Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: Z/8uzoKPNGXPxESIMr/8cYKPsog9MBUkccwSrdNsbTQ=
Subject key identifier: 53:46:3B:9F:E0:B0:58:7B:95:DD:EE:0B:7C:67:FE:8F:3C:C8:0B:3E
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019E1E34FCDBC06E81A82EF47FE42A53FB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 0640
Signing time: Tue 12 May 2026 22:00:49 +0000
Manifest this update: Tue 12 May 2026 22:00:49 +0000
Manifest next update: Wed 13 May 2026 22:00:49 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: jkN4+K+TJLxAa9RUPHkzc82W8SpmBZ/4BsdNYHUQsPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:fc:db:c0:6e:81:a8:2e:f4:7f:e4:2a:53:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: May 12 22:00:49 2026 GMT
Not After : May 13 22:00:49 2026 GMT
Subject: CN=53463b9fe0b0587b95ddee0b7c67fe8f3cc80b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:4a:df:d0:a0:b4:6c:ae:bb:ad:26:c2:ac:
1b:9d:04:a7:d5:82:de:6b:55:f7:27:47:d8:16:59:
2f:11:a3:ec:75:7e:3d:6b:c5:e5:2a:b3:bc:cd:3f:
50:2c:88:23:7c:a1:31:b8:fe:ab:52:84:37:b2:53:
17:ba:4c:9b:2a:a8:c3:f3:7f:82:69:72:42:85:61:
fa:47:e0:76:bd:ed:03:3c:3f:ff:ff:90:aa:49:af:
56:0c:64:53:48:65:f1:d1:da:87:28:20:20:fc:28:
d0:8e:7f:48:3e:43:38:b1:ba:53:55:e9:16:40:56:
ac:c3:c1:8d:be:f3:99:4a:36:83:74:ac:80:59:d5:
d6:6c:19:67:aa:d6:9c:a5:be:f4:e2:bb:3a:cd:af:
6f:92:ab:7c:1d:70:80:ed:5e:dd:1f:e4:d0:3d:eb:
3e:10:42:7a:7f:b8:3d:3f:1e:72:88:c0:2b:af:f2:
a9:44:80:dd:4f:46:67:82:97:7a:15:12:05:dd:a4:
ff:cf:b5:fe:71:4a:17:1b:c8:fe:05:df:d0:42:87:
78:b8:b6:c2:bd:b6:f3:0b:cb:9e:7f:55:74:99:b2:
cb:6b:42:78:07:34:a8:a3:71:ac:db:8c:86:71:f3:
35:a6:15:08:af:9b:9e:e0:33:77:ae:b2:fb:e5:53:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:3B:9F:E0:B0:58:7B:95:DD:EE:0B:7C:67:FE:8F:3C:C8:0B:3E
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:a7:8f:e7:29:b6:81:66:f0:ba:21:3a:6b:55:6b:c7:f8:
6f:87:e8:26:b4:78:b9:72:15:aa:8a:97:55:68:56:b9:33:c6:
ee:c3:2d:d9:7a:81:04:46:97:a8:d7:de:8d:ce:59:6d:4b:9e:
63:6e:4d:24:70:70:72:52:fc:b0:23:8f:06:27:32:c5:4b:d1:
ed:05:9f:8a:65:9f:a8:47:2d:c4:e5:be:64:cf:0b:89:e9:d3:
d9:27:c7:a5:3c:c3:eb:a1:e7:54:62:dc:d4:ae:53:14:81:1d:
bc:72:d0:2f:2b:cf:74:fe:86:1e:19:ab:fb:4b:f0:39:3d:9f:
57:ae:35:90:14:fc:08:ca:a4:22:d7:c4:87:e7:1c:91:df:3a:
d3:6a:9d:62:57:e8:59:2c:90:77:7a:f2:e6:15:4b:f8:7b:a8:
23:95:f1:f2:77:71:d9:2f:0d:f0:d7:47:13:bc:af:73:e1:db:
9f:f9:09:32:3c:b4:2a:79:74:18:70:3b:96:b6:d4:de:fd:a0:
5c:0e:9b:55:36:37:a3:e7:d6:f9:84:50:8c:2d:be:aa:0f:3c:
7e:f3:a1:24:c5:2d:7d:2a:36:84:b8:58:18:d3:ea:57:aa:dc:
e2:53:2c:56:44:12:a3:a1:50:11:56:93:ef:d7:10:63:10:a8:
5b:ba:49:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNPzbwG6BqC70f+QqU/sYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjYwNTEyMjIwMDQ5WhcNMjYwNTEzMjIwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzQ2M2I5ZmUwYjA1ODdiOTVkZGVlMGI3YzY3ZmU4ZjNjYzgwYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIFK39CgtGyuu60mwqwbnQSn1YLe
a1X3J0fYFlkvEaPsdX49a8XlKrO8zT9QLIgjfKExuP6rUoQ3slMXukybKqjD83+C
aXJChWH6R+B2ve0DPD///5CqSa9WDGRTSGXx0dqHKCAg/CjQjn9IPkM4sbpTVekW
QFasw8GNvvOZSjaDdKyAWdXWbBlnqtacpb704rs6za9vkqt8HXCA7V7dH+TQPes+
EEJ6f7g9Px5yiMArr/KpRIDdT0Zngpd6FRIF3aT/z7X+cUoXG8j+Bd/QQod4uLbC
vbbzC8uef1V0mbLLa0J4BzSoo3Gs24yGcfM1phUIr5ue4DN3rrL75VP+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNGO5/gsFh7ld3uC3xn/o88yAs+MB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATI+nj+cp
toFm8LohOmtVa8f4b4foJrR4uXIVqoqXVWhWuTPG7sMt2XqBBEaXqNfejc5ZbUue
Y25NJHBwclL8sCOPBicyxUvR7QWfimWfqEctxOW+ZM8LienT2SfHpTzD66HnVGLc
1K5TFIEdvHLQLyvPdP6GHhmr+0vwOT2fV641kBT8CMqkItfEh+cckd8602qdYlfo
WSyQd3ry5hVL+HuoI5Xx8ndx2S8N8NdHE7yvc+Hbn/kJMjy0Knl0GHA7lrbU3v2g
XA6bVTY3o+fW+YRQjC2+qg88fvOhJMUtfSo2hLhYGNPqV6rc4lMsVkQSo6FQEVaT
79cQYxCoW7pJgA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:09 2026 by rpki-client