Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: JYizExBxPXWZHB/XBGt1t7tlcKoVXCmXiB6pQ2Vlsgg=
Subject key identifier: 62:D2:0E:C6:72:36:19:07:E6:A8:72:EB:E6:EF:03:C9:60:CF:72:24
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019D39AED61F4AE50B01EB7C6D0071DF4F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: kY/5XqP6ipMFKBAp5rDqsAmccOVOAqnGB+dvLRx1VFM=)
2: o9T7oh4K9H0mCWBwdt1A7_X6jDg.roa (hash: mRN5lv7EsIT/W9Bse93WAZSVdJty+NekL6x+GxdmcDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d6:1f:4a:e5:0b:01:eb:7c:6d:00:71:df:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=62d20ec672361907e6a872ebe6ef03c960cf7224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:64:60:61:fd:f2:15:60:12:bd:a8:2e:30:
e2:7e:0a:e3:cb:35:67:1e:af:4d:59:62:77:5e:be:
d7:73:dc:e0:da:31:4f:17:4c:e0:2f:2d:c5:82:c6:
db:46:be:98:8b:f8:04:53:13:a8:11:de:3f:f1:13:
74:5e:36:9e:39:d1:84:0b:21:43:16:8f:e4:38:08:
93:1c:c7:99:71:47:f6:52:2c:96:0e:7f:c7:a4:4d:
57:2a:4c:ad:e6:dc:15:8a:2a:63:50:cf:c6:9a:79:
29:5a:80:d2:2e:d6:af:da:b7:73:5b:3c:6e:27:07:
87:68:f1:c4:c8:ab:d8:de:31:ad:4b:2a:85:e1:e3:
5a:f7:6c:f0:83:b6:90:6f:0b:66:cc:cf:af:69:14:
b9:4a:cd:f3:d6:76:e9:83:a4:3a:1c:e9:1d:02:16:
03:f8:f6:65:89:2f:ea:c7:23:05:29:ee:0a:0b:0d:
7f:50:5e:85:31:c2:e8:fc:e4:99:3c:84:bd:bb:f4:
d2:52:cd:00:fb:f4:f2:dc:ca:3f:84:91:ef:85:a3:
b9:f9:ee:9f:e3:14:76:2e:0d:d1:42:6f:8b:c8:f3:
2a:45:eb:08:ca:c9:03:39:30:a2:6d:2f:51:57:d7:
cb:20:c5:dd:ba:88:69:1c:f4:2d:9c:24:ed:c9:21:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:0E:C6:72:36:19:07:E6:A8:72:EB:E6:EF:03:C9:60:CF:72:24
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:82:99:4e:63:43:df:d1:b1:7d:a0:1f:c8:ab:16:fb:37:
c2:48:8d:78:32:da:1a:4d:73:39:3f:e5:f3:19:77:01:32:bd:
aa:68:47:e5:48:1f:09:e6:d2:7f:a5:bf:ce:7c:a5:e0:f7:73:
e0:3f:85:c5:f0:e0:ec:50:fb:21:9a:be:93:66:64:5f:de:a6:
65:6b:2a:f3:ca:c9:f1:b8:32:2f:e2:30:c6:2e:1e:02:ae:49:
bd:7d:16:01:57:ed:e0:49:e1:48:8b:1a:54:29:cd:40:f3:52:
34:37:d7:de:fd:13:f7:6a:59:7f:8c:8e:16:47:8f:03:85:e4:
5a:e7:5c:bc:2e:3c:08:2e:c6:0f:dd:0f:6e:04:79:da:1a:c5:
01:71:26:3d:b1:9c:e9:af:2b:c5:42:52:dc:27:62:70:52:f3:
52:d6:c7:30:74:d2:30:35:2f:f5:3c:ac:58:2f:d8:d4:e2:c6:
5c:92:03:90:f3:79:cc:a4:c8:66:72:c8:ab:bb:88:fa:f9:68:
92:5e:89:d4:95:d8:6a:fa:ea:f7:64:d0:fd:5f:b9:4f:ca:60:
41:8c:39:ad:33:41:16:90:76:1b:c1:5a:f7:47:bf:9b:2b:62:
94:7b:21:27:2b:28:56:53:f3:77:92:e0:ec:1a:ee:51:46:18:
35:62:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:01 2026 by rpki-client