Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: TL5lvkL2tniOqga6/kECzVodHC21w1anGVdQlX/27qI=
Subject key identifier: 61:4C:7E:6B:01:DB:18:E0:2C:E0:B3:71:2B:DF:7D:F0:5B:2C:A3:94
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01A1CBC52A0C10203E43AB1BF864823A851B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1AF5
Signing time: Wed 11 Nov 2026 18:00:58 +0000
Manifest this update: Wed 11 Nov 2026 18:00:58 +0000
Manifest next update: Thu 12 Nov 2026 18:00:58 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: lbXCm8ApEtTXLfj0J8CBDOPHQLPEbJvcDDewfaDxklM=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:c5:2a:0c:10:20:3e:43:ab:1b:f8:64:82:3a:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Nov 11 18:00:58 2026 GMT
Not After : Nov 12 18:00:58 2026 GMT
Subject: CN=614c7e6b01db18e02ce0b3712bdf7df05b2ca394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ea:51:aa:00:6f:7e:fc:73:9b:d8:16:f2:c4:
9f:27:ed:ec:0b:b2:12:b6:93:3e:66:0f:1d:4a:56:
70:47:1b:d1:b4:02:35:1c:1e:78:2b:39:a9:e8:06:
a7:1f:64:cc:e6:9e:41:51:4a:74:e9:ce:ae:7f:45:
df:bd:01:0e:a3:87:60:f1:99:aa:93:a2:c3:74:c5:
db:aa:96:ca:68:86:ea:4f:71:d4:fb:c8:c1:22:66:
3a:16:24:89:c7:ba:4d:35:ff:59:b7:b7:fc:68:43:
86:02:2c:6f:8f:05:ea:9c:fe:e3:8a:c6:01:5b:76:
a8:c5:72:98:d1:cf:9f:7a:07:f5:e7:fe:cb:b7:20:
19:2b:14:f3:e4:e0:89:51:8f:37:3d:34:02:5c:d1:
a6:cd:b9:43:ba:b7:7d:76:72:e1:61:ed:f8:ff:27:
47:7d:a3:8c:b7:7f:e2:37:aa:56:ff:37:70:86:5d:
52:ee:95:48:94:24:83:ef:5a:69:25:fc:ac:2f:8b:
37:3a:0f:a6:6d:1c:6b:cf:ef:60:a3:c8:44:dd:3c:
06:d8:25:e8:b9:33:28:ec:11:f2:8e:79:7b:06:4e:
3a:ba:6f:57:99:a6:e3:87:a9:53:c1:9f:d6:c9:04:
07:a4:7f:80:bc:a9:0e:f7:12:5b:21:37:b4:eb:a2:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:7E:6B:01:DB:18:E0:2C:E0:B3:71:2B:DF:7D:F0:5B:2C:A3:94
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:51:d1:80:20:8a:a4:30:c8:f8:c4:8c:bf:47:e5:4b:e3:
0c:f5:42:c7:dd:b4:fa:a4:f4:34:51:1c:f2:0d:f3:d9:60:4e:
4d:d5:4f:85:e7:13:0b:ca:f6:39:b6:01:1b:58:4a:1f:aa:df:
b4:f0:c8:a9:9c:a0:4d:a5:57:3f:fb:eb:52:a1:b3:94:b5:28:
93:da:d7:1a:f9:95:1e:18:13:21:0d:32:1e:27:c2:7a:e7:64:
91:84:e9:70:e0:1b:d9:07:8d:67:f3:f6:ef:7a:2c:bf:28:4d:
2b:b8:46:97:57:75:df:57:29:44:45:31:20:c9:9d:86:ee:50:
6b:92:91:0a:a1:61:b2:66:71:73:34:e5:c4:ff:16:c7:59:f9:
b0:cd:f6:e0:b2:33:4b:c0:cb:48:73:cb:f0:b2:34:b5:7e:99:
e6:22:35:07:73:c6:3f:80:20:5f:8a:f5:87:e5:28:d3:25:ec:
b1:9f:a6:a2:cd:aa:4e:6d:a7:76:d1:50:b4:93:55:48:0b:22:
34:d0:a1:88:34:03:fc:19:00:35:d6:42:fb:c7:74:78:f6:a2:
e4:dd:a0:9f:d5:d4:df:6d:48:b5:1d:b4:40:14:e0:60:94:ad:
a4:7f:e2:cc:c3:ae:6b:db:85:68:33:55:10:c2:da:24:36:31:
25:f5:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:37:25 2026 by rpki-client