Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: m0dk4pqdIyGFvadJWsrA2cOeMSo1ClXsAqvN40R8cog=
Subject key identifier: EC:F7:FE:D9:E7:0B:5C:51:55:EE:04:64:4B:D8:A8:F5:6A:75:98:25
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01A114BC7107699FFD7DFD841A3BD7E205BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 09E0
Signing time: Wed 07 Oct 2026 05:00:56 +0000
Manifest this update: Wed 07 Oct 2026 05:00:56 +0000
Manifest next update: Thu 08 Oct 2026 05:00:56 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: pzw9f1yM9c9IBJbN3eEsea84D3FJTZbdsFF5dl/UMc4=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:71:07:69:9f:fd:7d:fd:84:1a:3b:d7:e2:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Oct 7 05:00:56 2026 GMT
Not After : Oct 8 05:00:56 2026 GMT
Subject: CN=ecf7fed9e70b5c5155ee04644bd8a8f56a759825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:93:67:fd:67:96:07:b9:14:b9:ae:e9:5c:
db:2c:27:6b:2b:dd:a5:b7:53:da:a5:d6:74:15:03:
2f:c4:1b:32:e9:6f:70:3e:20:71:c1:56:3b:c0:05:
69:3d:38:f9:13:e2:54:38:23:a9:4b:7e:b6:93:1c:
91:34:9f:8a:f1:ab:4a:6c:dd:1f:05:6e:3a:97:90:
ad:03:ed:6e:4e:eb:02:c1:8a:75:c7:12:a8:24:e2:
50:52:60:12:fd:2a:eb:d0:1c:6b:64:75:2e:d0:86:
12:6f:f3:e8:1d:62:9b:58:5e:65:bd:f9:50:66:c4:
4e:96:01:7a:01:9e:5b:af:66:eb:10:34:38:6c:8f:
33:b2:05:f0:10:01:f2:a0:76:d7:fb:ce:ad:25:fb:
bb:09:ea:ad:b0:c6:77:1e:28:23:5e:0f:ac:2a:f7:
36:de:cd:f0:5b:29:70:4b:f1:c1:b5:36:86:7b:13:
eb:b3:61:90:23:f0:a0:71:64:e7:24:f5:b7:c6:7c:
1e:7e:33:58:be:58:f7:e7:3a:e1:1f:25:22:12:96:
bd:34:9d:a9:f9:a8:9f:f9:7d:46:ba:73:bf:a8:e7:
72:31:94:f8:cf:7a:f7:03:4e:19:3a:a4:71:55:c0:
7b:dd:bd:fa:b2:62:d0:c6:99:21:f6:f0:a0:f2:53:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:FE:D9:E7:0B:5C:51:55:EE:04:64:4B:D8:A8:F5:6A:75:98:25
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:ba:bf:95:3e:85:a7:50:36:e2:ba:65:de:90:c8:fd:eb:
06:33:a0:05:57:a6:f3:20:33:cb:84:c6:12:82:44:ac:61:9c:
5e:16:50:72:aa:81:f2:5e:bf:13:c3:29:e0:62:94:97:b3:46:
f3:98:5a:bc:e8:62:2c:c0:3f:68:81:f0:9d:1d:20:cb:68:26:
a6:9e:6c:85:43:d4:c3:3e:c8:6a:df:7a:a7:55:12:c8:71:e7:
25:e5:2e:f3:77:b9:89:fa:23:05:3f:da:a5:c9:43:6f:12:ec:
91:f1:10:d8:09:62:56:c8:65:85:4a:d7:a9:a1:da:ff:4f:20:
c2:55:e1:e9:50:b2:99:b0:12:9d:e6:06:79:18:c7:d2:54:3f:
d1:8d:bb:cb:b9:08:40:61:94:fa:6b:1a:55:17:95:22:99:f1:
18:62:29:c4:ad:c4:92:0e:67:6b:2d:2a:47:4e:d9:03:0f:d1:
bc:c8:8a:1b:05:df:39:63:1b:d3:ac:a8:cc:f7:0c:0a:c0:76:
d0:a7:4e:ab:50:1a:7a:5f:28:b6:e7:d2:13:14:8f:35:ef:2f:
68:7b:9b:35:a1:41:4c:b4:38:eb:10:c2:b3:ad:73:49:62:d6:
36:a3:d1:04:77:55:e3:8e:fb:1b:1b:d4:fe:df:92:d8:87:4c:
b4:f0:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 14:32:17 2026 by rpki-client