Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: JDPhfZ5XRq150jTe4daAKyIAhSOsZKWgTxXcsNJ48T8=
Subject key identifier: 5F:F1:B8:9B:13:75:D6:BD:05:3D:07:7F:E9:FA:C2:98:C6:12:41:B6
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019D3866441A83BFD9FD0B2EEBEB1F15464C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 05C9
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: fXVytRCcvq0nBOKHul52YIrf1I4U1l70fzsUPvY2Cnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:44:1a:83:bf:d9:fd:0b:2e:eb:eb:1f:15:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=5ff1b89b1375d6bd053d077fe9fac298c61241b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:8d:ba:03:fb:1c:86:1d:f8:35:65:58:76:
d2:4c:d6:b0:9d:4c:df:ca:1e:ba:6f:58:4e:9a:48:
37:3e:bd:40:29:6c:e7:bb:f1:af:f5:95:1b:77:a7:
88:9b:bc:4b:71:5d:40:45:49:8f:96:71:d1:0d:b9:
39:7a:8c:c5:7b:9e:b5:76:57:36:15:2b:42:8d:47:
6e:00:b4:89:ca:0b:28:da:fa:0d:e3:4d:26:e8:af:
d1:de:ba:21:46:96:c8:63:b1:7d:e9:d3:b9:4c:b8:
9b:db:b5:ed:8b:b0:f7:38:4c:b6:c1:ea:f7:91:d7:
98:70:1f:ce:17:8b:44:c0:66:6a:f3:39:7e:eb:df:
ef:77:43:94:9b:82:25:e5:51:a7:f5:85:cf:85:10:
75:90:35:c4:3d:9b:0b:f9:95:81:6a:f9:75:1a:af:
4e:75:3f:d1:d4:4f:e1:c7:74:2d:e0:e8:a8:63:cf:
1d:41:98:3f:24:36:ea:73:83:fd:d7:fa:78:d7:06:
26:2a:1a:25:6d:9e:74:8f:1a:54:a7:14:92:1a:19:
9a:c5:5c:15:9b:99:26:a9:0b:55:81:f2:7a:94:fd:
af:df:d9:04:91:4c:aa:88:b1:ec:1c:a7:51:6f:b7:
16:49:ce:53:9a:5e:e9:f9:8e:02:13:a0:a4:33:55:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F1:B8:9B:13:75:D6:BD:05:3D:07:7F:E9:FA:C2:98:C6:12:41:B6
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5c:34:79:5b:21:3e:6f:78:d7:c5:e2:9f:4c:7a:b8:94:97:
5a:56:4b:f1:4d:38:0a:8f:b9:be:43:ff:8c:3a:c2:5e:f2:09:
89:61:72:bd:65:ad:bc:17:de:fa:e9:9b:11:fc:b0:12:82:b8:
4a:06:40:25:d6:82:26:bf:ef:29:e3:3c:17:a1:14:99:d8:11:
75:34:56:57:8b:60:0d:d1:15:4c:ba:af:24:1d:90:ef:48:53:
76:f9:e7:66:4a:67:13:51:8c:6b:c4:16:d7:c5:f1:a8:57:02:
82:f6:7a:2e:a0:66:a7:b1:56:b0:57:e4:56:4e:d7:33:20:bc:
5f:75:3c:17:85:c0:16:ac:ec:f9:e4:38:b7:a3:0f:da:36:b1:
e2:2a:6b:78:98:44:81:1a:4c:9f:51:90:fa:d8:41:db:b6:3b:
72:73:fb:a9:fb:bd:aa:61:52:f0:73:4c:62:ea:f4:ec:0a:ec:
45:83:76:e3:45:74:18:20:fe:7f:a1:ae:f0:84:a7:6a:c8:06:
41:10:eb:2a:90:f6:d6:19:e0:ae:ac:e3:36:d0:44:04:09:74:
fe:13:2a:4e:9d:1f:92:ce:52:a3:54:6e:27:4e:6a:e4:7f:65:
e5:60:16:3e:30:7f:14:e4:c2:7b:84:38:8e:28:7c:e7:41:10:
b1:4c:1f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkQag7/Z/Qsu6+sfFUZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjYwMzI5MDcwMTU5WhcNMjYwMzMwMDcwMTU5WjAzMTEwLwYDVQQD
Eyg1ZmYxYjg5YjEzNzVkNmJkMDUzZDA3N2ZlOWZhYzI5OGM2MTI0MWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5CNugP7HIYd+DVlWHbSTNawnUzf
yh66b1hOmkg3Pr1AKWznu/Gv9ZUbd6eIm7xLcV1ARUmPlnHRDbk5eozFe561dlc2
FStCjUduALSJygso2voN400m6K/R3rohRpbIY7F96dO5TLib27Xti7D3OEy2wer3
kdeYcB/OF4tEwGZq8zl+69/vd0OUm4Il5VGn9YXPhRB1kDXEPZsL+ZWBavl1Gq9O
dT/R1E/hx3Qt4OioY88dQZg/JDbqc4P91/p41wYmKholbZ50jxpUpxSSGhmaxVwV
m5kmqQtVgfJ6lP2v39kEkUyqiLHsHKdRb7cWSc5Tml7p+Y4CE6CkM1WS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/xuJsTdda9BT0Hf+n6wpjGEkG2MB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVw0eVsh
Pm9418Xin0x6uJSXWlZL8U04Co+5vkP/jDrCXvIJiWFyvWWtvBfe+umbEfywEoK4
SgZAJdaCJr/vKeM8F6EUmdgRdTRWV4tgDdEVTLqvJB2Q70hTdvnnZkpnE1GMa8QW
18XxqFcCgvZ6LqBmp7FWsFfkVk7XMyC8X3U8F4XAFqzs+eQ4t6MP2jax4ipreJhE
gRpMn1GQ+thB27Y7cnP7qfu9qmFS8HNMYur07ArsRYN240V0GCD+f6Gu8ISnasgG
QRDrKpD21hngrqzjNtBEBAl0/hMqTp0fks5So1RuJ05q5H9l5WAWPjB/FOTCe4Q4
jih850EQsUwf7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:35 2026 by rpki-client