Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: BHkFd8K+UDqtLwa5kDORDxwjvcWu3nITbX6wPcFbOzo=
Subject key identifier: D7:04:06:14:4A:E2:A3:5C:C3:69:9B:61:D8:BF:90:2E:E7:2B:E5:44
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019D37C0DADF1749146DF07D9695A3C3F249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0653
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: kxeEJ1irll0PBnYUBmgQWHpeTp+gdCBv9IrnG5nmVZc=)
2: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
3: caQl85pcL27LJ3yLZ8ToBlB2q3I.asa (hash: w5Qg2102labIj00/ukYMJLcGRf//EUtqsQgg3UU0yGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:da:df:17:49:14:6d:f0:7d:96:95:a3:c3:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=d70406144ae2a35cc3699b61d8bf902ee72be544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:d1:e0:e1:57:2c:25:b3:c1:14:4e:64:9f:
fb:69:9d:0d:7a:6c:89:f4:2a:0a:90:8d:53:32:fd:
df:c9:9e:2e:b8:0b:ab:30:82:7b:62:1b:c7:24:b9:
36:5f:2e:29:3d:27:0e:38:e8:70:dc:e0:c6:2f:da:
a7:9a:b9:61:5a:be:aa:53:86:77:ad:7f:d5:00:ce:
e1:4f:72:0b:eb:34:0b:85:62:c5:af:4e:26:fc:f2:
0f:c3:72:06:fa:28:49:87:eb:a8:c6:b1:54:66:13:
a3:f9:8d:c8:e3:46:5b:6c:80:8d:48:c8:42:9b:4e:
8a:b7:5a:c4:4f:6f:0a:94:ba:fe:3f:80:d2:1c:7d:
e3:d0:58:8f:e7:e7:98:ae:1e:12:bb:40:9b:9d:4b:
7e:fd:5a:0b:c2:a1:4c:ad:62:24:b4:7c:0d:64:05:
20:4d:07:77:1e:15:eb:83:f7:19:fc:81:12:50:b4:
0c:53:1d:0c:53:38:3f:b8:58:5d:43:91:98:9e:5a:
c1:d7:fa:e9:46:cc:96:ef:20:bd:b5:ba:f5:de:4c:
6c:dc:20:08:33:7f:41:1b:8f:e6:01:60:f1:93:f7:
aa:5a:6b:09:d3:ab:b9:dc:72:74:cf:d0:fc:4f:04:
0c:7c:b9:b0:75:8f:c7:39:0b:fb:30:3f:c3:ab:95:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:06:14:4A:E2:A3:5C:C3:69:9B:61:D8:BF:90:2E:E7:2B:E5:44
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e4:49:a2:98:6a:55:f0:43:ad:67:34:b4:c4:c5:4f:7b:a9:
9f:3c:dd:c2:bc:fe:58:f4:55:c5:4e:c2:44:dd:75:bc:5d:35:
6f:7f:f0:56:5f:63:7a:24:26:d3:ce:5b:cc:aa:0b:62:e6:19:
12:0b:c9:18:8f:48:75:cf:e2:a6:38:e5:0d:ac:a9:e8:ed:ca:
63:2b:f9:9e:5f:83:71:0a:00:c7:79:56:1d:e8:68:1c:41:e8:
ab:e6:73:af:b1:93:f8:e8:fb:c1:93:f1:66:32:dc:f6:b7:77:
4f:fb:f0:ac:8e:d8:af:46:dd:3c:e0:0c:e1:33:0b:b7:14:2c:
dc:b9:88:98:fe:ed:3e:03:76:72:a2:4f:b9:bf:d8:cb:f4:f8:
80:4d:c0:28:06:1a:f8:c8:12:d4:a3:70:49:5d:aa:26:2e:72:
78:ba:05:b3:87:87:4d:4e:3c:ff:f1:2d:0d:42:7a:9d:cf:6f:
77:d3:10:48:56:3e:d1:95:c6:a5:df:6d:9a:bb:e8:35:f0:39:
46:d2:aa:06:1b:8d:0f:6b:b1:66:85:8e:57:cc:f4:31:24:8b:
48:7a:02:4e:96:cb:e3:aa:3e:76:e1:68:a8:9b:1e:31:7b:0b:
a4:42:34:e8:ea:3d:d9:6e:99:f2:ea:4b:1c:35:61:29:12:a6:
0a:3e:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client