Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
File: ANK417oWAu9cE23Tn_aLK9s6hMI.mft (raw, json)
Hash identifier: NQmrYSe8cMryMtNMLYJxKkgR5+ISlhp+T933f/6TI0U=
Subject key identifier: 85:E9:30:6B:55:23:75:EF:F5:56:DE:FE:0D:B2:0C:26:00:84:57:08
Authority key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Certificate issuer: /CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Certificate serial: 019D333EB39A002F1A72C5B5789AA97AE68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
Manifest number: 46
Signing time: Sat 28 Mar 2026 07:00:40 +0000
Manifest this update: Sat 28 Mar 2026 07:00:40 +0000
Manifest next update: Sun 29 Mar 2026 07:00:40 +0000
Files and hashes: 1: 1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa (hash: GiL91QFFwfS59sixHPS5qRrbgOXHYPRs4OdLxTV39XQ=)
2: ANK417oWAu9cE23Tn_aLK9s6hMI.crl (hash: 4D9fx/DSA3z1rHaOtDmS9azZaNKhdhOrWQ61zi34Qg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:b3:9a:00:2f:1a:72:c5:b5:78:9a:a9:7a:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Validity
Not Before: Mar 28 07:00:40 2026 GMT
Not After : Mar 29 07:00:40 2026 GMT
Subject: CN=85e9306b552375eff556defe0db20c2600845708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:f2:9c:35:ac:9e:c6:86:4e:00:8e:00:0d:
78:36:4b:fa:10:68:e1:e7:5b:6e:f9:f8:bd:76:ef:
18:d5:8e:5b:e2:d6:c5:fa:fa:62:61:98:38:28:09:
5c:fc:96:8b:4d:63:0a:ec:64:9f:8e:6d:e4:f7:31:
09:d1:60:1d:34:cd:51:52:d8:1a:59:bc:2d:d6:ca:
33:7a:f7:8e:ae:df:81:e2:3b:1b:70:aa:4d:47:8c:
a8:c9:18:ee:9c:d7:7c:fd:bc:dd:ef:97:e2:bd:0d:
02:ca:d2:21:f5:4a:41:55:ee:51:48:44:c6:67:04:
fc:c5:01:77:43:ab:a2:fb:cd:27:9d:ac:54:75:83:
94:a6:34:6e:98:43:03:43:dc:8e:05:77:95:fa:f1:
f9:12:bc:67:ee:bf:88:c6:ca:1e:52:96:40:5e:4c:
88:37:74:6d:30:3f:f5:10:b3:a1:e0:0e:0c:2c:19:
7e:66:87:1e:c1:ed:6d:6e:10:ac:13:2a:bf:4b:2c:
de:1c:5b:86:46:fb:65:08:ba:f2:a4:54:e7:3f:04:
1b:41:b0:e9:26:f8:15:4c:87:f8:d0:db:9f:71:62:
8c:96:8b:1c:bc:0a:8e:fe:92:eb:48:63:9c:63:1a:
ea:c6:b1:4e:48:2f:99:fa:4a:e6:4f:9e:a0:6f:d1:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E9:30:6B:55:23:75:EF:F5:56:DE:FE:0D:B2:0C:26:00:84:57:08
X509v3 Authority Key Identifier:
keyid:00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:36:7c:e9:89:02:85:12:50:e9:c7:e1:ac:49:69:7a:a2:
85:4a:9f:aa:08:e3:ab:2a:a8:e1:d8:c3:65:47:7f:47:84:7d:
35:26:18:fe:a0:09:ee:49:3c:21:7a:c3:50:e2:14:4e:fa:aa:
f2:4d:97:bb:65:e2:bf:34:34:70:c9:73:60:be:6d:0c:97:c8:
fd:74:57:2f:9e:62:3d:09:c3:c8:59:07:2e:e7:38:14:f1:6d:
5c:93:48:2f:52:88:6e:4a:49:10:2f:ed:8d:86:f6:4a:3a:c2:
e0:0a:6c:99:23:9f:bb:d4:2d:6b:b8:0a:96:84:05:d9:94:f9:
d7:ca:44:95:7a:c3:7d:a7:40:a4:3c:6b:20:f6:c9:56:d4:9b:
6b:a0:94:df:1b:ed:df:a3:cf:0d:8b:0f:04:29:e2:4b:1b:fe:
c6:49:91:49:bb:08:d7:44:d3:33:2f:f4:6d:52:73:35:77:cd:
d9:30:8b:f0:04:05:19:88:6b:32:e6:0b:88:4d:ab:99:f8:27:
ad:45:fe:f4:19:bc:e1:b5:b9:bf:cf:52:71:fd:72:7d:a5:56:
f1:48:a5:31:01:93:ec:32:d5:96:c5:42:94:48:98:db:34:3b:
24:37:cb:7b:33:f1:f4:73:96:84:df:24:80:52:96:3d:50:71:
3b:3a:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:55:07 2026 by rpki-client