
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: B+F35z073p7T5UIiDHLs8sJcOdXd/3UDp8STuJ7whqQ=
Subject key identifier: 8E:CE:72:4E:DC:19:AD:3D:FF:43:BD:6B:23:F3:67:07:5A:E4:B0:17
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019E1DC759E2F08CAE76752483E9366CBAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0857
Signing time: Tue 12 May 2026 20:01:04 +0000
Manifest this update: Tue 12 May 2026 20:01:04 +0000
Manifest next update: Wed 13 May 2026 20:01:04 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: Xw1tAEJ/+IKXrA7y5HHkeCe1We35lIMs8mJ/lRToR4o=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:59:e2:f0:8c:ae:76:75:24:83:e9:36:6c:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: May 12 20:01:04 2026 GMT
Not After : May 13 20:01:04 2026 GMT
Subject: CN=8ece724edc19ad3dff43bd6b23f367075ae4b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:31:6d:4f:06:69:b6:fc:dd:80:09:6e:69:
4b:1e:a6:a5:11:f6:c4:c8:b2:fc:54:5a:a2:30:40:
4e:17:43:2a:77:31:71:a4:21:99:bd:5d:40:53:74:
bc:81:6b:9a:73:bf:38:fa:db:b2:9e:3d:7a:47:78:
d6:80:c0:bf:7c:ed:cd:51:53:a5:b4:1e:8a:28:15:
dd:82:fa:34:8a:cb:c5:e3:84:ea:4b:04:ff:7f:f3:
77:f9:be:48:6c:b2:85:bb:d0:a2:11:a6:13:7c:25:
cc:35:f5:b3:6e:29:4d:ec:7d:ad:c6:20:d9:e5:e8:
60:e3:a2:97:c3:af:da:87:40:27:56:b7:a4:9d:25:
ff:f4:c9:6a:0b:07:8b:30:e0:3c:70:70:5b:d6:02:
31:05:2a:ab:52:a8:93:e7:b0:22:0f:ff:2f:4f:ea:
81:ee:30:e8:84:05:94:b6:52:c5:b5:dc:9b:f4:10:
72:d2:78:62:f3:06:0c:60:e0:dc:e7:55:4e:bc:7b:
12:f7:06:04:bb:6d:bb:a1:b3:82:e8:ba:e8:b3:91:
e7:66:06:7e:43:5d:b4:e4:ff:42:90:ef:cf:18:80:
c6:67:ac:64:bf:b8:04:ce:39:6a:a6:2d:7a:01:da:
1d:97:0d:a9:b3:bf:9d:f1:c9:7a:9e:0c:26:a4:fe:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:72:4E:DC:19:AD:3D:FF:43:BD:6B:23:F3:67:07:5A:E4:B0:17
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:00:3b:da:3b:ac:67:2d:38:2a:03:73:b7:1f:63:d1:01:
55:52:f4:68:5b:04:7e:e1:f9:e2:26:b0:95:5c:04:58:42:d2:
b1:65:57:88:d4:12:a7:64:c8:04:90:51:da:92:51:dc:d2:44:
7d:87:90:fd:20:35:04:9c:1c:9e:aa:4c:10:a7:5f:72:93:99:
c1:91:b9:ff:e5:b9:53:e3:59:68:2e:ae:00:b8:de:b6:9f:53:
9e:aa:6c:e2:94:25:1c:41:3c:87:f5:04:2a:2f:5f:5a:8a:49:
c0:8b:e4:10:54:dd:5c:92:bf:d5:27:54:9b:14:34:d8:8c:be:
2d:bd:35:17:7d:43:a6:6f:3d:c8:3c:56:f9:7e:2b:40:80:72:
49:fc:c8:04:34:47:2d:12:b0:21:48:c8:0e:63:a9:be:38:98:
1b:d4:9b:52:7e:b7:44:ff:f5:76:a8:48:fd:c7:1e:c3:49:68:
74:2f:9e:b2:3a:3a:37:d3:ae:71:3e:12:99:01:28:da:68:f3:
4a:42:e9:a6:14:e4:25:83:af:34:a3:fe:68:72:b8:36:5d:cf:
bf:d0:52:a5:e3:13:c1:5c:40:67:70:90:c1:58:a4:f7:06:96:
5f:d4:49:ec:4f:cb:4c:5f:9b:65:10:fc:0c:f9:8e:b9:2b:b9:
c3:73:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:15 2026 by rpki-client