Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: x4wX2N/APmvQ1aVfxurHoQuVijdbIpBecgDEpTl9c9A=
Subject key identifier: 78:D5:C8:CF:20:DF:1F:3A:4E:78:31:AE:BB:89:AF:42:07:B0:93:84
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01A10B143027FC3A944E3FE8456E2697CBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 09DB
Signing time: Mon 05 Oct 2026 08:00:34 +0000
Manifest this update: Mon 05 Oct 2026 08:00:34 +0000
Manifest next update: Tue 06 Oct 2026 08:00:34 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: nrYc0Fx4AGkc7DAYivcYaFKnvnPI2JYKy3n3lyPPByY=)
2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:30:27:fc:3a:94:4e:3f:e8:45:6e:26:97:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Oct 5 08:00:34 2026 GMT
Not After : Oct 6 08:00:34 2026 GMT
Subject: CN=78d5c8cf20df1f3a4e7831aebb89af4207b09384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:00:72:31:62:d8:3b:9f:92:95:d9:bd:dd:
e8:bb:f8:52:64:92:d0:37:65:32:b7:68:0b:20:04:
04:72:33:16:7c:24:f7:4a:f3:d2:51:fb:28:8d:ff:
33:58:c2:43:d6:c1:c6:74:a5:31:30:e4:23:2c:c0:
0b:6f:ef:a8:f6:ea:a3:9c:fa:df:da:2c:56:15:27:
06:29:8a:7e:f8:6e:2e:69:a3:17:7a:a7:3a:98:d7:
58:8e:fe:e2:bd:73:21:4e:4d:ef:45:59:2a:a5:31:
17:7e:e3:bf:87:10:76:41:b0:82:cb:18:ad:99:c3:
d9:72:80:b2:c1:b5:40:c5:ea:93:58:f8:08:70:23:
e0:9f:cf:fe:ae:06:9b:c7:6c:87:97:50:e7:08:79:
e1:c2:e4:31:cb:1e:96:8f:41:17:a0:37:95:86:fa:
b0:f9:18:6f:64:ad:77:dc:6f:1c:8f:eb:0f:ba:16:
f5:00:34:78:fd:93:ce:64:f6:97:09:53:de:9d:e5:
11:a4:27:ec:8d:4b:ba:6e:59:78:52:94:73:5e:4e:
29:1e:17:5c:b6:05:41:87:4d:a6:ce:35:3d:ac:b2:
c5:f1:cb:e2:38:91:8f:65:07:10:be:8b:06:86:fb:
b9:ab:d4:6d:f7:93:83:c1:a5:8e:74:43:e9:ad:f5:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:C8:CF:20:DF:1F:3A:4E:78:31:AE:BB:89:AF:42:07:B0:93:84
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:7c:72:ad:98:f3:7e:1f:49:ce:58:06:a4:60:e2:b1:bd:
b4:3a:c1:20:d6:a9:05:75:01:b5:c4:55:be:60:1c:09:10:23:
7c:0c:f1:15:3f:cf:18:39:2e:13:b3:6a:26:44:93:cb:46:c8:
3a:16:84:b8:dc:8c:37:23:bd:57:1b:da:04:9a:90:52:cc:d8:
f9:13:47:7c:f5:19:02:d8:dc:43:f9:91:84:12:f0:a1:db:fc:
a7:df:88:c8:93:21:4d:3f:d9:5c:9c:e4:f4:94:26:66:a9:09:
97:3a:54:58:6c:a2:40:75:a4:fb:f4:e0:1a:bc:b1:ce:07:7f:
ea:10:bf:66:14:43:21:99:b0:03:7c:18:9e:32:a3:0b:b3:a4:
12:9e:4f:b9:05:d7:f0:2e:f0:80:85:c9:cd:39:46:5d:72:b1:
a8:8a:01:23:34:0a:20:ef:52:23:52:e9:67:66:d4:97:cf:a9:
4c:ea:09:41:4c:ce:64:bb:13:64:c2:07:4d:6b:b5:1b:14:8d:
bb:49:d3:41:8e:40:74:77:d9:2b:a2:14:74:00:35:80:25:75:
43:bb:2d:de:eb:5f:2b:dd:66:47:69:68:34:c3:79:c0:76:a5:
3e:2d:2a:7b:64:68:1e:20:f8:7f:99:be:b0:29:53:9c:26:00:
a0:21:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:32:57 2026 by rpki-client