
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: l+NvWWd7tQ0A2YPEpSGvhIBCk8XqidYbKTFprem0WoI=
Subject key identifier: F6:CB:CC:5D:9E:51:D9:1E:A0:59:DC:E1:1D:E6:6D:54:7D:3D:9B:5E
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019EB7D7F4421907CD430778ACBA4C114A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 195D
Signing time: Thu 11 Jun 2026 18:00:43 +0000
Manifest this update: Thu 11 Jun 2026 18:00:43 +0000
Manifest next update: Fri 12 Jun 2026 18:00:43 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: QOH6zX+0/dc4GZFI9aEMrakn1WiJFYLSVD15uSAAkRI=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:f4:42:19:07:cd:43:07:78:ac:ba:4c:11:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jun 11 18:00:43 2026 GMT
Not After : Jun 12 18:00:43 2026 GMT
Subject: CN=f6cbcc5d9e51d91ea059dce11de66d547d3d9b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:63:0f:21:63:ec:e1:86:e8:f4:5b:af:56:
3f:97:17:d8:75:ec:42:0c:e6:8e:8e:7d:a8:39:03:
18:45:ad:82:b7:95:16:f8:e4:1c:c7:79:16:ea:d6:
a3:5e:c8:ee:87:47:f8:05:ff:f5:b6:77:27:82:fc:
80:87:46:c0:d9:bd:cd:cc:0b:78:d1:3e:83:bc:c1:
97:88:8f:b4:7f:d5:17:42:0b:60:88:17:48:42:e3:
0f:7a:87:03:7a:5d:57:56:00:5b:f6:0c:73:7f:37:
80:f3:af:ba:54:89:04:0d:41:1c:fe:18:12:6f:4d:
25:06:2f:82:de:3d:35:2a:5d:11:f6:ac:64:e7:35:
8f:3f:04:c6:cb:83:ec:f1:2c:ae:de:cd:1e:cf:74:
22:1b:e0:6f:02:c3:9b:5d:81:18:24:7c:97:a7:10:
e5:c6:a3:07:dc:1a:f1:db:68:9c:7b:d3:7d:ec:b1:
43:7e:e9:9f:c3:eb:2c:6f:60:7e:9c:15:e1:af:d2:
1a:a5:2e:2d:2d:0e:9b:85:9b:08:10:d5:4c:83:3f:
cd:7f:aa:01:85:4c:79:bb:53:2d:5e:e8:3e:6c:95:
dd:e0:31:84:20:b8:e5:2f:e4:6e:9e:35:88:2f:dc:
11:3a:1d:ae:c8:ef:15:2e:c3:98:b7:56:5b:5c:97:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:CC:5D:9E:51:D9:1E:A0:59:DC:E1:1D:E6:6D:54:7D:3D:9B:5E
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8e:c7:fc:06:17:b8:ed:9c:6c:7e:fd:e1:d4:83:45:98:c2:
33:91:70:db:f0:40:9a:6d:7c:99:b9:26:3d:8d:cc:90:cf:6e:
0e:3c:bb:dd:90:c6:af:5a:9b:a7:e4:12:fc:8a:bb:85:f3:63:
31:c2:d6:fd:33:c1:28:e7:84:0a:6b:24:dc:8c:c6:75:b3:f8:
35:a6:fc:71:9e:bc:ac:97:fb:f9:04:d6:c4:1d:59:81:2b:f0:
e9:12:f2:f4:37:09:6f:59:04:c5:2b:58:7d:ab:40:77:df:f3:
22:b9:91:04:8d:0d:01:bf:af:95:7c:1d:97:de:b1:fc:de:df:
20:02:1b:a7:68:ed:5f:7e:c2:7a:4c:6f:3f:bd:c8:82:57:85:
cb:5e:bc:e5:44:67:6a:c5:bd:b0:ef:ac:01:23:f5:b5:50:73:
0d:6a:62:f3:f6:ea:78:cc:99:71:b6:68:0d:5e:68:9b:d3:6a:
90:74:4f:1f:14:97:4e:d7:d8:49:ba:dc:e6:87:0d:cc:da:d6:
4a:99:80:0f:1a:a1:4d:7b:8a:87:fd:65:f4:f3:13:96:49:b2:
d8:8c:cd:b0:4b:2b:f0:99:ea:99:f3:7c:2d:69:f4:fd:cd:49:
1f:1b:34:2c:31:1a:e6:a1:20:f3:b6:fd:82:61:7c:0b:3c:95:
b1:bc:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:34:22 2026 by rpki-client