Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: omfXuRuRTJ/1QExaqIuNWosxISvTO6axL/ht9v4D+1Q=
Subject key identifier: 57:07:F8:0C:2A:1E:08:5F:DD:C5:B8:52:1A:EE:6E:98:53:3E:C6:5B
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019F18D6A9AFEEED1F1A0B5A41D1258C2902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 08D9
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: EcxLmI5ygTvlFmPX7DG0XNOOgAWFRP+ebBQ5VSIZFZI=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:a9:af:ee:ed:1f:1a:0b:5a:41:d1:25:8c:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=5707f80c2a1e085fddc5b8521aee6e98533ec65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:28:5f:62:91:ea:65:9e:1f:eb:c9:f5:41:
d1:66:73:54:79:d2:4b:24:86:e1:29:b7:c9:be:19:
52:58:01:dd:c4:8a:3b:0b:5f:66:53:15:4a:30:f3:
12:b0:73:1c:0d:05:21:d5:c7:12:98:ae:9e:12:bc:
bb:66:13:e5:3d:ed:56:26:7e:32:fc:ec:89:37:32:
d6:f8:02:89:f2:a4:68:01:1e:2a:62:e6:06:3a:4c:
bd:74:a3:1b:67:8b:46:0f:59:d1:de:f9:cf:2a:4c:
1b:35:67:43:d7:f1:49:99:34:f3:6d:1b:9f:ec:7f:
8a:0e:b5:5d:7a:14:46:b0:c8:87:0b:b9:a1:3a:9c:
f9:ea:a5:d7:89:c3:1c:80:2b:4f:dc:a2:fe:51:03:
a4:d2:ac:d4:5b:df:ed:48:88:6f:f2:c8:71:2c:82:
77:51:27:29:2f:20:c1:8b:f0:9b:0f:80:3b:cf:69:
e4:ee:11:09:dd:5f:61:24:a9:14:46:24:1a:32:1c:
5a:3c:8f:9e:55:14:8d:b4:ba:97:a1:5b:d6:82:4c:
d9:87:83:33:24:9e:1f:c6:5c:e9:ee:90:bb:ac:e5:
f4:ab:c9:24:e2:c2:5c:7b:69:32:21:ad:34:fa:d7:
58:09:b5:84:8a:4d:e5:a8:a3:dd:ef:22:96:74:6f:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:F8:0C:2A:1E:08:5F:DD:C5:B8:52:1A:EE:6E:98:53:3E:C6:5B
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:73:5f:3b:ac:aa:0e:6c:a4:f5:48:61:1b:a2:97:4a:af:
12:40:5a:bd:e6:0a:b7:64:d2:8d:53:73:65:87:e4:da:cf:86:
c4:69:ca:58:b1:58:0d:c0:69:64:07:e6:c2:aa:a2:4d:f4:4a:
3e:7a:06:b6:81:a4:a8:cf:b5:98:85:47:a8:fc:3c:0f:37:b7:
b3:a9:f1:1a:30:78:26:87:9e:84:29:0d:99:4e:09:a9:ad:7d:
e6:14:c4:7f:4a:34:2e:5b:cf:c2:64:63:37:10:da:a4:f2:1c:
5c:92:69:fa:86:11:f6:e1:c3:c6:b3:56:5e:4a:0d:7b:15:b2:
7a:a4:5c:67:fc:07:b0:ec:5d:98:e8:c5:57:85:62:3f:5b:c8:
93:69:e1:cd:07:32:f7:54:9c:96:b0:c4:f2:ed:93:6a:01:10:
68:13:2c:93:cf:ae:32:cf:6a:97:3c:58:26:4e:3e:f9:89:3f:
a7:db:1a:27:fa:4c:64:b9:57:02:94:a9:25:b5:20:8d:d3:bf:
a3:d4:e6:df:a7:9e:ab:c0:fc:c3:61:81:4b:11:1b:15:4a:13:
22:77:72:84:68:d6:fc:d1:be:1e:a0:15:ac:8c:77:fd:74:50:
7f:01:e2:ad:1a:45:6d:b3:4b:6d:28:53:a3:70:55:68:c5:8f:
59:86:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:37 2026 by rpki-client