Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: m7wbHOBZkOflOU2fbaTQ09AwHX0v6dH4PzkuN0pVcaw=
Subject key identifier: E0:23:1E:27:12:EB:F7:8C:77:AC:5B:09:1A:3B:B4:EC:D9:C5:D1:70
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019E1D22FAF004F098D82927373F3D09E255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:01:32 +0000
Manifest this update: Tue 12 May 2026 17:01:32 +0000
Manifest next update: Wed 13 May 2026 17:01:32 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: cU+Mwnst4Z6cI3+cUPxTQK3tJarmUu4mWkLMwwlRwCY=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fa:f0:04:f0:98:d8:29:27:37:3f:3d:09:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: May 12 17:01:32 2026 GMT
Not After : May 13 17:01:32 2026 GMT
Subject: CN=e0231e2712ebf78c77ac5b091a3bb4ecd9c5d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:c2:a9:41:6f:9f:a2:62:c1:bf:1c:59:8d:
d2:ec:a7:1b:6f:2b:61:8e:16:8a:8b:35:56:41:ed:
27:a8:4a:97:de:11:3c:1f:9d:fb:a5:f7:35:17:96:
45:7d:ab:df:76:b9:a1:ee:3c:bb:c7:60:ce:c3:ad:
8a:65:df:bd:c0:7e:c8:8b:8b:2b:33:aa:1f:33:3f:
4d:35:ed:c7:00:d9:e2:db:50:4a:a9:75:82:9f:d7:
1e:22:ce:0f:a1:3f:df:02:69:84:28:c9:e3:d5:79:
50:c9:71:d0:8b:67:db:7b:90:3d:78:36:67:93:43:
8c:e6:26:9e:c0:39:4d:79:60:03:a6:1d:0c:08:d5:
4c:64:dd:0c:05:6a:e6:8b:23:d8:4a:39:ee:0e:3c:
43:24:05:3f:d7:27:26:9b:c5:b5:48:6c:0f:42:21:
f5:0a:e5:b8:c9:90:03:53:d0:b7:ad:72:65:33:62:
0f:98:78:56:d9:19:7b:05:c6:f8:a8:cc:c7:b3:ff:
5e:bb:25:a5:4d:4d:55:af:42:39:07:ca:87:db:99:
ca:95:7a:d4:00:89:30:38:eb:5e:1b:23:43:41:8c:
16:3c:fd:f4:f3:3d:60:c4:f6:aa:04:2a:ee:e8:35:
f5:d6:10:f3:84:77:25:1a:48:4b:ca:a9:c0:10:3b:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:1E:27:12:EB:F7:8C:77:AC:5B:09:1A:3B:B4:EC:D9:C5:D1:70
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e8:c1:9f:f9:51:74:0d:67:14:b3:4e:6b:af:d1:47:e8:15:
04:e2:4d:21:31:3e:9b:c4:10:5e:ed:70:9b:83:09:0a:3a:00:
a5:1a:ef:63:d8:9b:3d:c6:4a:58:9f:d3:b4:17:63:68:ac:4e:
8c:d6:cb:76:fb:50:1c:51:32:7e:64:ea:5c:90:5e:47:29:bf:
3c:d3:1e:92:c4:cb:73:96:dd:c8:75:58:aa:57:e3:aa:03:a2:
51:11:b7:00:f9:de:9e:d7:70:08:58:e8:fe:cc:c2:7a:53:90:
f6:92:f8:8a:92:17:61:13:fd:cf:73:d6:bd:a7:00:3e:8d:50:
ec:da:c1:24:59:4b:03:e7:41:b8:98:bb:69:e9:2a:4f:ec:6c:
4b:d5:4a:c3:82:95:d1:a8:c3:f0:0c:e8:3d:50:15:20:ad:97:
ed:1c:95:b8:0c:80:57:8e:da:7d:f7:61:d4:59:a8:42:ef:54:
0e:2f:dc:ef:ad:43:47:4f:a9:f9:57:70:66:3f:48:fc:b9:7d:
2d:85:ec:49:75:b8:0e:9b:87:c2:92:ae:db:04:0d:e0:37:4c:
3a:af:70:ed:2b:0a:70:b4:59:b6:60:eb:c5:c2:37:02:2a:6b:
fd:0e:56:0c:10:e6:e2:17:c9:9a:13:12:ad:ae:22:27:e4:b2:
db:d8:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:59 2026 by rpki-client