Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: P24H5+hU3ll93jCa3Qw3kytZW+XQzeNjLh7Rhi3fkSQ=
Subject key identifier: 29:DA:BE:59:2D:67:F8:90:E7:EA:F6:61:99:4A:A2:E5:6D:5A:B5:8A
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019F9022C85F37FEE7BCECC32CF9F42C127E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 18:00:26 +0000
Manifest this update: Thu 23 Jul 2026 18:00:26 +0000
Manifest next update: Fri 24 Jul 2026 18:00:26 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: DMuKantYBqba1q9N7Wz7bVyj6DNshTpFvZmtD2an358=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c8:5f:37:fe:e7:bc:ec:c3:2c:f9:f4:2c:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jul 23 18:00:26 2026 GMT
Not After : Jul 24 18:00:26 2026 GMT
Subject: CN=29dabe592d67f890e7eaf661994aa2e56d5ab58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:97:33:07:fe:4f:a4:d5:69:5a:8a:84:4f:
98:ff:ee:dc:76:39:21:68:41:2e:1c:87:65:2f:d0:
e1:33:0f:af:47:d9:4d:fc:0d:f4:e3:c1:48:7e:5d:
66:8e:12:a4:c4:cf:75:42:05:f4:3d:c8:0d:1b:a2:
c5:f0:80:ba:49:9d:db:39:5c:ab:62:88:48:31:f6:
83:d2:d1:10:ab:f9:00:94:ab:15:0a:af:72:83:57:
4b:94:7e:64:8e:70:12:4d:2d:59:9c:0a:47:74:05:
ae:57:b0:7e:73:88:e6:19:55:f2:7e:83:b7:b2:a1:
bb:9e:d2:38:16:58:d3:29:eb:22:e2:40:82:36:52:
7a:19:05:b8:7b:c1:8d:83:e1:2d:53:84:cc:ea:bc:
37:ae:8c:1b:08:b9:8b:8b:9a:33:0f:2d:82:80:f8:
19:01:13:14:3f:0f:91:55:33:3a:6d:b8:95:6d:56:
2b:af:fb:33:e7:c2:ef:29:a5:19:60:88:04:7c:1a:
3c:5b:09:c3:b4:21:7f:db:e1:c2:30:fd:10:75:ec:
83:35:76:f3:27:25:00:52:55:eb:3e:07:6b:49:46:
70:2a:6b:0b:a4:c1:d4:ed:ef:d9:f8:6f:f6:4f:f7:
1c:30:f9:95:00:b8:93:22:29:ca:fe:ef:69:61:03:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:BE:59:2D:67:F8:90:E7:EA:F6:61:99:4A:A2:E5:6D:5A:B5:8A
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:db:2d:4f:37:a8:cd:ab:14:1c:28:aa:e1:fd:c2:b3:94:
41:a1:b3:fa:a9:73:d0:ed:10:3d:b5:4d:48:c6:4f:08:88:d4:
9b:14:04:5e:ec:b6:5f:51:6f:94:a4:96:de:69:b6:13:a4:60:
7b:8d:c5:c2:d9:8b:d9:57:34:26:f7:7d:96:45:07:5a:c2:78:
b4:1b:68:c8:6c:13:31:47:5d:dc:d5:6d:8a:14:35:e5:c2:e9:
27:73:ac:91:72:39:29:a5:0c:79:65:47:f6:e3:15:0e:8a:48:
dc:b4:20:f7:f2:4d:d9:48:48:de:2b:2a:e8:6b:99:28:8a:7d:
24:6c:cc:84:52:c7:35:83:3f:fe:6b:a3:79:7d:76:b5:e6:e4:
15:78:04:5d:49:86:92:b3:56:21:c2:12:33:dd:bc:c7:04:54:
6e:c3:df:54:f4:8d:e7:f1:90:08:79:21:20:fc:8d:10:c3:18:
2a:fd:f6:b5:02:41:4f:e1:e8:fe:e2:e1:38:3c:12:2d:3b:ff:
12:ac:60:2c:0d:e6:de:ae:b8:04:35:66:71:cd:0a:ea:72:05:
f9:c5:81:79:fb:35:c4:5d:db:69:48:de:eb:e6:a8:ed:65:25:
bc:b0:d2:dc:77:9e:1e:87:9e:af:f0:72:04:90:fd:6c:7b:27:
94:64:80:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIshfN/7nvOzDLPn0LBJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWExZDQ1MzFiMDcxZDY1NzQ2OTljMTJlNWFmYTQxZjg5
YmQ0MDkwHhcNMjYwNzIzMTgwMDI2WhcNMjYwNzI0MTgwMDI2WjAzMTEwLwYDVQQD
EygyOWRhYmU1OTJkNjdmODkwZTdlYWY2NjE5OTRhYTJlNTZkNWFiNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7eXMwf+T6TVaVqKhE+Y/+7cdjkh
aEEuHIdlL9DhMw+vR9lN/A3048FIfl1mjhKkxM91QgX0PcgNG6LF8IC6SZ3bOVyr
YohIMfaD0tEQq/kAlKsVCq9yg1dLlH5kjnASTS1ZnApHdAWuV7B+c4jmGVXyfoO3
sqG7ntI4FljTKesi4kCCNlJ6GQW4e8GNg+EtU4TM6rw3rowbCLmLi5ozDy2CgPgZ
ARMUPw+RVTM6bbiVbVYrr/sz58LvKaUZYIgEfBo8WwnDtCF/2+HCMP0QdeyDNXbz
JyUAUlXrPgdrSUZwKmsLpMHU7e/Z+G/2T/ccMPmVALiTIinK/u9pYQPpTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnavlktZ/iQ5+r2YZlKouVtWrWKMB8GA1UdIwQY
MBaAFAnqHUUxsHHWV0aZwS5a+kH4m9QJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYt
NGU2ZDEzMGJkYTBmLzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYtNGU2ZDEzMGJkYTBm
LzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW3bLU83
qM2rFBwoquH9wrOUQaGz+qlz0O0QPbVNSMZPCIjUmxQEXuy2X1FvlKSW3mm2E6Rg
e43FwtmL2Vc0Jvd9lkUHWsJ4tBtoyGwTMUdd3NVtihQ15cLpJ3OskXI5KaUMeWVH
9uMVDopI3LQg9/JN2UhI3isq6GuZKIp9JGzMhFLHNYM//mujeX12tebkFXgEXUmG
krNWIcISM928xwRUbsPfVPSN5/GQCHkhIPyNEMMYKv32tQJBT+Ho/uLhODwSLTv/
EqxgLA3m3q64BDVmcc0K6nIF+cWBefs1xF3baUje6+ao7WUlvLDS3HeeHoeer/By
BJD9bHsnlGSAAA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:18 2026 by rpki-client