Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: qCk8TWfA9w8Foxyvo3MN6Obw5+rg3VyXU4e0hUA7F80=
Subject key identifier: 05:D7:F1:96:29:ED:C5:56:F2:6B:9B:02:E1:7E:12:60:EC:63:D0:CE
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019D27039EE52FEE156070BADEB679FDAA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 05C0
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 98TEQgW/nY1vLcfFsdB6QMG+WYXc2Vd7yRAAPqfTrn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9e:e5:2f:ee:15:60:70:ba:de:b6:79:fd:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=05d7f19629edc556f26b9b02e17e1260ec63d0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:31:be:fd:a9:3c:81:fe:d4:c2:6a:8d:c3:
4a:29:a2:51:0e:7e:82:88:44:bf:90:0a:4e:04:d2:
4d:34:fb:ea:e0:df:f5:96:62:20:c8:99:5e:76:c9:
52:b0:35:28:40:a7:9a:88:fe:de:ae:00:c6:7c:6e:
40:53:19:ec:7a:47:ea:6a:bd:3b:28:4e:cc:99:f2:
71:43:47:fa:aa:9b:dc:db:fd:d6:a5:86:b7:38:72:
2b:5c:d6:a3:7b:a0:bb:6b:c3:c8:c0:ba:25:36:a0:
b7:0d:26:a3:30:1b:be:40:5a:c5:b5:ad:59:68:b5:
1c:48:84:a1:1c:84:1b:fe:92:d1:bf:8f:72:21:d4:
9b:98:b1:26:17:57:eb:49:4f:39:af:8c:c8:95:59:
76:43:5d:30:87:0e:81:36:2a:24:14:d9:43:d3:cb:
79:00:5b:eb:03:61:ac:d9:05:d7:8a:5c:08:55:0e:
1f:e4:c1:6d:28:3d:8b:14:f3:28:b1:af:62:4c:a2:
0f:98:14:3a:87:89:6f:b6:87:6b:7f:93:f9:d7:82:
41:54:2c:c8:b9:14:16:78:66:e8:bf:c6:7e:27:38:
65:51:e2:4e:7b:36:e4:fb:d5:95:1f:b9:e2:25:47:
8d:f4:19:74:b0:92:9c:96:2a:aa:a2:b1:53:94:0d:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:F1:96:29:ED:C5:56:F2:6B:9B:02:E1:7E:12:60:EC:63:D0:CE
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:71:87:d3:9c:c5:d5:30:17:c1:37:2f:88:17:bd:f5:f2:
23:66:95:ae:12:94:6b:40:74:11:91:3c:25:59:08:99:c6:85:
a2:e6:9b:8d:5f:89:cf:ef:9c:b1:9f:56:5e:d4:9a:ba:d0:e6:
55:84:20:01:dc:c1:b9:8a:30:6f:b8:74:de:fa:95:bd:2d:2d:
87:3d:3f:53:e8:9a:21:81:ec:27:35:ec:87:fe:cb:6f:cf:0b:
ba:e6:2c:94:b9:2f:72:b7:23:86:5c:cd:d8:1b:c4:0f:69:a7:
e8:30:5d:7d:51:1c:75:42:c9:f9:45:c5:e0:6a:4a:cc:75:83:
35:b0:fc:86:8f:0c:ca:d1:d7:45:ec:27:2d:f4:08:56:a8:64:
49:81:41:5a:53:f2:e5:73:a2:53:35:2e:3d:8a:d3:f3:d5:af:
67:f4:5e:25:9d:29:e0:99:01:94:67:d5:4f:18:75:03:36:9c:
14:af:b1:a9:d2:f5:db:d9:54:f3:75:01:b7:43:e4:6a:a3:06:
68:c2:2d:24:57:a9:a1:4f:47:62:a5:95:cd:ca:bf:4f:c2:2a:
c8:4e:38:e7:6a:8c:25:6b:1e:88:ef:1b:bd:39:4c:2c:ca:2d:
53:2d:cb:70:09:7f:07:bf:96:2e:c3:06:3a:05:14:aa:c9:13:
8b:81:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:06 2026 by rpki-client