Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: 13QDiQsLnI+Cpie7zhAEV4/sRm7hJv4dTjwXRJ5Vj54=
Subject key identifier: 59:49:DB:6B:A8:35:69:6C:18:F7:31:9A:A2:DC:4B:1B:7D:EA:BA:40
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01A180746246AB6F763BA776CF544394F5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 03:01:13 +0000
Manifest this update: Wed 28 Oct 2026 03:01:13 +0000
Manifest next update: Thu 29 Oct 2026 03:01:13 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: vrDm+NyZLO1xKnDwsaxEPQMmGsQBclzKSOnMTM1AA+0=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:62:46:ab:6f:76:3b:a7:76:cf:54:43:94:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Oct 28 03:01:13 2026 GMT
Not After : Oct 29 03:01:13 2026 GMT
Subject: CN=5949db6ba835696c18f7319aa2dc4b1b7deaba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:29:59:d6:d8:01:0e:c3:be:f4:de:91:42:
eb:99:3f:c6:58:ec:c1:3a:24:a6:e1:24:3c:c9:8b:
d0:c3:6d:52:cc:7e:cc:8d:b0:69:b6:aa:1f:2a:68:
49:8d:d7:d9:5a:bc:9a:a6:97:c6:58:f2:4f:18:53:
2c:f9:e8:ae:57:f5:1c:81:84:56:06:12:26:9d:38:
03:6d:a2:b0:83:2c:ad:31:b4:0d:fe:99:c7:00:22:
bd:9f:24:69:b2:18:b3:39:1a:e4:b1:df:5d:a6:8d:
95:4c:10:21:53:82:09:e2:86:7f:ae:db:35:43:9e:
a8:93:e8:74:dc:e3:b3:e1:d2:de:8f:61:5f:84:cb:
81:f6:40:48:bb:d1:75:e5:a9:b9:d7:9a:7a:b5:8e:
ec:b3:56:e6:79:ae:67:3e:fb:e7:2b:8a:96:88:59:
8e:e2:29:27:f9:c5:a6:ec:f0:b6:1c:da:b7:11:da:
49:f9:cb:f2:fe:71:e4:b9:85:1a:3e:67:3b:db:16:
55:20:11:c4:1c:93:bb:93:24:ff:5e:80:ed:85:2e:
d1:8d:9a:82:78:60:d3:46:03:28:75:0a:aa:08:7a:
7b:71:6b:27:a7:a4:52:79:6e:53:f4:c9:5c:88:ba:
31:7d:d2:e8:0a:53:c9:b2:87:9a:9f:17:85:99:f8:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:DB:6B:A8:35:69:6C:18:F7:31:9A:A2:DC:4B:1B:7D:EA:BA:40
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:43:0a:ee:21:d6:9f:79:0d:5e:2a:c7:c9:6b:e9:93:39:
b2:4c:07:0c:11:11:87:76:c5:85:69:33:13:43:b2:ba:c7:44:
8d:e8:ca:da:5c:5a:81:36:da:c1:1b:e6:7f:6a:15:49:eb:5a:
8d:79:64:e4:6f:c0:d0:16:4a:0f:4b:40:07:aa:04:25:03:e5:
ef:f7:4b:04:56:29:10:c7:e2:ce:dd:46:da:b5:74:d5:6a:ed:
d8:99:00:68:0d:90:f8:43:54:93:1f:dc:8a:f0:e9:3a:29:99:
61:24:36:85:4a:97:7c:49:04:0b:66:6d:cb:bf:fb:4e:fa:09:
0a:b4:2e:38:61:45:ca:b2:8f:26:18:5c:ea:30:98:19:0a:57:
cb:f4:d7:f5:ae:f8:dc:7b:48:ae:a9:59:0e:54:76:d9:34:77:
52:bd:f0:63:a2:55:d7:af:77:49:54:10:e2:aa:3d:53:f1:27:
2d:72:8b:a7:7f:ed:fc:9a:67:2e:6e:6c:cb:4c:ba:9d:9e:e4:
f1:94:70:86:8a:d0:22:16:df:d3:b5:01:fa:c7:6a:2d:1c:3d:
f9:3e:3d:4f:4a:95:e8:d8:77:76:cc:29:d8:d0:7d:be:9c:27:
93:e7:67:75:2a:24:97:29:6c:4e:c3:3e:0f:2c:48:59:3d:ce:
6d:73:31:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdGJGq292O6d2z1RDlPXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWExZDQ1MzFiMDcxZDY1NzQ2OTljMTJlNWFmYTQxZjg5
YmQ0MDkwHhcNMjYxMDI4MDMwMTEzWhcNMjYxMDI5MDMwMTEzWjAzMTEwLwYDVQQD
Eyg1OTQ5ZGI2YmE4MzU2OTZjMThmNzMxOWFhMmRjNGIxYjdkZWFiYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoEpWdbYAQ7DvvTekULrmT/GWOzB
OiSm4SQ8yYvQw21SzH7MjbBptqofKmhJjdfZWryappfGWPJPGFMs+eiuV/UcgYRW
BhImnTgDbaKwgyytMbQN/pnHACK9nyRpshizORrksd9dpo2VTBAhU4IJ4oZ/rts1
Q56ok+h03OOz4dLej2FfhMuB9kBIu9F15am515p6tY7ss1bmea5nPvvnK4qWiFmO
4ikn+cWm7PC2HNq3EdpJ+cvy/nHkuYUaPmc72xZVIBHEHJO7kyT/XoDthS7RjZqC
eGDTRgModQqqCHp7cWsnp6RSeW5T9MlciLoxfdLoClPJsoeanxeFmfh1VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlJ22uoNWlsGPcxmqLcSxt96rpAMB8GA1UdIwQY
MBaAFAnqHUUxsHHWV0aZwS5a+kH4m9QJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYt
NGU2ZDEzMGJkYTBmLzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYtNGU2ZDEzMGJkYTBm
LzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnJDCu4h
1p95DV4qx8lr6ZM5skwHDBERh3bFhWkzE0OyusdEjejK2lxagTbawRvmf2oVSeta
jXlk5G/A0BZKD0tAB6oEJQPl7/dLBFYpEMfizt1G2rV01Wrt2JkAaA2Q+ENUkx/c
ivDpOimZYSQ2hUqXfEkEC2Zty7/7TvoJCrQuOGFFyrKPJhhc6jCYGQpXy/TX9a74
3HtIrqlZDlR22TR3Ur3wY6JV1693SVQQ4qo9U/EnLXKLp3/t/JpnLm5sy0y6nZ7k
8ZRwhorQIhbf07UB+sdqLRw9+T49T0qV6Nh3dswp2NB9vpwnk+dndSoklylsTsM+
DyxIWT3ObXMx+Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:12:58 2026 by rpki-client