Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: vSNMthEN3bvykOnfWEx46sBCQX7TWpAHklVUgPMk3FY=
Subject key identifier: 21:1C:C7:B8:6F:56:F6:92:A3:B6:E2:D4:70:03:90:E8:33:AC:C1:B1
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019CA9B3F2B107A23D4129A932F29F299FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0609
Signing time: Sun 01 Mar 2026 14:01:08 +0000
Manifest this update: Sun 01 Mar 2026 14:01:08 +0000
Manifest next update: Mon 02 Mar 2026 14:01:08 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: sRd4BvLiFs3LTckb58w8Ogjc7dJPZsTME+oTQhYsJew=)
2: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
3: n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa (hash: dzE/q21fmrH9SVkZPk72j/WGQhTy8qFsnaxN27uHbdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f2:b1:07:a2:3d:41:29:a9:32:f2:9f:29:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Mar 1 14:01:08 2026 GMT
Not After : Mar 2 14:01:08 2026 GMT
Subject: CN=211cc7b86f56f692a3b6e2d4700390e833acc1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:51:96:de:56:c8:c0:4e:0f:d4:89:af:fb:
66:fe:e4:03:1d:d4:32:97:30:c3:e1:a8:09:b1:28:
21:37:c3:69:f5:07:c1:f3:6f:86:16:02:7e:6f:0d:
9f:41:10:94:e9:d2:3e:4f:24:97:ea:ff:a4:ca:d2:
59:6d:5d:0c:65:1c:ef:23:7d:99:d0:3c:4e:a9:fd:
02:af:4e:77:de:b3:79:23:f6:f2:22:47:8b:32:71:
8e:2b:f3:5c:4c:e9:4c:37:32:9f:9d:6c:63:a0:8e:
32:9e:f1:d5:0a:59:cc:d1:75:89:ae:1f:27:37:c2:
8b:f2:98:df:6c:a4:9e:59:f7:3d:d5:bd:df:28:16:
f0:89:6b:8b:f3:b5:77:43:c7:71:01:10:38:bd:ab:
a5:0d:30:da:50:fa:ff:40:c3:0c:e0:12:1a:10:b9:
8b:90:35:05:26:06:b7:1a:3f:c6:ba:9c:b5:7f:91:
e9:93:02:f2:2a:aa:ab:5d:cc:41:24:7e:1b:a4:30:
8e:be:5f:8d:93:ab:e1:de:7e:b1:d1:9e:37:40:f1:
91:2e:6b:72:36:ef:98:a1:8b:75:2a:3c:c5:33:1f:
65:58:d5:00:87:f7:6d:09:7e:3e:d6:82:2a:0f:c8:
87:80:bd:74:b0:8d:b9:83:5a:c3:21:0b:fb:33:ee:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:C7:B8:6F:56:F6:92:A3:B6:E2:D4:70:03:90:E8:33:AC:C1:B1
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:26:d3:16:0e:85:a9:eb:1e:b9:78:17:c3:f7:65:b0:e8:58:
88:6c:fb:4e:80:d5:13:12:2a:0a:8b:64:27:0b:42:e8:63:3e:
52:e9:6b:30:1a:a1:98:ea:1e:de:c4:22:67:b0:2a:6a:6f:2f:
0c:ae:cc:33:46:8b:1c:0d:6e:c0:0c:61:d1:00:94:fe:a9:e6:
ca:a7:c9:5e:35:10:f5:c0:51:4f:76:76:1a:5e:ca:db:6f:fa:
69:15:bc:93:89:73:c1:e8:a0:2b:6f:94:9f:d2:ab:86:bc:5d:
9b:ec:28:72:4d:b4:6e:17:87:21:43:88:e4:3b:e8:7f:31:a9:
e6:23:a0:a0:95:4f:2a:dc:31:e9:ab:17:73:5d:11:a4:e0:af:
22:42:4a:d9:2d:ff:bf:32:fa:1f:a3:a8:af:4b:b2:1e:c5:8a:
a3:64:be:7f:0d:87:0e:08:bc:39:f1:72:d9:c1:dd:e4:05:b3:
5c:fc:e8:cd:c1:04:96:01:30:5b:0d:4b:1e:b4:65:39:ba:63:
23:92:58:02:6b:97:13:99:88:16:fd:9e:99:35:91:ac:f7:2f:
89:6f:40:81:bb:5b:bc:26:76:e4:ee:5b:53:ed:af:05:fb:2a:
a3:cc:54:f0:de:ff:65:da:b3:ef:bb:33:16:a5:0b:9a:a9:b8:
ec:68:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:47 2026 by rpki-client