Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: zkPYj/h12vSAnpX2q0US4J8WcIKTFBGTwTIZ2zmSAxk=
Subject key identifier: 98:64:49:47:D2:14:85:DC:F2:C9:71:62:4B:D7:FF:16:42:32:2D:44
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019E1D90FF3537D9BDBDA098AA3FC71710D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 06CA
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: riaht7uyrFSE+ejlqzNdtt0C924BzWYu7ojgCqB3sgo=)
2: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
3: caQl85pcL27LJ3yLZ8ToBlB2q3I.asa (hash: w5Qg2102labIj00/ukYMJLcGRf//EUtqsQgg3UU0yGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ff:35:37:d9:bd:bd:a0:98:aa:3f:c7:17:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=98644947d21485dcf2c971624bd7ff1642322d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:7f:82:d2:ff:ce:27:4c:56:8a:34:b8:10:
ac:1a:24:f4:22:f7:a5:fd:56:0c:cd:d5:c7:cb:66:
1f:b1:a9:5c:c2:cf:6f:8b:57:0f:8c:74:c0:6c:fa:
9d:5b:91:6b:76:ab:9f:75:12:b0:14:18:36:84:77:
6d:57:5a:09:d2:1e:a2:7a:b2:1d:0b:12:f3:d5:d2:
07:08:69:de:72:27:c6:63:85:9e:d0:a2:e6:90:b2:
4d:fe:1c:22:23:aa:21:cf:84:75:9a:64:5f:3f:45:
5c:e3:04:48:a6:7e:04:84:f3:76:6e:62:91:3f:3d:
37:b8:0d:29:47:a7:ea:7c:84:cf:b6:b9:54:18:3c:
11:17:06:27:49:ec:3c:3e:cb:8c:62:78:13:e0:3e:
54:cc:62:5b:fd:33:e2:2f:b4:39:fe:a0:8a:03:dd:
47:64:0d:8b:5f:a7:2f:3a:30:0a:98:c8:70:f9:39:
9f:b3:cd:1a:58:1c:40:d8:df:fe:a7:5a:2d:3b:f7:
c6:04:e1:60:55:c3:3d:46:20:24:7f:07:f8:73:8a:
c4:a8:76:2b:96:80:0b:e0:54:db:4d:ba:b3:e6:6c:
5e:e7:c0:83:51:21:e0:ba:e4:9d:0a:98:cc:27:5c:
58:72:fb:6d:bd:d2:23:a1:36:3b:30:ee:54:56:2f:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:49:47:D2:14:85:DC:F2:C9:71:62:4B:D7:FF:16:42:32:2D:44
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3d:49:6c:7c:58:3c:c6:63:bb:46:31:a9:2a:b2:1d:57:24:
6d:98:6a:ce:ac:0c:dd:9d:6d:eb:80:10:45:f8:b2:d7:c4:f8:
1f:69:20:1e:dd:b2:0e:14:94:33:74:18:90:06:65:fd:c3:c3:
1f:e6:8e:5e:74:d3:2c:45:bd:1d:8a:8a:d8:b4:1b:d5:aa:8a:
df:f0:17:2b:75:bf:c7:55:4b:73:4b:88:49:dc:76:7f:c2:0f:
c9:b2:84:4a:4f:e9:6c:53:d4:dc:d5:ff:a5:86:6b:9d:9c:71:
87:a0:97:5d:24:a6:b8:b2:eb:ad:c0:d4:ec:48:17:66:82:03:
40:58:b8:ca:1a:fc:c2:fd:dc:74:a7:18:c5:c1:c5:bd:61:f1:
fa:cf:ed:2b:9c:42:ec:de:11:9b:8e:e9:10:19:17:b0:f6:35:
fb:08:6e:db:23:97:44:17:c2:8e:ff:47:d7:a4:74:fb:eb:44:
fd:6d:5a:50:86:e3:bd:2a:b9:ad:f9:fd:d6:f9:c6:5f:de:4c:
8d:ab:12:cf:f2:50:fd:f1:96:9d:56:61:3b:54:89:0c:03:6c:
f3:6a:65:67:32:12:57:39:4b:0d:b8:ad:de:c8:1f:d6:e9:97:
2d:7f:b9:dd:cd:b2:89:6d:89:28:8b:a3:d4:15:c9:af:1d:29:
fb:aa:31:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:20 2026 by rpki-client