
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: jcYnizKxQ432xoj2oKYYZzX/TG0NMWGaLAFgskYV6SM=
Subject key identifier: F8:6B:43:54:3E:78:A3:6C:49:E0:3A:6B:3A:02:92:08:46:A2:D0:DF
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019EBFFF5C7BCCFF1B8F343A4EF9A98399B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 08AB
Signing time: Sat 13 Jun 2026 08:00:43 +0000
Manifest this update: Sat 13 Jun 2026 08:00:43 +0000
Manifest next update: Sun 14 Jun 2026 08:00:43 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: kzwkIvpbJOwtzcMTqGZ7//hAXtj/9YiSAbsiw4e85hw=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:5c:7b:cc:ff:1b:8f:34:3a:4e:f9:a9:83:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jun 13 08:00:43 2026 GMT
Not After : Jun 14 08:00:43 2026 GMT
Subject: CN=f86b43543e78a36c49e03a6b3a02920846a2d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:cd:1f:68:66:31:7a:2e:8d:84:99:1b:db:
05:7e:85:9e:82:f9:09:92:62:40:be:89:6a:5d:d5:
9a:ef:7d:bd:e3:b2:65:9e:1f:31:e8:30:b5:26:f6:
0c:9a:5c:a7:f9:4f:99:de:0e:41:82:ad:28:d5:24:
80:b0:6a:86:65:0a:d8:77:de:74:70:22:95:9e:a8:
db:2b:32:ca:bd:19:ba:30:b8:9b:6f:6a:21:b1:97:
28:0e:a2:3c:1d:9a:0e:c0:23:40:fe:a6:bb:60:14:
4b:f2:98:b0:b0:80:0c:61:f7:ce:02:a6:ad:95:0a:
7b:10:0d:58:70:4b:c2:ae:4c:d3:fa:86:14:81:01:
fa:d9:c5:08:e5:57:eb:3d:24:f7:de:a2:01:24:6a:
fa:92:ac:c1:43:f3:15:92:fd:0c:80:c8:d7:d4:2e:
bc:f1:13:1d:7f:8d:dc:ef:ac:85:13:1d:0a:b7:0b:
23:3d:24:95:bf:97:7a:91:df:6c:c5:fc:49:80:14:
b8:58:24:19:81:26:a4:38:39:2c:7c:d7:c8:31:63:
48:71:61:bb:23:71:66:d8:90:ca:bd:17:4b:29:fa:
ae:ba:2c:d0:be:6a:2f:a1:22:c3:0b:f1:14:e3:79:
36:66:3f:f5:91:87:68:b1:7f:f1:27:48:86:93:fd:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:43:54:3E:78:A3:6C:49:E0:3A:6B:3A:02:92:08:46:A2:D0:DF
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:49:99:72:09:98:6b:3b:d8:88:4b:3a:07:84:a5:29:2a:
54:03:c2:c1:f4:ab:71:29:29:0c:b0:0f:fb:c3:0f:11:90:d5:
3d:51:8b:7d:25:0b:18:23:d7:91:44:8c:ef:1a:50:85:31:4a:
dd:75:c3:d2:50:38:29:4e:7c:46:fb:b8:0b:90:31:6b:5d:60:
1d:f8:26:f0:7f:af:c3:f0:99:b0:03:11:c1:61:d5:3c:82:23:
ea:3b:57:c6:d3:c3:01:97:fa:40:47:d6:a7:56:2e:8c:d4:a9:
2a:87:f7:2a:d0:84:b2:42:8f:99:0d:2f:43:04:b0:f6:8d:c8:
0f:77:13:9a:1c:48:da:aa:80:ed:d8:20:d9:51:32:a2:d0:59:
5f:c5:80:d1:7c:51:02:19:e7:a5:a2:c9:34:ab:86:5c:27:00:
9e:19:7a:ea:1a:e7:6b:0e:b3:24:94:8c:fb:b7:06:15:87:cc:
4b:1d:87:0e:19:05:6b:50:12:87:2e:58:1c:7f:ce:e2:32:b4:
99:33:79:10:a5:7e:1f:cf:4d:fb:3c:37:6c:28:77:ca:de:98:
5b:40:ee:9e:03:33:49:ee:b1:60:5e:ff:aa:b3:56:7e:3e:99:
9c:17:f5:5b:2d:1b:22:9b:52:93:a6:2a:26:25:42:2b:55:92:
81:8b:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:50 2026 by rpki-client