Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: IibulRly22InXVBTetQ3PtzlbHspmkpEK1oZlglcOCk=
Subject key identifier: CD:28:DA:2E:04:B0:91:D4:6C:90:2F:97:CD:2B:3C:74:DF:2C:6A:ED
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019D985074FF23DD5925D55544A10738E3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0685
Signing time: Thu 16 Apr 2026 22:01:42 +0000
Manifest this update: Thu 16 Apr 2026 22:01:42 +0000
Manifest next update: Fri 17 Apr 2026 22:01:42 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: HjoUVGHsm5MRCS8NMYhOCXTywbSmzQ99wKe4zV6Ho9s=)
2: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
3: caQl85pcL27LJ3yLZ8ToBlB2q3I.asa (hash: w5Qg2102labIj00/ukYMJLcGRf//EUtqsQgg3UU0yGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:74:ff:23:dd:59:25:d5:55:44:a1:07:38:e3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Apr 16 22:01:42 2026 GMT
Not After : Apr 17 22:01:42 2026 GMT
Subject: CN=cd28da2e04b091d46c902f97cd2b3c74df2c6aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:69:0e:6e:d4:d5:22:73:7e:1d:36:02:69:
a0:7b:20:3d:7e:26:cf:72:90:fe:fb:7e:71:5a:d3:
84:ea:00:7d:ef:c5:68:9b:d5:81:94:a8:68:97:a4:
f8:46:3e:ac:00:46:f3:33:94:50:01:db:b5:02:99:
fc:37:d0:be:92:cc:20:69:1b:8a:4a:5e:11:c0:7a:
e3:88:9b:3e:ec:bb:e6:12:c5:53:7f:92:2a:74:78:
ae:da:9d:12:83:cd:3e:7c:08:15:11:91:62:02:6b:
97:98:b3:ee:f2:04:9f:47:73:4f:9b:6f:ab:94:c0:
1e:94:bb:fa:fd:7a:27:6c:ef:45:74:fd:67:f9:86:
f6:28:05:b8:9c:11:1f:9d:60:32:6d:8b:37:43:05:
01:fc:a7:e8:34:2a:33:ec:44:b2:5a:c6:83:31:1c:
1e:0e:83:e6:0c:71:e9:ba:94:a5:e3:60:7e:99:5c:
ea:1d:eb:94:a3:35:a1:b7:17:1d:d3:17:8d:9f:03:
16:5a:e4:8e:f9:56:16:6f:e9:83:1a:c8:dc:90:c0:
e0:dd:18:a2:47:be:b6:6c:bd:f5:64:e9:8a:ad:27:
f6:81:1e:f1:d1:62:85:40:4f:64:f6:7a:f3:6c:e1:
06:ec:20:82:fb:3f:b3:ab:c8:46:48:93:38:0c:90:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:DA:2E:04:B0:91:D4:6C:90:2F:97:CD:2B:3C:74:DF:2C:6A:ED
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bb:4c:84:9c:33:97:77:da:a7:3b:a8:e5:9d:17:64:d7:2a:
69:91:54:8b:eb:98:55:98:30:93:27:fc:5f:b3:23:7c:59:bc:
3d:5d:e6:f9:e0:8d:56:eb:ae:d3:86:22:90:d1:f8:57:e2:4d:
55:10:cd:a0:06:de:bc:cb:bf:f8:d2:db:54:ba:d1:9f:a7:57:
7d:e4:94:e2:76:cb:66:ba:cf:4d:cc:aa:eb:47:c6:a2:1b:f4:
a3:22:d2:13:a8:11:c7:30:c4:88:bf:9f:ba:30:a0:50:be:22:
76:f9:8f:1f:5b:bf:09:77:e6:fd:80:e0:83:14:72:2d:d7:e3:
c0:8d:bf:d8:dc:dc:d5:f6:9a:e9:f7:31:c5:30:f8:71:38:03:
fb:6c:c6:fc:88:f5:5a:b4:5c:b9:88:56:5e:aa:92:fa:af:05:
42:d7:8c:17:24:39:75:e8:ba:ba:50:33:0f:18:cb:4c:05:b2:
1e:32:8c:8f:af:7f:74:7e:64:8e:a3:3a:08:e6:37:ca:02:11:
12:4f:ed:71:72:9e:8d:25:09:1f:74:f2:17:d4:d8:c1:80:39:
09:b6:1d:7a:63:6e:75:d4:d2:35:46:7e:f9:80:2d:9a:f0:0f:
8f:cf:9f:39:2f:d6:4d:27:7b:9c:08:22:f4:0b:b9:8a:a9:27:
55:04:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:09 2026 by rpki-client