Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: i3FWQiq+fy5ZPmD4g2bhx4mJSS9sM4O89NutqNH2XFs=
Subject key identifier: 3C:32:AE:7C:39:26:D8:12:24:CC:46:2B:34:D1:35:6A:AA:99:D0:30
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019FA9ABA1C452B68FC9A514168BEDDF1ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0924
Signing time: Tue 28 Jul 2026 17:00:24 +0000
Manifest this update: Tue 28 Jul 2026 17:00:24 +0000
Manifest next update: Wed 29 Jul 2026 17:00:24 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: ia2PoekgXdOawtn4SCvMtKLbG7dJ+UDeZsska04jRQ0=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a1:c4:52:b6:8f:c9:a5:14:16:8b:ed:df:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jul 28 17:00:24 2026 GMT
Not After : Jul 29 17:00:24 2026 GMT
Subject: CN=3c32ae7c3926d81224cc462b34d1356aaa99d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:46:43:6e:ec:8b:8f:63:9d:c7:90:75:81:
d4:d6:14:90:18:0c:f0:60:3d:da:b9:f2:3f:be:52:
35:72:85:3e:65:69:7d:63:40:51:7a:33:7c:f8:85:
f8:a2:68:fb:f6:ce:60:86:c8:e5:c4:75:2a:25:82:
83:8f:87:b8:86:a9:9d:bf:c2:96:c4:b5:de:4a:4a:
a4:c8:01:d8:d3:e7:12:54:e4:28:28:e0:9f:10:88:
45:af:a3:63:ed:a1:37:e4:dc:6f:c1:ab:e8:6d:bc:
d8:88:63:92:1f:51:05:38:7f:28:6d:26:2e:d1:6f:
d2:d1:d7:7b:d2:ee:bf:a6:d0:de:9f:da:a8:9b:29:
70:0e:81:16:c1:d2:c9:3c:67:d7:db:90:67:ff:0b:
ce:b9:b6:4b:aa:2b:d5:c6:45:bc:93:cb:26:9f:ae:
64:4d:7d:4c:16:ab:a4:55:15:2d:88:5f:57:f6:3e:
5e:03:07:43:18:0b:0d:5f:a1:a6:e4:51:69:c7:46:
fa:bc:ce:f0:b4:45:a6:95:74:17:a5:55:1b:f3:c4:
d3:99:49:aa:c6:84:d9:6d:dd:16:d0:61:91:d3:13:
f8:34:e1:61:dc:7a:69:f7:28:6d:78:eb:41:80:24:
d0:62:2d:9f:80:7c:38:53:bc:c3:22:82:0f:7a:e8:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:AE:7C:39:26:D8:12:24:CC:46:2B:34:D1:35:6A:AA:99:D0:30
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:35:f4:0a:cb:5d:bd:32:5d:59:bf:ed:3d:fa:a4:12:fa:da:
a4:92:02:e6:20:af:4c:fa:bb:55:0e:82:2b:7a:72:ab:e7:e2:
a6:75:ae:0d:cc:00:3c:cc:2f:9f:b0:e0:49:e6:cc:bd:c5:92:
07:df:e7:01:75:a1:e7:0e:e8:b9:bf:c7:4a:c7:c9:75:49:08:
2a:af:5c:1f:cc:45:54:f9:d7:40:58:bf:23:98:5e:03:4a:8c:
c9:f0:27:1d:78:fc:c5:59:c5:c3:91:3a:9d:a9:3f:f7:40:b9:
bc:f5:53:c7:88:68:e5:23:d5:9a:5e:ac:e3:e9:15:13:7f:b5:
17:fc:ca:8a:39:07:f9:b0:86:ce:1c:1a:d7:56:0d:7b:7d:45:
43:16:8a:ca:9e:64:cd:d7:d5:15:6a:b0:09:d1:85:27:4d:8b:
6d:d6:ec:b4:65:3d:01:8b:3e:08:3b:a2:b0:44:ef:54:17:49:
3a:0f:d8:bb:bc:17:d6:62:31:ba:77:7c:c5:20:78:7d:ab:00:
b6:d3:95:18:5f:c3:0d:8a:a6:6b:a4:fa:c6:f3:8a:ad:d9:a7:
fe:20:05:ed:90:3f:70:80:4d:87:55:16:0a:58:8e:7d:2e:76:
96:0e:10:1e:e4:d6:c5:45:fb:58:9c:21:42:ac:c1:44:bd:24:
17:03:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:59 2026 by rpki-client