:15:1e:5c:
fd:11:3b:4d:5a:d2:99:c2:ff:de:e7:85:9f:01:57:
45:fb:9d:0d:a4:5c:c7:f4:6a:0c:7f:0e:05:0f:28:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:A4:1F:0C:57:CC:3C:8E:63:8F:62:48:B7:A0:90:86:60:E2:83
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:ed:35:05:2a:b4:06:d4:10:d7:be:3f:c0:b0:b5:9a:b3:
ef:a6:cf:c7:17:7a:52:ba:8e:77:9a:e0:09:0a:dd:eb:b9:db:
34:b2:2d:43:96:eb:50:1e:1c:4e:40:d0:28:9c:17:97:36:39:
73:d5:1c:64:25:50:d5:cf:19:9b:72:33:07:76:08:f6:5d:70:
69:1e:26:4a:3c:99:2a:e4:5b:06:fd:e5:b4:70:51:31:7f:be:
2f:66:98:01:71:34:fc:60:98:59:5f:e0:24:7d:7b:98:58:f2:
71:c0:b6:67:9c:3a:e0:4c:a8:66:e4:c1:65:e1:70:b4:5d:56:
60:13:88:15:b9:5f:5d:f4:28:0c:10:2e:e9:76:e2:88:7d:68:
3e:43:5d:86:e2:c3:ca:df:09:64:19:6d:6d:14:78:10:8a:7f:
f4:42:dc:d6:d8:d3:79:3b:3a:5e:47:17:0f:1e:19:db:44:dc:
b4:d2:d6:8f:cb:ce:fc:52:7e:fd:b5:0c:f6:9c:d9:ee:ca:2e:
a9:9b:fc:44:5f:c0:3f:42:d7:42:34:9d:db:3a:43:78:b2:c5:
53:0a:00:e7:09:43:07:25:a6:1c:98:0e:65:cc:37:67:f6:c4:
4a:7d:df:c9:5c:21:b1:39:ad:fd:a2:d2:d0:b4:51:7e:8c:60:
cf:d9:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:54 2026 by rpki-client