Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: ySofRDOs8So7c0X4YbIF1pZfpQeRmXPJq6v2qMQN/fc=
Subject key identifier: D8:63:37:EA:B4:F7:0D:C6:5C:27:6B:56:38:28:D2:2B:D6:DB:39:9A
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01A0C77C9EC3CA605D28BA0067D147DE337E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 09B8
Signing time: Tue 22 Sep 2026 05:00:28 +0000
Manifest this update: Tue 22 Sep 2026 05:00:28 +0000
Manifest next update: Wed 23 Sep 2026 05:00:28 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: iv/u/vM2Wur/QU6HUE3lJIfVCbEgbr2bJEoQSDEnmsg=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:9e:c3:ca:60:5d:28:ba:00:67:d1:47:de:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Sep 22 05:00:28 2026 GMT
Not After : Sep 23 05:00:28 2026 GMT
Subject: CN=d86337eab4f70dc65c276b563828d22bd6db399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:00:20:5e:7f:c3:5c:6c:a1:83:f1:74:65:
59:a9:71:be:a0:c3:a0:14:5e:fe:27:e0:a3:29:d6:
ef:c3:22:aa:ce:e5:b2:6b:3d:34:5e:0b:1e:ac:ac:
8b:e0:f8:f9:45:3f:d0:b7:bc:99:33:ee:d5:77:0b:
28:db:95:41:f3:4f:49:88:4c:6e:13:ea:4d:3e:f9:
39:8c:d3:af:44:36:a9:d7:17:28:a0:6a:3b:7d:f8:
93:eb:35:2f:dc:a4:fc:93:3e:7c:6d:15:d8:8a:f0:
c3:06:83:f6:af:15:04:a5:81:66:bb:ec:e4:05:34:
0d:e7:8f:f7:5e:30:b2:e8:ad:01:81:98:b2:d9:92:
5d:f0:c0:9a:fe:c4:9d:4b:b5:29:23:e6:83:bc:42:
bd:28:0f:1f:97:1c:79:43:f5:a9:77:ee:26:99:73:
dd:c7:77:d7:a9:89:a1:5c:7d:bb:90:28:03:7e:31:
e2:2e:b3:32:e0:3b:22:a5:82:a3:f9:99:a1:83:21:
e3:09:36:a8:e1:7f:06:6c:18:81:0c:42:15:5b:26:
52:68:e5:8b:69:76:93:68:de:51:f1:5d:f7:5d:c4:
c3:80:3f:fa:b0:c8:6b:b0:c9:ca:f6:c6:26:15:e1:
68:60:84:c4:04:2c:cb:3d:c4:53:60:fd:88:64:f3:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:37:EA:B4:F7:0D:C6:5C:27:6B:56:38:28:D2:2B:D6:DB:39:9A
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:57:a7:60:c6:52:93:e5:50:e0:48:15:fd:7f:b9:3a:90:47:
8c:b9:22:d3:86:8f:5f:bd:42:10:1f:9a:9a:8e:ad:80:40:82:
b7:3e:64:81:a6:98:67:57:c2:09:da:30:a6:d4:90:48:f9:9e:
0d:96:56:8f:41:be:02:9e:27:cc:ad:fb:58:db:8a:3a:1c:64:
97:3b:17:0b:48:e6:77:54:17:67:50:d1:02:d7:a3:6b:2d:33:
2c:94:72:25:4f:78:3d:6a:b8:8e:1c:c0:98:6c:8c:68:75:6c:
42:0c:8a:7f:ac:bc:cf:d6:a6:c3:23:b3:c2:ea:25:45:e6:74:
2d:6c:d9:d1:0c:f0:4c:34:59:ae:6d:e4:46:67:10:c1:00:a5:
64:9a:f0:c7:b2:c8:e6:3d:eb:28:c1:eb:6d:1e:86:71:c3:a5:
48:c0:30:fd:6d:3a:de:d1:4f:22:e5:ef:ee:65:4e:6b:ba:1d:
e7:d1:36:5a:f5:d0:f2:86:bd:eb:cb:f8:85:5a:c5:6b:fe:a8:
59:28:1e:0a:e8:e8:e7:3f:17:9b:bb:b2:f4:8e:e5:2d:48:59:
51:8b:fd:d7:be:51:53:35:08:84:e5:3e:21:5e:0f:f5:9d:db:
78:38:96:9a:34:1c:05:c1:c8:65:7a:0f:20:bc:ee:c6:f5:62:
f4:72:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:29:18 2026 by rpki-client