Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: 9cyO+EsHksPgcdfpTRDheJDbEfqJbhF1rnlWx5+vyqo=
Subject key identifier: 4F:80:61:35:DF:BD:FA:74:E9:85:FD:DE:96:DF:73:CC:A3:1A:DF:EC
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019DCC3D7CE6A37C720A7C85CF5CFBC1E22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 00:01:14 +0000
Manifest this update: Mon 27 Apr 2026 00:01:14 +0000
Manifest next update: Tue 28 Apr 2026 00:01:14 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: trpJVlZh8uEwXJ4r08tm1yVIBAiq9qr7t3HVcRSz3gU=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:7c:e6:a3:7c:72:0a:7c:85:cf:5c:fb:c1:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Apr 27 00:01:14 2026 GMT
Not After : Apr 28 00:01:14 2026 GMT
Subject: CN=4f806135dfbdfa74e985fdde96df73cca31adfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:44:fc:8a:98:45:9e:27:a4:da:bd:8b:79:
6e:2b:e5:64:f0:ca:85:d1:a5:a8:d3:c2:94:7b:43:
f5:a1:58:48:5d:dd:99:3f:80:75:04:fd:c3:32:3b:
86:ef:3c:f6:12:ff:47:66:20:54:67:6e:63:1f:0d:
06:3a:61:3e:df:14:e4:4b:ad:46:2a:4c:08:b0:d4:
fd:d7:10:ed:12:10:0e:73:9a:73:73:15:2a:c1:e2:
15:37:61:57:d6:79:29:2f:f9:ec:d0:dc:c8:98:10:
10:c9:87:a9:1d:e4:67:63:3f:b1:78:40:b0:8e:82:
1e:07:3d:37:96:c7:2f:5d:03:94:3f:a0:d3:77:a9:
d7:0c:3e:ff:90:9d:1b:90:24:9f:11:d3:6c:c7:3d:
09:6b:d7:b1:2c:e7:ff:d7:9e:81:8f:a8:ee:39:71:
36:45:b1:21:68:98:12:2d:e1:f4:bb:be:80:85:24:
b9:a1:35:ea:01:e1:94:49:70:ac:57:a2:e5:54:29:
52:bc:31:db:77:2d:d8:54:f2:87:d9:f9:1b:e4:00:
ee:79:23:ef:4d:c8:25:ae:fe:28:fa:57:f3:f6:c4:
42:e2:e5:44:d1:84:93:7e:98:46:60:a7:f1:32:41:
37:73:b1:6b:e8:19:7d:ab:4b:cd:01:e1:9e:9e:4c:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:61:35:DF:BD:FA:74:E9:85:FD:DE:96:DF:73:CC:A3:1A:DF:EC
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:98:28:80:21:44:42:10:51:a8:8c:3b:1f:23:8a:45:d3:
3d:65:4b:d4:54:e8:fc:ad:e9:fc:4d:61:b4:d2:6b:a9:62:62:
6f:48:a4:71:86:b3:0a:6a:b3:85:16:a8:b7:75:47:e3:89:00:
8e:d1:9a:a1:be:46:7a:2b:a1:44:4c:12:7b:b8:22:fe:89:c0:
f7:3d:48:43:fe:a4:60:db:af:02:eb:5b:f3:8d:93:ce:26:5c:
1e:7a:e0:2a:51:7a:a8:04:b5:02:3d:4d:75:26:26:5c:74:2f:
e8:9f:61:37:de:d0:3e:e8:1a:67:77:e3:89:b0:13:7c:64:e8:
da:32:55:20:f0:18:e3:fb:86:3a:fe:a0:e1:25:8c:cf:fc:b0:
73:24:e9:d8:8d:23:47:18:6b:22:ed:24:9c:0d:79:14:20:a0:
4e:dd:b2:57:7c:a3:9d:e5:a5:20:b3:a5:d4:51:63:ba:20:f1:
4e:05:a8:6b:f1:65:06:97:c7:78:15:43:e8:95:d0:b0:ed:6d:
28:83:1c:af:37:22:92:b4:6b:58:2f:ea:37:4b:49:62:67:d4:
c7:c8:6f:a0:a1:39:0f:68:04:f6:1d:6c:09:32:23:1b:91:9e:
be:88:de:ef:6f:23:05:b2:3e:1f:79:d2:b1:f9:e3:7b:f8:29:
77:c6:cb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:39:34 2026 by rpki-client