Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
File: ANK417oWAu9cE23Tn_aLK9s6hMI.mft (raw, json)
Hash identifier: fx7/4349jUBG9kGbunfFhN76hvWBLy29YAt1t/JOKGE=
Subject key identifier: 29:2F:A8:37:2A:12:60:DC:FB:B5:EA:90:85:01:02:D9:D7:60:E4:C8
Authority key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Certificate issuer: /CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Certificate serial: 019D371B39C779B39BDD7E9E92F368759C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
Manifest number: 48
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: 1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa (hash: GiL91QFFwfS59sixHPS5qRrbgOXHYPRs4OdLxTV39XQ=)
2: ANK417oWAu9cE23Tn_aLK9s6hMI.crl (hash: 9idWwNpkBE4YYaYJPDmW/21jl8bZ5CPyFuyV26fofhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:39:c7:79:b3:9b:dd:7e:9e:92:f3:68:75:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=292fa8372a1260dcfbb5ea90850102d9d760e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:e4:c3:f6:b9:9f:79:c9:18:eb:8d:20:54:
4b:54:a4:0c:03:33:27:d9:e7:92:16:19:6d:15:98:
61:93:d0:25:82:ef:ad:91:21:be:0d:49:ae:d8:be:
ec:a9:98:d8:63:fc:5a:3d:7c:13:62:cd:99:eb:e4:
9f:42:16:cc:2c:84:b3:2f:a9:e3:bb:44:1c:d6:90:
59:1c:5a:36:37:25:ed:e5:eb:28:a3:9f:0e:04:62:
3f:53:0a:a6:4b:56:84:bd:f5:2e:87:45:c1:95:7b:
f3:8c:0c:fb:84:92:18:b3:29:cb:83:91:f2:f7:cc:
a2:00:31:56:d3:21:3b:51:5f:5a:a1:e2:13:8c:41:
94:0a:8c:0e:c2:5e:98:4d:00:62:c4:7f:84:5b:6f:
13:2d:6b:17:fd:cc:10:76:fb:39:d6:cd:56:39:98:
04:eb:a6:62:47:ff:31:47:df:22:2a:89:ff:99:57:
f4:98:5e:4f:66:3b:98:9d:11:cc:31:17:14:39:38:
5a:80:3b:1b:11:b8:d7:98:29:ea:ad:1b:d5:77:c6:
7f:df:73:dc:04:5a:81:ae:fd:88:bc:02:06:22:b7:
f4:44:3d:14:fd:d1:a1:f8:5d:60:c5:7d:4d:57:1b:
4f:52:de:05:c2:06:a8:47:51:80:54:88:d4:a7:f8:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:A8:37:2A:12:60:DC:FB:B5:EA:90:85:01:02:D9:D7:60:E4:C8
X509v3 Authority Key Identifier:
keyid:00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:34:e9:1b:df:5b:8a:4e:b6:e7:00:91:fc:8e:d7:22:cc:6e:
9c:a8:c2:4d:3d:03:6b:62:1c:18:35:66:d5:d8:e6:cd:5a:45:
8d:92:fe:81:e2:3c:18:68:5d:d6:d6:8e:00:6c:9e:85:ee:bb:
68:4d:72:87:76:36:99:0b:0b:0a:90:db:1c:8d:93:58:31:14:
b0:da:cd:56:cf:b9:ff:19:c6:20:49:5b:53:23:ac:a8:cc:cc:
90:cc:9d:2b:51:63:dd:6c:d8:4e:e5:9c:6c:29:d9:21:9c:e4:
6e:5c:f7:e0:d1:5f:2c:d4:f4:1f:04:0f:d3:a2:f0:d8:e2:85:
60:a7:9b:ee:e8:59:ad:20:93:ae:71:20:2f:12:9c:fb:83:b9:
11:79:45:76:6e:15:12:c0:06:d6:67:c9:30:00:b1:05:85:1b:
20:b0:e9:79:6a:5c:9f:51:f1:b6:c1:65:1d:b5:df:13:b6:78:
b9:63:1c:3d:22:2a:5b:49:66:c5:5d:2f:e0:39:61:3c:0f:7c:
56:7b:02:76:f0:51:c3:c2:2a:98:f4:08:b4:d0:88:ab:aa:90:
fe:dc:c2:4c:8b:44:c1:1d:66:da:e4:3f:7a:29:19:4a:d8:65:
1d:e2:a5:00:74:15:24:bf:15:97:85:8f:4c:75:c4:7a:5c:fa:
49:0f:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:55 2026 by rpki-client