Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
File: ANK417oWAu9cE23Tn_aLK9s6hMI.mft (raw, json)
Hash identifier: U2Ap0dbWiezOIRS9Gc30VWwBhxA6ZsKkuTuxWDE+vRg=
Subject key identifier: 5A:88:C4:6A:81:EE:37:CD:8C:3D:A2:1C:67:3E:58:FB:5D:42:7A:1F
Authority key identifier: 00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
Certificate issuer: /CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Certificate serial: 01A0D048F04A2F5C28368D7C74A797381339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
Manifest number: 0225
Signing time: Wed 23 Sep 2026 22:00:36 +0000
Manifest this update: Wed 23 Sep 2026 22:00:36 +0000
Manifest next update: Thu 24 Sep 2026 22:00:36 +0000
Files and hashes: 1: 1-0zdBvt_qsNfD-CleGdZm9IvQXY.roa (hash: GiL91QFFwfS59sixHPS5qRrbgOXHYPRs4OdLxTV39XQ=)
2: ANK417oWAu9cE23Tn_aLK9s6hMI.crl (hash: PR+YPq++p7ziYSryNCF6PPbg36k+kTNTciI35Lz2a+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:f0:4a:2f:5c:28:36:8d:7c:74:a7:97:38:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d2b8d7ba1602ef5c136dd39ff68b2bdb3a84c2
Validity
Not Before: Sep 23 22:00:36 2026 GMT
Not After : Sep 24 22:00:36 2026 GMT
Subject: CN=5a88c46a81ee37cd8c3da21c673e58fb5d427a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:7d:2d:6f:e1:1d:ab:5b:db:7a:cc:e8:9b:
36:8b:b3:43:1f:74:5e:ac:de:0b:a1:cb:0e:67:b7:
54:3e:dc:57:43:a0:99:da:36:49:9a:c8:ab:4a:5a:
1d:b4:da:d5:ae:9b:20:1e:a0:74:d1:b0:a7:cd:e3:
34:fc:04:d1:fd:cc:06:24:fc:cf:7c:b4:93:6b:6b:
cb:a0:f7:91:81:c2:49:55:a0:a8:60:09:d0:08:05:
08:82:86:53:d1:fd:51:b5:fe:df:dc:bb:d7:8a:9c:
4e:3b:84:1c:38:a4:34:ad:d2:47:81:a5:61:73:97:
94:9b:53:7a:59:a1:d3:07:1f:73:eb:e6:ac:da:1f:
84:ef:56:fd:91:c9:d5:0a:8c:5c:d1:01:ad:e1:ca:
29:03:db:33:5b:72:bc:c2:89:ec:74:e4:d2:9e:36:
ec:e7:e6:ed:3d:06:42:00:42:46:f0:3d:f0:6f:a4:
d1:4b:56:de:44:2b:2b:cb:06:9d:17:12:cb:ac:3d:
36:9d:5f:b8:ea:3b:2d:aa:28:fe:ac:8e:5a:a5:d1:
c3:c5:dc:c9:f7:a6:20:63:85:81:d3:6f:09:f2:6a:
13:4a:ba:26:0c:8d:83:f5:24:ff:01:6e:c5:2d:58:
71:30:40:d0:7a:e7:16:bf:17:69:e1:dd:20:2f:83:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:C4:6A:81:EE:37:CD:8C:3D:A2:1C:67:3E:58:FB:5D:42:7A:1F
X509v3 Authority Key Identifier:
keyid:00:D2:B8:D7:BA:16:02:EF:5C:13:6D:D3:9F:F6:8B:2B:DB:3A:84:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANK417oWAu9cE23Tn_aLK9s6hMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46184d-3e5e-4e54-8e05-565ff237447f/1/ANK417oWAu9cE23Tn_aLK9s6hMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:1b:ad:9e:59:9c:85:95:b2:49:e5:86:0d:d4:b9:f0:b1:
4d:ff:41:c7:71:f2:6c:37:80:b5:d8:77:a7:14:79:3f:2a:40:
06:73:e3:66:c9:a8:ee:67:88:17:32:be:96:4c:1f:46:99:0c:
42:b0:29:2a:60:4e:12:55:ec:39:c1:c0:e6:b6:34:4d:7a:29:
8a:f8:55:85:75:7d:b1:89:16:84:dc:e6:6c:85:bf:ed:4c:76:
ff:84:08:70:95:cd:9b:15:26:21:dd:80:50:f3:f6:fd:17:aa:
8f:05:b5:dd:4a:7c:47:ae:36:2b:04:1c:3f:21:f8:f7:99:07:
b7:0d:f6:e9:e9:1a:32:42:0a:ad:3d:47:95:d7:b6:ad:50:dd:
34:da:20:3d:ad:13:25:3f:34:09:c0:94:25:0d:e5:f1:60:ec:
24:09:d3:31:4b:d5:51:34:78:0a:9e:2e:16:6e:11:4d:c8:03:
e8:e6:71:e9:69:89:cb:0c:83:92:69:62:b0:27:2c:7e:30:c3:
38:8f:b4:97:4a:d1:dc:bd:3d:4a:d7:71:51:7a:7b:e2:6d:7d:
90:be:80:bc:16:ba:11:2f:a5:c3:a4:09:5e:22:4e:d7:8b:43:
41:b6:d3:34:2a:0f:41:fc:42:81:c2:e2:c2:a9:7c:3b:c6:00:
9c:ec:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:46 2026 by rpki-client