Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: TbJpeJh/tuNBKp12fc6miOZTOoU+TRLqEB75XTAqkQI=
Subject key identifier: B9:BC:7C:24:CC:94:2A:D2:7F:DB:BC:23:11:66:F0:24:21:E3:24:6F
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 01A13D49F43D1F55840BCF67EA52EA0336B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 1AAB
Signing time: Thu 15 Oct 2026 02:00:19 +0000
Manifest this update: Thu 15 Oct 2026 02:00:19 +0000
Manifest next update: Fri 16 Oct 2026 02:00:19 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: i6aYl08reFjRXjA7YkC/ZW9Vgzu8v+rkYmTG1ckLkLk=)
2: QE5q_L-xb3ce6VSxlmHnUXEOOVk.asa (hash: xloMhlc6nR1DEKCsLn1/UPPfHdpRoMA49t3wNgrXI2A=)
3: niopwJZMn8lwde1NS8wt0Uc3Yoc.roa (hash: 2/gUiZX6EHQGEQMzfipjY0mkbjq0PaON38uwwnLdqZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:f4:3d:1f:55:84:0b:cf:67:ea:52:ea:03:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Oct 15 02:00:19 2026 GMT
Not After : Oct 16 02:00:19 2026 GMT
Subject: CN=b9bc7c24cc942ad27fdbbc231166f02421e3246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:04:7a:f4:7f:1b:b7:6c:b1:34:1c:77:76:
1c:a3:97:54:42:b6:ab:77:79:ac:b7:43:eb:b7:49:
03:02:d5:f6:b0:57:46:b2:eb:b2:dd:05:ba:6b:9c:
43:77:a1:d0:c9:c7:e8:ef:66:39:1a:9e:32:d9:87:
be:b5:b6:43:27:dc:9b:3b:a0:3d:4e:c6:e4:53:42:
2f:1f:c2:24:60:4b:5d:e2:27:37:52:1e:43:38:76:
e1:ee:b2:69:ba:8d:3d:4e:31:58:b0:30:a4:0c:9e:
a0:d5:4d:2e:39:2c:e5:01:98:f1:21:a6:a5:70:be:
3f:ed:02:93:c0:ba:01:88:69:cd:de:6d:a7:7d:cc:
69:9f:ea:ff:b1:53:e7:d2:43:66:64:77:d8:3a:3d:
07:6f:f9:34:0c:5e:33:75:94:02:6b:b0:70:4e:cd:
4d:7d:57:b5:dd:b9:aa:01:85:f8:7b:60:ba:b0:28:
66:8f:8a:f7:6b:33:dc:52:d3:93:da:2c:e1:88:6e:
90:23:e9:bf:08:8a:51:a6:44:00:d5:a4:35:38:1c:
9e:a4:0a:22:bd:a0:50:73:e7:69:a0:e8:be:4c:b4:
94:b6:db:10:e1:22:b6:ca:40:0a:38:04:50:6b:44:
71:5e:b6:34:98:27:75:ae:1d:db:35:95:97:b3:66:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:7C:24:CC:94:2A:D2:7F:DB:BC:23:11:66:F0:24:21:E3:24:6F
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:2c:40:e3:6b:53:93:0e:b9:60:98:14:47:74:b1:b6:35:
2a:de:57:07:f7:60:4e:24:96:0a:66:de:a1:59:3d:5a:14:d9:
45:87:26:78:17:6f:ba:9c:a1:0d:29:ff:94:d4:10:58:96:98:
34:5a:66:59:f3:43:a5:3c:ed:0c:a8:70:e5:d6:e8:e9:ba:90:
60:31:7a:21:34:4b:d7:9a:be:59:b5:4b:c0:f3:6c:57:0e:6b:
15:fd:b4:7f:1f:0c:61:37:c1:43:14:1b:df:4e:a0:34:f0:9d:
3b:d1:21:db:6b:8f:63:38:61:db:81:85:1d:4a:4e:25:e1:ac:
e0:73:30:b1:bd:70:a1:0f:ec:17:c9:5d:c7:b6:ac:82:4b:b1:
17:c3:09:eb:65:d3:ee:dc:12:d3:3e:c0:5c:8b:77:b9:e4:d0:
a0:f2:1e:62:62:d6:fb:65:92:de:b9:f4:e1:78:5e:50:e6:e7:
83:0c:11:5c:c0:9b:60:c2:22:ec:88:19:71:0e:7b:64:1c:6c:
b9:94:9c:5e:55:13:77:73:53:00:b1:ee:fc:a6:e0:3a:61:12:
fa:19:ad:e5:7d:a6:0e:db:63:94:54:13:42:a4:e8:53:49:e9:
7f:d9:52:5e:a0:39:37:43:27:eb:08:03:4b:c2:44:9a:96:84:
47:a3:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:28 2026 by rpki-client