Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: c1UxYudBt3cyMbkkagNvBOz6Xks4E6kOb65SlzFQFzY=
Subject key identifier: 1F:D5:6E:48:F7:31:38:F5:31:D9:32:13:E8:42:65:49:86:9B:82:70
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019CAAFD87C3854FB563425CB900C5BB165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0797
Signing time: Sun 01 Mar 2026 20:01:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 20:01:07 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: ioI/ZGWaFvBYuW0bGsSSJ69rc0L7jt6HCrHQJhtcVKM=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:87:c3:85:4f:b5:63:42:5c:b9:00:c5:bb:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 20:01:07 2026 GMT
Subject: CN=1fd56e48f73138f531d93213e8426549869b8270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:38:fc:2a:89:43:52:14:b5:16:e4:22:ba:
de:20:7e:47:a5:9b:67:68:3e:b0:6a:f5:47:f3:ab:
24:e1:37:83:6c:00:d2:70:8b:01:0b:eb:c6:e9:3f:
42:bc:e6:83:e1:46:61:13:32:19:fe:57:40:88:c4:
7d:f5:0f:4d:1a:0d:ec:47:de:c2:15:fb:74:5f:7b:
a5:70:cc:e3:b7:6e:3f:94:04:55:48:85:e5:71:14:
95:ba:05:e9:36:7e:d3:1f:41:dd:b1:86:8a:7e:15:
cd:84:16:50:df:6c:1e:52:fa:74:94:81:cd:f3:35:
8b:5b:13:e6:21:6b:0c:bf:ab:11:12:82:8c:19:7f:
12:dd:db:e0:01:3e:8b:51:a9:06:27:28:a0:ac:9a:
01:31:67:8b:90:99:75:d3:ae:bb:f6:9f:b8:0b:32:
27:73:2f:22:be:66:5c:07:05:15:35:59:00:9d:84:
47:46:a6:71:90:68:22:92:60:21:8c:64:e4:11:e1:
7a:09:ce:56:34:fc:fa:f3:4e:5a:4e:fe:e5:e4:8d:
c0:ca:b6:2e:c4:5f:18:46:0e:1e:ba:0c:02:df:b2:
b3:35:40:03:ca:93:3b:9a:a7:db:36:b6:31:85:f0:
85:4b:eb:4c:40:8b:10:a1:68:33:eb:de:c7:07:40:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:6E:48:F7:31:38:F5:31:D9:32:13:E8:42:65:49:86:9B:82:70
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3b:62:be:96:00:bb:3d:bc:d9:17:dc:38:15:45:89:4b:f1:
f1:d2:68:b0:f1:a0:a7:dd:2e:3c:4e:94:f2:df:4e:a8:9e:fd:
a1:90:b6:21:7e:65:0c:3f:ec:28:6d:ff:2d:04:b3:06:4e:0f:
93:14:ee:d2:3a:08:e3:40:94:e9:ac:65:cb:99:b3:5b:5b:09:
6f:fb:26:a6:b2:a4:39:2f:b1:4e:b0:d0:79:72:69:07:f6:02:
b5:83:ff:a4:ac:cc:d6:ee:a1:12:52:a2:7e:c9:14:19:fa:cf:
e2:e1:56:29:d4:ee:d6:6e:3d:e9:e7:16:29:95:3b:c4:48:e4:
06:3d:e6:44:0f:40:e5:b8:74:7d:2e:bf:e6:6f:24:3a:5c:87:
e9:ff:a2:7a:37:ff:cc:f6:88:ff:ba:1d:83:00:9b:20:72:b0:
67:da:5d:ae:68:39:97:07:04:91:10:07:c9:00:ca:41:15:56:
e3:85:85:99:94:f5:5d:7c:34:d0:96:26:32:56:5b:f8:58:c9:
97:27:c2:e2:4c:9d:a0:b1:c6:20:a8:d7:84:37:fa:63:00:8c:
93:13:15:e4:39:63:b6:1b:54:74:69:59:08:f8:2f:53:7d:91:
4e:b2:c1:66:a6:5c:2a:94:10:22:b3:30:70:b6:0b:a1:31:37:
56:b4:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:48 2026 by rpki-client