Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: /c8bReuX+2A8yfG7zsd4cpW1rWFS5nLhyCkjmJM0afQ=
Subject key identifier: A7:15:7A:4D:3C:48:43:E1:B1:87:41:CB:00:8F:02:BD:D4:12:F7:07
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01A1C02EED062431C53A0430E231FE6DF302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1AEF
Signing time: Mon 09 Nov 2026 12:01:03 +0000
Manifest this update: Mon 09 Nov 2026 12:01:03 +0000
Manifest next update: Tue 10 Nov 2026 12:01:03 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: JIZGGkm9xt1c51NWBgDnX3X9ER4UZOjvc8y91xWRG7o=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:2e:ed:06:24:31:c5:3a:04:30:e2:31:fe:6d:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Nov 9 12:01:03 2026 GMT
Not After : Nov 10 12:01:03 2026 GMT
Subject: CN=a7157a4d3c4843e1b18741cb008f02bdd412f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:16:31:75:2c:8b:56:d5:76:90:05:78:d3:
b2:7f:da:29:1d:01:e1:22:63:cd:0b:9d:11:0b:f8:
c9:7d:01:bc:9b:fc:0c:c7:49:79:89:c7:36:c7:a5:
7c:c3:12:0c:34:b8:6e:3c:35:ee:c9:55:7a:80:71:
f8:6c:3c:49:ef:7c:7a:76:6b:b9:30:27:ca:a1:c1:
da:86:54:27:fb:bf:1a:40:12:64:a7:39:1f:39:23:
5c:02:ff:df:00:d2:df:32:d5:95:d3:d9:7c:b7:f4:
59:79:aa:a6:3d:ec:bc:b1:a2:a4:59:75:ce:57:33:
08:65:0e:a0:d6:ec:6b:65:0b:87:4f:0b:83:19:53:
6d:89:0f:24:c6:13:a8:ca:c2:d4:0b:77:f2:2c:80:
5f:1c:b9:05:c5:91:c9:2e:ad:9d:ba:95:2b:65:91:
63:34:04:13:04:90:e8:63:c4:5e:7f:1c:75:d3:43:
85:4c:64:82:97:3f:28:6d:ff:5d:ff:a4:ae:58:14:
2b:6b:67:20:ab:7e:16:8f:ea:25:e1:88:cd:54:f7:
95:c6:ba:3a:f6:1a:38:47:52:4c:a5:9c:b5:2f:a5:
22:d0:51:4e:f5:9c:0b:e3:ee:e6:a8:c7:25:0e:e6:
3c:1c:5f:c7:4e:c6:38:37:db:8a:07:52:90:ae:5b:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:7A:4D:3C:48:43:E1:B1:87:41:CB:00:8F:02:BD:D4:12:F7:07
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:18:0b:44:fb:7b:1b:83:2f:67:eb:ac:51:bd:59:53:bc:11:
6f:fa:ad:21:f4:5e:9e:7f:55:ea:43:22:68:97:6b:81:ad:0a:
a9:11:9e:66:4b:5f:67:6e:51:13:89:87:e0:44:8d:5e:6d:ce:
bc:78:a6:ec:ff:54:11:3d:d6:b2:25:73:23:90:bc:d7:4e:a3:
3d:1b:c9:3a:32:0e:70:40:1b:bd:76:23:d0:9e:8b:9f:cd:4b:
4d:ca:58:37:84:47:58:08:fc:ac:b9:58:10:d7:29:4e:79:5d:
98:f5:8f:c6:28:52:4d:17:ef:e7:36:11:41:cb:41:ea:31:df:
28:eb:55:74:3d:6c:1f:f4:e6:02:59:8c:ea:8f:2d:40:ef:0b:
00:91:9e:54:8e:4c:d5:99:44:43:63:d6:cc:af:b3:9d:2a:4b:
2d:8f:92:e5:2c:c7:a6:05:39:5e:4f:d7:93:65:19:3d:72:4d:
0a:ee:ec:37:b2:3a:b3:c5:be:d0:79:b8:77:6e:31:8d:79:e5:
34:27:e7:10:e0:1d:d1:83:ed:dd:c1:17:34:c0:77:71:1a:44:
26:6c:08:8c:be:e2:b3:ca:b9:e2:78:40:53:2d:86:60:57:18:
40:f7:e0:b7:53:b7:11:be:a1:57:8e:f3:cb:f6:f9:37:5a:16:
24:e9:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:35:38 2026 by rpki-client