Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: V26TrO35HP57t6TDmrokYfvylXPPWOwda5c2yorVQhI=
Subject key identifier: BA:10:F5:9C:AB:EC:40:54:57:C4:C1:2A:83:1C:23:45:23:25:1D:9A
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019D39409BF4951B5BFD5C7F75BCFF6BA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: h2PFLOVh50QoN7LgiQuHDCVbZs3oWkeNNpYFP/ST0WE=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9b:f4:95:1b:5b:fd:5c:7f:75:bc:ff:6b:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=ba10f59cabec405457c4c12a831c234523251d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:0f:07:4e:03:10:bf:0e:c2:ee:a1:e9:82:
7d:bb:a7:6e:09:0a:06:1e:3e:d9:61:be:35:9a:bc:
3d:8c:b6:4a:2a:97:f4:bb:8b:fd:d0:d9:97:77:c1:
7b:e6:e4:1b:67:a0:e2:9b:7b:b4:0e:8a:eb:98:00:
11:4c:51:72:0b:44:cb:13:4f:0e:aa:7b:9d:27:bc:
96:4d:e9:74:bf:fd:e6:79:1e:91:82:85:e1:46:d4:
94:9c:14:c2:30:7b:ad:fa:80:4f:0f:16:d2:86:3f:
44:9a:a8:01:30:51:c3:66:b3:db:21:fd:65:db:d4:
ee:47:08:a9:41:54:61:a7:31:c5:da:f4:23:1d:26:
98:70:70:01:6c:b6:68:19:f8:8b:a0:45:ae:6c:bb:
f0:35:b4:b8:75:f0:42:75:6a:60:ea:4c:94:60:e4:
60:42:08:98:19:37:e5:e0:51:de:75:56:46:cf:29:
a8:0e:92:69:e8:1b:ba:0b:32:7d:ea:74:f6:bc:e9:
b8:be:fb:1a:8f:2a:06:e8:ea:fb:91:fc:29:70:28:
28:e6:39:d6:ca:73:74:e8:97:79:36:4b:f9:57:25:
90:bb:ac:59:b0:d7:1b:0f:58:2c:66:14:22:f0:e4:
3e:eb:dd:e8:03:58:aa:24:bc:66:7f:8c:0d:86:10:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:F5:9C:AB:EC:40:54:57:C4:C1:2A:83:1C:23:45:23:25:1D:9A
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:dc:ca:4c:49:df:c5:38:e6:6a:29:f6:14:0e:75:c4:df:
51:46:2b:57:12:ea:9b:5a:e9:86:5c:4f:93:96:c9:85:3e:26:
7a:6a:2e:1d:3b:0b:58:3e:34:e7:48:67:e5:a6:b2:d3:de:e5:
ac:b4:4a:02:8b:7d:d4:a7:6a:c4:88:ef:db:1f:a6:b2:37:06:
3a:d4:c3:de:45:c3:6e:54:3b:29:58:2e:24:21:37:84:97:c1:
7a:90:92:aa:9b:81:2a:a7:9e:c3:91:dc:a8:72:dc:99:e5:43:
70:9d:35:00:6e:d3:9f:e1:de:43:d8:69:89:97:75:17:49:55:
5c:fa:f1:a1:cf:75:89:c1:96:b5:cc:b1:72:ba:3c:a8:c8:0d:
b3:77:e9:8c:78:88:59:4a:78:d3:f3:ee:9f:3e:c6:e4:1c:c7:
03:5a:6a:ed:f0:4d:3e:71:8f:07:99:5e:12:4c:bd:d3:14:12:
50:20:9e:56:8d:c7:47:59:f6:e1:a8:9d:9c:87:1d:fa:34:be:
77:88:7e:9a:c6:1c:a0:c4:91:eb:7e:fc:6b:d5:b3:6c:f7:27:
41:cd:9e:93:94:69:05:59:55:11:a0:3a:49:57:58:47:8f:32:
df:53:d5:45:b4:3d:59:98:91:ff:76:b2:ea:84:e1:7c:c8:b0:
8a:a8:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:04 2026 by rpki-client