Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: q/EOcXpmuFFRTEhLAlqZb0uA+MR8tPppz30j2Tk3OWc=
Subject key identifier: 9E:7A:C6:4A:A6:D2:47:9A:B4:A1:9D:9A:BA:B8:76:85:7B:2A:58:75
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019E30726711AEAE4E0B590FD760C8AA5920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:01:04 +0000
Manifest this update: Sat 16 May 2026 11:01:04 +0000
Manifest next update: Sun 17 May 2026 11:01:04 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: SzO5S2uKfZLSF8U2/4pDPFhS2lZxQFQWP+o4dsWkqw8=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:67:11:ae:ae:4e:0b:59:0f:d7:60:c8:aa:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: May 16 11:01:04 2026 GMT
Not After : May 17 11:01:04 2026 GMT
Subject: CN=9e7ac64aa6d2479ab4a19d9abab876857b2a5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:19:b9:3b:9e:6d:34:d2:c3:1b:04:9c:fd:
e6:ab:df:90:5b:40:ab:f4:4f:44:11:1e:f0:a9:b9:
e3:7f:5d:00:db:95:67:36:87:3a:4b:f5:fa:a4:82:
d3:76:cd:1a:7c:7f:a6:42:99:00:6e:7c:c5:dc:df:
fd:f3:76:d8:71:75:14:d5:c6:8d:aa:2e:58:5f:f0:
47:64:db:82:5f:43:3a:a8:2c:4f:de:04:1d:39:7f:
bf:35:f9:04:bf:81:93:58:ba:af:71:06:34:66:c0:
80:5a:d1:69:7a:ce:85:4b:49:9a:cd:33:f1:40:c0:
3d:b2:f2:7d:60:b0:aa:bc:2b:d0:b9:b1:4a:ad:df:
90:8b:dc:00:5a:11:d4:33:ba:18:84:13:a9:df:51:
74:bb:f5:56:97:7e:41:c7:f8:6c:f4:74:81:21:fa:
05:ea:cf:0c:70:61:6b:6c:04:15:62:15:ed:99:f6:
a2:0b:31:d7:63:86:33:74:b3:2b:30:91:44:19:c5:
c4:ac:ca:45:05:bf:d7:75:8a:4b:b2:ef:b5:8c:70:
48:d7:e2:e8:c6:62:08:30:bd:4f:a6:82:06:89:37:
8e:0f:61:cc:f6:56:2b:bd:3a:24:a2:51:d9:a3:3f:
2c:f5:93:2a:ca:71:dd:fd:6d:ab:a9:1e:90:13:04:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:C6:4A:A6:D2:47:9A:B4:A1:9D:9A:BA:B8:76:85:7B:2A:58:75
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:8c:a7:e5:cd:da:42:75:3d:7b:6e:b9:bc:a3:af:c2:29:
3d:a4:12:bc:dc:79:21:47:48:20:97:92:4d:46:3b:91:7a:fc:
82:4c:c2:a8:0a:ee:87:e1:e2:76:a2:d0:7f:96:8e:63:1d:99:
68:25:94:3e:c5:49:85:47:36:86:5f:5b:10:0b:40:e3:21:c0:
f3:83:74:17:6a:4d:d1:08:cb:de:8e:97:ca:a7:ec:ff:8a:dd:
7e:dc:c2:a8:60:46:24:b0:0d:17:4b:8f:85:31:7f:7a:6c:49:
76:05:68:c1:e6:1d:fe:7c:d5:f8:f0:14:97:56:16:2c:1d:fb:
ac:87:da:a2:86:4b:24:37:cb:92:ae:9b:1b:f9:8a:94:f0:46:
15:4a:b3:f7:c8:1b:46:56:f7:90:0d:65:37:3f:12:7f:8c:64:
55:c8:84:f0:d7:bb:1e:a0:c8:1a:ae:0f:97:01:8b:1b:f8:bd:
28:f3:9b:1f:70:45:0f:d1:60:e1:9c:9b:a3:e0:36:fa:a3:b1:
a0:15:2b:5e:64:82:f9:8f:02:ca:2b:04:e3:d8:cc:68:91:b2:
37:81:32:28:5b:c9:91:2a:f4:33:26:b6:ec:e3:85:02:af:ba:
8c:ad:a8:16:0d:2e:19:c0:82:41:82:f8:06:28:09:0f:9a:40:
02:74:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:09 2026 by rpki-client