Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: qSsXqTLL1n3hUH9O4AgLNbAEmTCVEUc6/lrVs83i3qg=
Subject key identifier: 47:AF:EF:F8:BE:29:61:C8:28:99:CE:A8:4B:D6:17:46:85:1D:28:C4
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019D9818A306D1F08AD2603819FAF72EC78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 21:00:44 +0000
Manifest this update: Thu 16 Apr 2026 21:00:44 +0000
Manifest next update: Fri 17 Apr 2026 21:00:44 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: Sgtt5WSS6sVxWB0Za+oMHiG04oGFB52NjPex7XCsHEQ=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a3:06:d1:f0:8a:d2:60:38:19:fa:f7:2e:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Apr 16 21:00:44 2026 GMT
Not After : Apr 17 21:00:44 2026 GMT
Subject: CN=47afeff8be2961c82899cea84bd61746851d28c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:59:7c:9e:e0:1c:10:51:23:ed:a8:d1:ad:
a2:d7:5a:6a:34:ed:72:58:95:99:4a:bc:30:0f:45:
f4:b1:e5:45:b4:92:ff:f3:ef:93:fe:58:c7:10:ac:
25:0a:7c:7e:f0:09:04:d2:29:da:3a:f1:79:3c:65:
9a:8f:94:e1:09:1b:8f:3b:8a:72:49:04:89:8f:75:
62:cc:cc:0a:1e:48:ba:a3:95:95:ac:c2:ec:de:d6:
5b:e1:51:04:5b:a2:a6:8b:6c:a7:dd:70:11:f9:f4:
ef:cb:13:14:36:f1:c2:59:e6:59:4c:30:ed:6f:ec:
43:f1:3c:37:a1:6a:15:88:c5:e4:aa:0d:b4:8e:6e:
0e:fe:cc:08:1d:f9:a0:96:d5:20:3b:0e:42:d0:52:
f6:5a:ad:7c:f1:53:8f:34:10:ee:84:85:ea:08:7e:
2b:23:01:7e:0a:67:6d:73:a0:2c:84:eb:ab:d4:dd:
87:33:82:18:20:1f:3c:ac:95:5f:bd:67:6e:c2:31:
c0:f0:86:26:65:ad:38:d7:a7:65:f5:0f:91:e0:71:
2b:b0:c3:20:b7:9f:8f:27:a4:62:e7:5b:92:9a:1e:
90:4a:92:02:54:65:9d:c6:ee:28:f1:64:00:6a:be:
b7:44:0b:96:9c:8b:30:33:85:6e:cc:fd:d1:21:3c:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:EF:F8:BE:29:61:C8:28:99:CE:A8:4B:D6:17:46:85:1D:28:C4
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:bd:c0:a8:61:e1:8a:a0:08:98:16:1d:60:e5:d7:d2:3a:95:
9d:97:e4:c6:c1:d5:56:8e:f8:29:fb:46:08:9a:ae:53:29:cd:
42:d7:75:a6:76:75:a4:8a:e3:99:fa:0c:42:eb:8b:63:3f:1a:
fb:d6:5d:71:a2:3f:19:3f:b7:38:68:d2:87:03:62:ae:22:df:
cc:1e:b1:34:a9:a8:ba:33:de:1d:50:66:23:89:a4:7b:1b:25:
0d:cb:97:ce:1c:27:9b:01:c1:fb:2e:8d:08:50:46:64:0d:5e:
8c:67:f7:9f:46:eb:b3:c9:77:2b:eb:0e:92:ef:cb:05:d8:ed:
48:6e:e4:4c:4a:8e:e6:26:0a:71:5c:f5:d7:4e:eb:ea:88:d0:
b5:6c:f2:dd:bd:3a:bb:a4:f0:87:a2:bc:ea:06:66:59:f6:4f:
e5:d7:96:50:f2:73:26:5a:20:e2:b2:e8:63:88:a8:23:33:f2:
d4:a8:5c:3a:f7:fe:9c:98:08:6c:23:e8:57:b6:73:51:6d:11:
96:b5:7d:e0:5e:56:38:81:1e:3d:fc:92:c6:86:2d:70:2f:43:
2c:d2:df:a7:de:c3:95:37:08:7c:f2:d7:f2:95:d3:59:eb:c5:
ce:6a:e6:b3:2e:b6:7d:32:fb:bd:da:4c:f8:4f:f8:4b:89:18:
cc:db:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:17 2026 by rpki-client