Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: 4v1Dr+yQ0KxRcGDaJ7EUD6lPOSgsTDPoKfjWrg+8zoY=
Subject key identifier: CB:69:4B:3B:B4:E6:21:F0:23:64:EA:94:67:22:E5:C3:46:09:D5:9A
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019F111C484AF312373D3CC83380AEB7137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 02:01:33 +0000
Manifest this update: Mon 29 Jun 2026 02:01:33 +0000
Manifest next update: Tue 30 Jun 2026 02:01:33 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: bLP1aQtDxRKQurJhHBR+rWKhWOI1HtgrAx3gYq+bCME=)
2: QE5q_L-xb3ce6VSxlmHnUXEOOVk.asa (hash: xloMhlc6nR1DEKCsLn1/UPPfHdpRoMA49t3wNgrXI2A=)
3: niopwJZMn8lwde1NS8wt0Uc3Yoc.roa (hash: 2/gUiZX6EHQGEQMzfipjY0mkbjq0PaON38uwwnLdqZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:48:4a:f3:12:37:3d:3c:c8:33:80:ae:b7:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Jun 29 02:01:33 2026 GMT
Not After : Jun 30 02:01:33 2026 GMT
Subject: CN=cb694b3bb4e621f02364ea946722e5c34609d59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:22:c3:94:e8:ae:02:e1:e8:3b:65:0e:5e:
36:3f:59:76:76:9f:d5:bb:25:6f:ed:42:84:56:97:
7a:da:ac:22:04:fa:b3:ae:01:fd:94:9e:06:11:e2:
6a:22:00:4b:55:30:e2:07:de:76:6a:43:c8:b9:2f:
1f:78:37:4f:38:64:50:da:29:7c:4c:49:54:64:58:
3d:61:e5:4c:7b:96:0e:c2:42:c1:50:22:29:9c:1a:
44:a3:a9:b2:2b:f6:78:88:4e:84:1a:8f:07:90:69:
4f:58:6b:5b:2a:a9:e2:d9:dc:bf:3b:42:51:9c:f8:
78:38:89:fa:2b:db:57:f2:de:ee:e9:a1:8c:58:0e:
47:0f:f3:b6:81:5e:93:e0:b9:9a:d3:42:8d:7b:5b:
2a:b8:e8:d5:f1:d4:ae:5d:e4:96:bd:21:33:2b:d2:
42:78:4f:33:8f:c4:7e:9d:7e:da:52:70:b8:73:ab:
0d:e8:9d:a9:7e:34:f8:0a:21:83:7b:38:67:77:a5:
b9:a8:62:2d:fa:85:f9:00:a7:8d:d7:17:1b:99:86:
48:f6:82:ed:1a:d2:1e:fb:3c:0e:25:2b:78:c7:0b:
d4:9a:4f:97:7b:f5:e9:e7:05:6e:5c:94:4e:fc:13:
9a:0c:b1:10:2a:8a:bf:ab:ff:3c:c2:1c:8f:89:72:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:4B:3B:B4:E6:21:F0:23:64:EA:94:67:22:E5:C3:46:09:D5:9A
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:61:41:0f:06:99:83:36:b7:2d:3e:a4:c5:0a:b8:90:22:
57:9f:0d:e8:f3:fd:44:93:d3:4a:8c:c3:d2:69:ec:c0:d9:7e:
a5:03:95:6b:59:ea:85:ef:f2:04:78:0a:bc:1b:24:fa:15:00:
93:03:a6:62:4f:8d:0b:43:3b:c9:a2:64:03:85:f5:29:be:f0:
4f:79:b4:e3:5f:5c:27:46:13:77:cb:e9:51:ab:9e:d8:94:61:
35:4b:6f:94:e5:a6:51:51:e2:14:fe:6e:20:94:62:d8:6d:7d:
7a:f4:da:d7:7b:12:0d:66:2b:f2:dd:24:e9:1c:e4:82:b7:5b:
1a:6f:52:c0:2c:12:43:bf:56:15:c3:80:66:1e:31:11:d4:e3:
d9:9a:83:fb:7f:98:b4:54:59:dd:52:13:0e:76:ee:9c:41:4e:
21:68:83:bc:7b:44:94:4e:25:23:a8:98:6d:07:5f:2d:9e:94:
3a:8c:65:02:b3:38:62:fb:71:b6:8c:44:b7:2a:c4:1b:19:e5:
e2:ff:1c:e7:67:a7:66:ef:47:f3:bc:4f:ab:f8:ab:3f:f5:89:
d7:5e:a8:12:f4:10:78:aa:c4:90:a5:03:1b:4f:f0:79:06:81:
01:87:c7:b9:9c:ae:88:58:6e:71:43:cc:d1:f4:9a:04:37:d4:
c0:ec:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:38 2026 by rpki-client