Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: 3sD7K0fYic8F1dicaF0nfhj/35gYPHax9mL/ocP9NEA=
Subject key identifier: 25:F5:A6:D4:7F:FC:9D:8A:73:1C:83:D2:54:F7:96:62:5A:C5:99:77
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019D2A046F880334B3F45B337CE0D2D78653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 12:00:26 +0000
Manifest this update: Thu 26 Mar 2026 12:00:26 +0000
Manifest next update: Fri 27 Mar 2026 12:00:26 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: aGX7Y2xh5I2rkLIn0uGp/VnlwuYN3o4dwQNyqdfDzPE=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:6f:88:03:34:b3:f4:5b:33:7c:e0:d2:d7:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Mar 26 12:00:26 2026 GMT
Not After : Mar 27 12:00:26 2026 GMT
Subject: CN=25f5a6d47ffc9d8a731c83d254f796625ac59977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:78:06:72:1c:d0:c4:48:d0:7d:86:ac:46:
5d:28:b1:f3:0d:33:5d:02:42:f1:5c:21:9c:76:e8:
42:52:59:d8:19:c0:bb:c8:6a:93:04:31:83:3a:19:
52:11:e7:01:9d:b3:2e:f1:0d:c8:eb:58:38:e5:bf:
a7:93:61:dd:7d:61:65:b0:d6:4e:7a:a1:48:c9:c5:
5b:1b:b3:0c:5f:28:e9:d1:a5:90:ea:ed:19:0a:49:
24:ad:f4:89:61:16:24:71:c7:f3:25:26:64:5a:ba:
01:f8:21:1c:c3:79:12:c3:96:47:03:f8:c1:fb:b4:
9d:91:8e:59:09:91:9d:78:ea:bc:32:68:ea:14:ef:
eb:87:e3:e3:cd:bc:23:63:1b:89:17:01:cc:3a:77:
7e:af:92:53:1b:f6:67:9c:ec:7a:60:13:8d:2f:29:
70:62:0d:ea:e3:2f:d2:a8:ed:1c:88:66:76:12:ad:
3e:bc:e2:95:58:53:3c:fa:f4:3b:02:69:d3:e2:e0:
fe:2c:bf:36:a6:f1:4f:d2:78:ef:ed:a0:56:7c:91:
5c:c5:17:d4:18:c8:5d:c6:5b:94:fa:03:0e:7d:07:
69:aa:a1:e7:15:e0:b3:09:43:07:f3:34:14:96:9b:
ca:0e:8a:31:5d:cb:5a:60:c2:8a:4e:66:03:db:55:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:A6:D4:7F:FC:9D:8A:73:1C:83:D2:54:F7:96:62:5A:C5:99:77
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:82:e4:fd:d6:d0:03:28:14:26:38:00:72:86:1d:37:58:
c9:2e:95:12:b5:ef:a3:4f:24:59:41:f6:cb:03:26:a8:7d:6e:
11:be:f4:d8:dd:1a:cc:1b:63:83:55:7c:d3:94:39:ff:a2:96:
78:3a:f6:ab:a9:55:36:ec:31:62:ab:b2:4a:46:a1:ca:3a:35:
93:9f:fe:7f:5b:9b:af:4b:5c:21:c7:be:90:29:f9:de:89:22:
f5:b1:40:5d:62:09:69:50:8b:7e:df:03:a2:f3:e1:30:22:22:
82:95:1a:ba:cd:70:e4:d2:63:d3:36:c3:c5:31:3a:e3:1d:a5:
b0:12:c0:06:3a:c4:ed:a2:6f:71:1a:d8:f7:15:03:43:86:a0:
f5:4b:0f:65:7c:7b:41:51:5a:82:ab:37:ba:48:b1:66:8c:c5:
38:eb:76:76:73:98:e3:a1:e5:95:3f:63:d4:95:0d:09:25:af:
c5:d3:26:f8:0e:76:6c:e4:9b:fd:2c:c7:63:24:2f:d1:21:25:
aa:b9:f8:cf:20:93:3f:67:88:8d:f3:2e:b7:65:8c:86:7e:d3:
2c:2c:0e:81:d2:13:2b:aa:50:11:2d:18:3f:19:af:4a:56:52:
59:0d:2b:6c:54:ea:31:da:88:e7:c2:cc:47:81:4e:49:dc:aa:
36:f6:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:13 2026 by rpki-client