Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: cY0k6jlRIDAHSzc/g+ux7FFD+yKij7ptrVcrqzNyhnE=
Subject key identifier: A5:7C:3F:8D:DF:23:43:2B:A0:AA:D1:11:8B:94:5F:83:08:F5:C0:DC
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019F1830E4905C047EFE773DEA1843996C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 11:01:25 +0000
Manifest this update: Tue 30 Jun 2026 11:01:25 +0000
Manifest next update: Wed 01 Jul 2026 11:01:25 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: DaL0KVmLXFUeyjKATxIA29cBd4nVW0/qYpHwz6soSEE=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:e4:90:5c:04:7e:fe:77:3d:ea:18:43:99:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jun 30 11:01:25 2026 GMT
Not After : Jul 1 11:01:25 2026 GMT
Subject: CN=a57c3f8ddf23432ba0aad1118b945f8308f5c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:28:73:93:4c:1b:29:8b:b2:a7:3e:3f:ac:
07:80:8b:46:b9:d6:f1:17:9d:20:f1:20:2a:c7:31:
30:1e:09:2f:84:14:f9:39:bd:a2:46:ad:a7:29:ac:
8f:86:d9:18:13:dd:15:95:4d:af:f1:6d:48:de:a7:
2b:27:a2:72:40:1e:a1:28:e0:50:95:bb:c2:fd:ea:
c9:e1:15:bc:6a:2a:2c:97:8e:46:e7:b0:b9:27:0d:
03:27:1e:aa:09:ee:7c:72:37:f9:38:d2:d7:c5:fc:
d6:42:2c:39:1d:79:8a:93:34:64:b2:3b:66:d7:66:
19:9b:2b:47:bd:70:b2:b5:c6:07:e4:4e:ce:ef:c4:
36:bb:7a:fc:eb:5d:d3:39:3b:c3:dc:c8:56:d1:af:
90:38:84:dc:16:b4:3a:b2:4e:d5:e0:65:74:87:21:
b5:13:e4:89:d5:7c:8f:5e:b0:d9:92:6f:91:a3:1d:
b4:ff:2b:a3:9e:bb:c8:18:25:06:5e:2e:50:cb:ff:
33:30:91:8f:82:e8:17:26:8c:2d:86:c4:09:f2:95:
46:15:cb:9a:00:28:92:b9:5b:b7:7d:d5:88:96:47:
9c:0d:e8:51:30:d5:12:d2:74:24:f0:24:5c:ce:84:
4a:fe:1f:62:ac:16:97:8a:31:67:92:d7:9a:94:1a:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:3F:8D:DF:23:43:2B:A0:AA:D1:11:8B:94:5F:83:08:F5:C0:DC
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:fb:8a:a4:5e:29:a2:6b:fc:d4:06:a0:76:9c:6a:50:a7:
0e:4e:1b:84:86:7b:cf:0a:9e:a4:08:f4:bb:69:a6:c3:8c:dc:
08:8b:9b:13:08:1b:ec:9c:3c:d7:b3:fb:8c:85:0b:5b:4a:ac:
23:8e:ae:cb:95:0f:b7:53:69:a9:4a:68:7c:c7:76:c4:f9:4b:
8a:72:ba:d4:a1:b1:30:19:a8:b8:0d:6b:9a:02:8f:ff:9a:b5:
13:76:d5:ed:26:2b:b5:0d:bf:ba:43:6a:17:d9:92:38:2e:da:
5b:a9:8e:c2:fe:69:3f:86:be:54:a9:2d:0a:59:30:38:a8:69:
81:18:a0:c3:c6:dc:a7:59:22:b8:d5:26:cb:89:58:33:68:ec:
7e:88:75:ae:f5:3d:03:33:d9:bd:ae:f3:98:6f:ad:72:c9:97:
bb:24:0b:16:34:de:e1:a7:38:61:b3:e3:19:0c:a9:13:35:4f:
17:9b:e5:36:d9:1f:b5:ab:5e:3a:e6:7e:b9:bc:d4:84:11:81:
37:0d:51:b7:8d:cd:23:99:bd:76:69:a6:df:5b:28:04:10:f7:
56:8f:ae:b1:12:c1:e7:c7:f9:af:19:05:df:02:20:b8:b0:e5:
d6:62:cf:45:a9:f3:37:12:a1:7a:69:09:f9:28:87:d7:a0:b5:
0e:5c:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:15 2026 by rpki-client