Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: Dhv3/3GmsT9bj7DGV4CYLytwMZNQMxrusVr1mahd9j4=
Subject key identifier: 2C:76:59:FC:80:20:90:5D:81:5E:76:3F:95:E7:F6:F2:71:27:B8:11
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019CE29092B3F6EDBD60BB3724D8179D2FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 186A
Signing time: Thu 12 Mar 2026 15:00:51 +0000
Manifest this update: Thu 12 Mar 2026 15:00:51 +0000
Manifest next update: Fri 13 Mar 2026 15:00:51 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: n9NlNG+EJ7MOrKF4OBqFH4mQM31RQmuGXPw7cKFDTfo=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:92:b3:f6:ed:bd:60:bb:37:24:d8:17:9d:2f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Mar 12 15:00:51 2026 GMT
Not After : Mar 13 15:00:51 2026 GMT
Subject: CN=2c7659fc8020905d815e763f95e7f6f27127b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:02:18:93:d1:b8:ff:e4:b8:cf:44:82:ec:
ba:c5:d5:0e:b1:9d:8a:d3:26:0a:e2:08:cc:66:0d:
c5:80:a0:e4:28:c4:bd:be:93:b8:38:60:43:1c:02:
bd:34:c9:48:ef:f8:34:37:2b:0e:e5:59:70:b9:ff:
72:65:0f:43:12:3b:52:0b:4c:10:23:4c:0a:7f:1a:
99:3b:16:82:5f:68:2d:fd:75:6b:57:50:71:ef:08:
5a:2e:9f:f6:47:d2:35:f2:7e:94:16:f4:84:a4:ad:
d0:ae:02:1e:f0:c7:a6:8b:e5:a8:92:44:13:41:01:
e1:10:a2:c8:af:e7:e2:5a:57:14:12:51:04:1a:08:
f0:07:5d:d1:d3:9d:f8:b0:97:fc:44:cc:66:ac:cc:
20:7e:98:8f:dd:c5:32:4d:0b:26:30:72:2f:50:9b:
7f:b4:a2:a1:db:88:ab:42:ba:8a:48:66:55:9b:0d:
e8:50:c5:7a:6a:84:16:d4:8f:42:2d:39:55:1c:41:
ad:40:0d:91:33:56:26:9b:15:32:0e:47:2e:da:ba:
e2:5c:82:de:48:c9:b3:72:84:26:ec:7a:c7:32:d8:
f4:0d:4b:3f:ce:97:4d:e1:f8:f8:e1:4b:58:eb:0d:
26:38:6a:80:9f:e9:3e:20:16:e6:7b:65:53:10:46:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:59:FC:80:20:90:5D:81:5E:76:3F:95:E7:F6:F2:71:27:B8:11
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cb:93:80:47:1a:5d:6d:ec:15:a0:32:50:4b:e7:54:d3:e0:
72:b0:34:c4:28:fd:50:34:8b:79:ac:c1:9f:c5:18:67:93:5a:
b3:27:a0:df:9f:a0:5b:58:1d:a9:9f:15:32:19:19:7d:11:d4:
b2:4d:a9:3e:0e:eb:25:a3:35:ee:ba:7d:c9:91:84:20:da:2a:
e5:9b:ef:c0:f6:9e:ea:86:22:ef:e0:3d:f9:4a:05:84:70:5d:
dd:9b:f1:f1:ec:e5:6d:07:1a:23:08:44:1a:26:27:76:88:7c:
5a:d1:74:82:72:95:fe:6c:c0:ca:d9:9e:cb:e1:fd:85:3c:7b:
b8:9e:1e:81:c3:80:87:72:77:c5:26:5b:9c:e6:d0:97:65:f4:
de:08:29:c0:5e:9a:32:67:a3:64:52:d5:22:d6:ad:19:ee:9e:
3c:f1:f7:2a:0c:a4:4b:66:22:f8:77:4d:73:98:99:5b:dc:e9:
e6:32:c8:da:50:19:54:a2:64:a7:9e:09:70:58:54:a5:b6:02:
91:d5:59:21:d1:da:28:6d:c1:74:0c:bf:1c:de:f1:90:6f:96:
47:dd:f3:ba:70:45:1c:9b:c2:cb:c7:30:b1:26:56:b6:fc:24:
52:c2:0b:a2:30:23:d3:4b:2d:de:f2:f4:72:64:a9:d3:cd:9f:
c0:d3:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:08:06 2026 by rpki-client