Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: pwoV2Ovdyl7AHJwkY85D1c8GOhWLlZENOc4IVP/pqlk=
Subject key identifier: E5:75:B3:B9:FE:E7:FC:BD:42:DC:D2:A7:C3:24:63:FD:7B:E9:67:83
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019CAA8FF262F841CDB85E768FFFE1F53CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: wDLd2hRQzpXhRCS3gfAPtEZyouOHyZMcGMi58y9tdVk=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f2:62:f8:41:cd:b8:5e:76:8f:ff:e1:f5:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=e575b3b9fee7fcbd42dcd2a7c32463fd7be96783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:2a:90:be:82:2e:f2:c4:aa:e4:09:0a:f4:
d1:b4:9b:67:1d:e2:e9:04:70:8b:ac:bd:ea:ca:c5:
f2:1f:59:e6:5c:2c:1e:1b:37:a0:dc:35:ea:a0:49:
4d:03:53:9e:d0:72:01:33:6b:3f:9c:c6:44:bd:e9:
72:a7:78:7d:75:46:5d:73:bb:22:24:cf:52:62:03:
6e:c7:ce:77:63:71:af:f6:1d:ea:dc:06:17:27:25:
a8:da:2c:09:95:1d:1b:07:a8:79:0e:4b:65:ac:86:
46:f6:fe:23:a9:9c:da:e3:91:44:25:91:15:3a:21:
55:c3:73:59:2a:30:86:03:3c:69:5f:08:93:31:c7:
30:46:73:d7:e4:07:17:66:d3:9d:84:9e:38:72:7f:
79:5e:7f:1d:73:13:b6:5b:73:3f:1b:6b:37:26:4c:
eb:ed:71:82:14:f6:85:08:85:79:7c:d0:8a:ee:db:
4f:5f:23:37:12:38:bc:95:bd:f4:5d:c2:75:1d:75:
16:97:f9:6a:78:99:b6:05:f9:26:a2:51:ea:7d:81:
7c:71:7f:8d:bf:0c:ea:ac:75:9e:04:33:5b:a1:57:
2a:4e:df:9d:a2:f1:06:8e:b6:27:98:a7:b2:4a:81:
dc:0c:03:01:16:e2:78:50:ea:b0:9b:bb:a0:24:2c:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:75:B3:B9:FE:E7:FC:BD:42:DC:D2:A7:C3:24:63:FD:7B:E9:67:83
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:75:b7:e5:61:e3:1a:c2:7b:c2:7b:ef:6f:d1:60:3b:04:
cb:bd:f1:04:ca:78:b4:94:d3:c9:17:e9:8f:fa:43:14:82:98:
21:f1:53:ee:b2:df:0d:b6:f8:e2:cf:d5:84:8e:78:84:65:4f:
56:f6:74:14:a9:d9:32:f6:1f:94:50:33:ea:a3:88:53:be:49:
85:6b:dc:83:98:49:ea:01:11:ee:e2:11:2b:86:1c:79:66:4d:
88:8b:43:a8:99:52:72:43:1f:7e:6b:18:9c:3e:3f:02:ee:45:
65:65:86:d0:a3:e7:d1:f6:39:dc:98:92:2e:92:00:61:50:13:
11:a0:61:40:a6:fc:a7:14:6a:f5:d8:6f:b1:50:a2:e4:93:f0:
a3:9f:53:5f:4d:a9:a1:38:3f:69:4b:92:68:c2:53:f6:82:ed:
94:d5:79:17:f4:5f:93:4d:15:0b:a1:1b:7b:18:61:89:96:d6:
2f:47:fa:f8:1c:e4:ac:47:2d:0c:55:bd:2b:b9:f1:ae:29:7b:
f0:a5:38:2e:0e:a7:61:d2:de:49:97:dd:71:4d:b7:42:1b:71:
da:62:22:4c:20:b3:d2:ff:41:7c:83:d1:d0:9f:f4:47:73:c8:
8e:8e:1a:3c:49:3e:7c:36:f3:cc:45:4d:12:70:5d:f2:e7:0e:
68:94:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:50:28 2026 by rpki-client