Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: nF4K0qqfyC4Q4OVTMX1b8KHiy452y+76br836/ijoVo=
Subject key identifier: 77:1D:89:74:3B:70:D6:39:1F:DA:FE:BB:2E:DD:D2:19:E3:65:9A:CC
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01A0C3321274ABDE033ACF5FB97ED266C449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1A6C
Signing time: Mon 21 Sep 2026 09:00:33 +0000
Manifest this update: Mon 21 Sep 2026 09:00:33 +0000
Manifest next update: Tue 22 Sep 2026 09:00:33 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: cDquwyrvbQZBQtAYnlb0pHwesvlJZxrAHBkmSMh+UZE=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:12:74:ab:de:03:3a:cf:5f:b9:7e:d2:66:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Sep 21 09:00:33 2026 GMT
Not After : Sep 22 09:00:33 2026 GMT
Subject: CN=771d89743b70d6391fdafebb2eddd219e3659acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:60:1d:37:df:56:31:47:aa:fc:7a:00:e1:
6c:a5:2c:e9:dc:43:74:9a:f6:28:e5:e1:66:22:4b:
82:6e:9e:47:1c:d3:c6:d6:6a:3b:0e:ae:37:8e:fd:
3c:bb:57:f1:f0:6f:04:b5:ba:7a:73:ee:e6:43:1a:
8c:15:0f:5e:e6:58:ff:1f:b6:b2:4a:4a:14:f3:83:
cf:21:4a:3a:93:31:e3:11:af:a9:53:6a:7d:0d:02:
e8:6c:d9:9d:43:f2:51:46:e2:39:db:37:a5:bd:ca:
6c:c8:31:c9:88:5c:97:7d:70:a2:65:a2:57:b9:26:
03:c7:8d:03:d4:c8:32:78:03:5b:f5:4b:e3:36:77:
0d:1f:bc:03:6d:f5:bb:83:b6:6d:98:a8:00:cd:89:
9e:ef:9a:49:50:fa:c4:2f:c7:98:ad:a8:92:9e:db:
c2:a7:a7:30:14:36:19:88:c7:b1:5a:4a:95:9b:22:
a8:58:4f:2a:e2:f0:11:08:81:69:e7:d4:88:a1:6b:
05:11:00:ee:97:8e:6f:a7:12:b1:d9:9c:82:93:9f:
e0:9a:88:f2:ac:24:31:29:16:64:fa:a9:4d:31:5f:
49:a4:f0:a4:26:63:2e:1c:91:8f:2a:0a:d3:71:32:
a0:a1:11:88:ab:25:d0:a4:f8:39:2b:c0:ad:30:30:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:89:74:3B:70:D6:39:1F:DA:FE:BB:2E:DD:D2:19:E3:65:9A:CC
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d4:73:0e:db:f5:8b:03:8d:a7:4f:82:15:d0:b3:14:91:0e:
00:e8:ce:99:95:3b:7b:f7:67:f0:58:2c:d9:67:f1:bf:c3:2f:
9e:f4:11:47:30:b8:84:62:32:af:92:24:32:a0:04:e5:d4:0e:
3b:65:9a:85:78:1d:5d:a7:ea:23:c7:88:f2:b1:7b:1c:83:0c:
84:5d:41:42:02:fe:da:29:17:52:ad:9c:16:57:9b:2c:40:1c:
4d:d3:06:17:ba:75:00:fa:9c:6b:cf:71:4a:79:63:84:79:7c:
14:81:64:c9:f5:ad:99:e7:e8:ba:11:1f:b3:c9:2a:ea:48:19:
54:e5:14:8f:33:9e:92:a0:9e:d7:af:3b:8e:12:cb:47:e5:eb:
71:da:7f:a0:6e:14:3d:a2:d7:03:c2:21:8f:2e:cb:da:98:d1:
c0:28:d2:94:94:4e:1b:ad:31:3c:24:74:6d:73:4d:f4:6e:fd:
56:13:4b:0d:a4:a0:24:b9:68:73:7b:94:d4:42:98:51:42:0d:
b6:43:cc:61:ab:4e:13:66:bc:bd:1c:8d:cb:c8:b8:eb:c9:0c:
00:05:e9:87:7e:cb:ac:b0:3a:d0:cb:01:a1:69:70:2f:67:4c:
c2:89:ab:1c:93:e7:4d:13:03:e2:bf:85:42:c6:be:f9:9b:44:
32:d2:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:07 2026 by rpki-client