Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: w79T/Z2m//Kg+wbMsokmOwOwHtFsNedRSaNTU1scMIk=
Subject key identifier: 3D:9C:11:8A:73:22:C4:9E:7E:0C:AC:A9:BD:5A:3F:5B:22:AC:07:3C
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01A0CCD9FC522A02A4854708184E88865CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 06:00:33 +0000
Manifest this update: Wed 23 Sep 2026 06:00:33 +0000
Manifest next update: Thu 24 Sep 2026 06:00:33 +0000
Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: It/Cv8A+QQSFyIm5bqMMMvqBP6SdrUOBcTschtVXAD8=)
3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:fc:52:2a:02:a4:85:47:08:18:4e:88:86:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Sep 23 06:00:33 2026 GMT
Not After : Sep 24 06:00:33 2026 GMT
Subject: CN=3d9c118a7322c49e7e0caca9bd5a3f5b22ac073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:36:a4:a8:13:ca:3b:86:7d:79:0e:42:67:
36:a6:e3:7f:f4:93:c3:87:a8:7b:f0:3f:83:ca:81:
fb:ca:36:b4:ad:1e:1d:19:e5:f6:a6:6d:01:a3:c3:
a8:30:d5:50:58:04:a7:b0:2a:e7:c3:91:93:1f:3f:
bd:17:76:ee:18:f5:a9:f6:12:b3:38:c2:96:12:76:
ce:6b:5c:4e:3f:17:c2:a4:82:19:ec:89:c1:e2:40:
df:c4:c9:5e:af:76:4d:b7:74:b2:03:b3:e3:0b:e4:
a0:34:45:34:e6:47:7c:15:7f:26:f9:3c:9c:b0:de:
7e:3b:1a:a2:a4:d1:03:8f:52:b3:f5:d7:31:65:6f:
da:d8:46:bf:b5:27:bb:40:3f:c3:f3:9f:a8:b5:82:
70:1c:11:b1:06:68:71:d3:bb:4d:a7:ff:d8:f0:6d:
73:7f:4d:6a:b4:96:8c:d7:34:a9:41:fe:4d:2a:32:
cd:0f:d8:ae:db:60:7c:e1:54:40:fd:9c:f5:a2:19:
4d:54:44:63:71:a9:ba:de:ae:4a:8d:8d:18:e8:42:
f8:51:c6:3c:2b:84:90:c9:56:ed:29:14:2f:5d:45:
6d:ec:de:31:91:19:ec:90:0e:fc:ac:43:e6:ae:cc:
dc:06:50:a4:6a:a3:e4:a3:58:a1:c9:f2:11:7c:08:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:11:8A:73:22:C4:9E:7E:0C:AC:A9:BD:5A:3F:5B:22:AC:07:3C
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:f9:6d:d4:37:d8:ef:be:5a:12:7d:f8:5c:3f:b5:71:8e:
be:9a:a5:5a:2c:79:f6:0d:a6:51:84:0e:d1:2e:b9:09:12:0c:
88:30:b7:4f:bd:86:5b:b2:c1:16:c8:c8:26:e4:93:dc:4c:ec:
00:b2:40:bf:62:dc:70:d8:d8:34:b8:1c:24:ad:f3:12:6c:83:
23:9a:aa:d6:89:17:6b:3c:73:0c:45:55:d8:7f:50:0f:01:72:
0a:29:cc:37:90:2f:58:5f:0d:f8:27:2f:d5:69:39:b7:e6:0f:
13:75:cd:1a:93:d1:c4:f3:44:04:22:57:89:f4:05:7d:d5:d3:
fc:af:9b:83:ff:71:a4:75:ae:5d:38:96:48:0d:a2:d9:db:d9:
a0:4d:9f:68:d7:e3:9d:5e:87:a6:e6:d8:4f:05:dc:ee:00:53:
2c:ba:d5:f5:f0:9a:fa:14:6a:98:5c:5a:12:55:bb:cc:f3:81:
3e:ba:4e:c7:bc:eb:3c:1a:aa:61:e1:6f:6e:7b:eb:a5:3b:4f:
cf:cc:d0:cd:0e:d2:c6:41:23:c1:8c:b1:6e:d4:7a:0c:75:2d:
42:2b:48:2b:83:96:ae:4a:51:66:89:53:ba:59:fe:e6:ff:d6:
ce:49:94:38:7e:17:ba:96:fa:ae:01:86:97:c6:81:c8:03:8f:
44:30:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:49:25 2026 by rpki-client