Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: T5/caNs+0cJ0yOR6wWuuEUfsHPw/sE8vcD8Dl+o3ug8=
Subject key identifier: E4:CD:FA:D3:99:FA:4D:D4:07:A1:3F:A6:40:BF:E8:0A:F5:26:58:BB
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019D2470703BD782233996CA3FCABEEF5C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0649
Signing time: Wed 25 Mar 2026 10:00:41 +0000
Manifest this update: Wed 25 Mar 2026 10:00:41 +0000
Manifest next update: Thu 26 Mar 2026 10:00:41 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: DU7lClYHqnZNvMGbCUlr+OIDCEJ8cxEPvBOO1oWI/Oc=)
2: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
3: caQl85pcL27LJ3yLZ8ToBlB2q3I.asa (hash: w5Qg2102labIj00/ukYMJLcGRf//EUtqsQgg3UU0yGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:70:3b:d7:82:23:39:96:ca:3f:ca:be:ef:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Mar 25 10:00:41 2026 GMT
Not After : Mar 26 10:00:41 2026 GMT
Subject: CN=e4cdfad399fa4dd407a13fa640bfe80af52658bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:e0:96:c9:c4:35:ee:10:4b:67:8d:d1:7d:
01:b1:61:3e:66:bb:a6:23:e5:17:38:86:6d:0e:51:
7a:c7:17:36:63:25:1f:ad:b8:a4:86:62:0e:2f:d9:
19:3d:8f:e2:72:82:f8:7a:2f:22:bc:c3:d6:00:cc:
79:7e:70:7c:5b:fd:f5:71:41:cc:7d:11:17:05:1e:
ae:ad:1a:ba:18:80:8b:03:a8:f3:13:20:9c:83:96:
8c:91:52:fb:49:fb:38:0c:b2:5a:fc:7c:2a:0d:a5:
4b:0d:70:79:94:e5:07:c6:f9:3e:bf:e6:13:09:ef:
e4:cb:06:d4:93:9d:ec:fc:76:eb:2c:50:62:12:ae:
c9:08:66:b8:de:13:29:eb:f0:b2:52:76:4d:c5:5d:
50:4a:42:fc:ad:0f:de:42:71:3c:72:ac:ab:2f:fb:
be:49:f4:12:f5:ba:43:c2:ba:05:03:b1:d5:0f:48:
3b:84:a8:80:25:e9:17:f0:d8:60:e2:09:00:93:83:
36:db:ae:60:fb:41:a8:1f:97:74:17:32:da:03:fa:
7c:15:e3:a8:fb:ca:0e:c1:09:b0:3f:cf:db:78:ca:
53:dc:c5:9e:54:72:19:46:16:0d:f6:7e:5f:32:35:
f3:56:06:f5:f5:cb:4f:44:de:bc:d9:23:e3:f7:99:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:FA:D3:99:FA:4D:D4:07:A1:3F:A6:40:BF:E8:0A:F5:26:58:BB
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:e6:f1:c3:a2:94:60:d6:cb:5d:85:27:8d:1e:9d:9b:0c:
97:dd:2b:42:e4:4e:7c:d9:4d:f8:f4:8a:e0:db:e5:cf:5c:7d:
c2:8d:51:fa:22:dc:f1:7f:38:7a:73:af:28:50:d1:24:65:2f:
ae:0b:c1:db:ba:69:ee:d1:d0:c8:ce:7f:6a:7c:98:d1:32:c8:
62:20:e8:cb:77:5c:3e:3f:8f:33:ff:ed:96:f6:11:30:2e:ec:
34:ff:c9:5b:38:ef:ea:e8:b0:2b:7d:4b:40:8c:c3:84:cc:81:
3f:71:11:3a:b8:ce:6c:2f:4a:86:ba:9a:d3:5c:ab:e9:81:00:
23:14:d7:dd:52:5d:81:08:32:bc:f4:56:18:69:0c:f0:06:ec:
f7:c1:d5:4b:94:3e:07:d4:24:cc:c4:de:dd:74:dd:28:3f:30:
dd:e7:f5:0e:fb:a9:b7:66:8f:3a:7f:68:26:34:58:04:71:6d:
f0:25:ec:ca:67:a6:0a:7f:51:05:d7:1b:26:7f:08:e2:72:3e:
c4:8a:47:ad:2d:e9:e9:67:b8:44:8f:4b:f6:a3:09:64:c9:9a:
16:03:c3:e8:d9:f1:64:68:7d:9e:c3:d6:12:36:6d:58:69:f7:
85:8d:f7:bd:05:11:dc:68:c4:b0:8d:69:00:57:37:d8:de:87:
8a:22:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:57 2026 by rpki-client