Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
File: ANK417oWAu9cE23Tn_aLK9s6hMI.mft (raw, json)
Hash identifier: YzU//l+LHU51IWSC4lOkkCdyK3FGk8c/5rK+GY9pMSw=
Subject key identifier: 32:9D:1A:A4:0E:66:E6:B8:6A:49:0B:F8:90:B4:C3:32:E7:34:6F:1D
Authority key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Certificate issuer: /CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Certificate serial: 01A0416121172A2C19E965921138D9BA79CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
Manifest number: 01DB
Signing time: Thu 27 Aug 2026 04:01:19 +0000
Manifest this update: Thu 27 Aug 2026 04:01:19 +0000
Manifest next update: Fri 28 Aug 2026 04:01:19 +0000
Files and hashes: 1: 1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa (hash: GiL91QFFwfS59sixHPS5qRrbgOXHYPRs4OdLxTV39XQ=)
2: ANK417oWAu9cE23Tn_aLK9s6hMI.crl (hash: kd25BzA5KsUOW15HEES1mwqWuDLzGZ0Ri/m8f80pmYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:61:21:17:2a:2c:19:e9:65:92:11:38:d9:ba:79:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Validity
Not Before: Aug 27 04:01:19 2026 GMT
Not After : Aug 28 04:01:19 2026 GMT
Subject: CN=329d1aa40e66e6b86a490bf890b4c332e7346f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:a8:77:39:c2:77:22:98:46:9b:49:70:80:
d8:bc:ec:e4:75:da:dc:80:0d:02:15:bc:49:b4:93:
49:b8:d7:62:d4:12:1c:6e:23:c8:c7:09:b2:7b:34:
d2:a0:24:50:28:de:af:a1:5b:c7:89:b4:65:6c:9c:
5a:4f:22:e0:bf:76:84:dc:82:f1:2b:34:c2:6a:d1:
6f:cd:b5:ad:62:b9:7b:6b:98:84:88:b6:a7:5c:c2:
bb:d9:d4:b5:58:91:17:ca:59:2a:dd:24:07:f2:2d:
29:32:d7:57:91:9f:ca:b6:38:89:2f:d5:0e:fa:3e:
97:19:e8:a6:25:b6:4f:3d:ee:57:4a:79:2c:a2:4d:
a3:0b:c0:04:c5:5a:7f:fb:8d:42:86:7b:4d:06:57:
f8:6b:2a:bc:eb:a3:0d:28:bd:ec:e2:f9:a0:d8:e4:
e1:87:e3:bb:70:7f:05:50:8e:0b:20:15:08:98:64:
63:46:79:11:ca:a5:7b:45:90:da:9a:2e:b5:9a:30:
e2:e0:6a:cc:5a:d9:fc:01:8a:17:d2:a3:f9:31:61:
90:3c:b4:b4:5d:08:0a:0b:52:0c:07:d4:7e:ba:4c:
a7:97:7e:45:2c:60:21:e5:a0:63:24:34:6d:a4:6f:
c1:56:41:07:47:88:d5:52:b6:7c:e5:20:b7:2e:fa:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:1A:A4:0E:66:E6:B8:6A:49:0B:F8:90:B4:C3:32:E7:34:6F:1D
X509v3 Authority Key Identifier:
keyid:00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:26:3a:47:c8:7f:71:6f:1d:ef:ef:85:6d:3b:1f:54:1f:c9:
77:14:be:b5:19:95:7d:12:0a:cf:0b:ed:79:d4:45:db:db:93:
e2:5b:d3:91:3b:9d:41:9d:0d:34:33:12:3f:6a:8c:f8:20:40:
7a:4c:03:fd:3d:53:b4:e2:7b:5b:5e:57:1a:ea:2a:5d:84:bc:
c6:33:69:28:9c:0f:44:bc:72:1d:6e:a7:84:41:44:76:3f:b6:
b3:53:9f:3d:bd:e0:d9:fe:19:48:76:b3:04:b3:10:54:fc:40:
55:6f:16:49:49:f0:82:53:d4:83:9b:59:7c:d8:32:c7:93:24:
6a:09:4a:97:c1:68:d4:47:a8:4a:d9:94:34:13:ba:f6:e8:86:
31:f5:c1:a4:73:26:e0:a6:8e:28:31:8f:79:04:1a:fe:89:f8:
6f:b2:37:b3:6c:92:78:e9:be:70:73:d9:b3:66:ac:c0:0b:e3:
be:07:de:b5:61:2c:e8:84:e8:30:04:45:c5:f6:24:21:5e:d1:
07:9e:cb:2c:5c:41:59:23:22:1b:b3:57:9f:f2:45:a7:6a:a2:
dc:3a:1e:c7:e1:bd:9d:8c:5f:d8:cd:b5:8f:7b:4e:98:ad:b0:
cf:17:6e:2a:3d:c5:fe:a2:0d:b7:a5:68:c2:92:62:11:e9:e2:
87:5d:e1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:35 2026 by rpki-client