Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: O2mFAG1rUoRsJYhtwUiMoeMJqMJODjM0z2ap+vmlJx4=
Subject key identifier: 02:0E:C9:9C:73:45:BB:F3:35:AC:85:C6:3C:C3:EE:30:92:49:AB:82
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01A0C8C6598AD28B6882381AB4317AA6CEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 11:00:37 +0000
Manifest this update: Tue 22 Sep 2026 11:00:37 +0000
Manifest next update: Wed 23 Sep 2026 11:00:37 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: v8IaZ+RwYOg44ZpPVu9JKAVBfbQzxn8OVpuzHbCxZXc=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:59:8a:d2:8b:68:82:38:1a:b4:31:7a:a6:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Sep 22 11:00:37 2026 GMT
Not After : Sep 23 11:00:37 2026 GMT
Subject: CN=020ec99c7345bbf335ac85c63cc3ee309249ab82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:91:f7:cd:1f:8e:cb:02:5f:8b:2d:5a:0d:
c1:b7:56:20:f9:37:79:6e:ff:eb:6a:97:a9:db:65:
8a:01:f5:24:9d:1a:73:0a:62:1f:9d:06:b3:bf:c7:
b5:8d:8f:f1:82:31:2d:8a:44:3e:c2:ce:04:cc:1b:
fc:24:f3:76:5b:6a:b4:18:67:04:fa:bc:31:68:63:
a7:8f:98:92:33:63:d7:d6:91:c8:84:ea:ad:59:b6:
38:f8:4f:d4:97:6c:90:0f:18:0d:5f:f6:08:22:52:
c9:16:70:92:a1:13:90:9f:3c:f9:4f:77:7b:f0:c3:
c8:a2:a3:ea:ab:8a:9d:36:8d:7b:be:de:23:da:31:
9e:17:7c:01:10:aa:0d:a6:3d:8b:40:f6:22:9c:fa:
28:60:9d:6c:2f:d0:f9:a4:36:4c:75:2a:73:fb:f0:
8d:fb:d7:8e:4b:18:95:9f:76:22:d1:50:82:10:b8:
b4:04:78:93:e9:a6:67:38:5d:84:76:9a:2c:e0:e2:
4a:24:2f:d6:72:d2:64:b5:bd:47:22:86:50:54:fc:
47:31:1a:4c:1c:4d:ea:ef:ce:09:2b:40:78:60:27:
cc:08:20:5a:2a:a4:03:17:b2:0e:d8:bd:64:93:dd:
1b:6d:e7:51:0e:51:4f:c6:7f:51:7a:aa:76:52:e5:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:C9:9C:73:45:BB:F3:35:AC:85:C6:3C:C3:EE:30:92:49:AB:82
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:6a:34:bf:c4:ad:24:fa:23:1c:b2:6b:4f:fa:c7:e6:57:
b5:6a:fe:cd:6f:42:9a:e5:eb:b8:46:34:1a:24:54:e7:e2:7c:
4a:18:b0:8e:fa:41:86:3d:f7:fa:ec:8b:b1:75:18:b1:8b:8e:
11:28:68:0a:0b:3c:5b:74:3c:30:0d:82:cc:61:49:ad:6e:03:
05:0b:26:05:66:7d:f8:da:b0:6b:f3:b7:9f:d6:b5:91:b2:1f:
cc:1c:ff:cf:64:7f:01:74:d4:0b:e7:05:bc:29:5a:15:ba:9c:
da:76:7b:6e:76:9b:8a:c6:f0:04:b0:dc:7d:2e:08:b2:8b:68:
00:d7:5a:18:38:f2:d8:9d:87:23:fb:63:a5:02:9b:a4:78:05:
cf:cc:d9:80:96:dd:aa:f8:21:8f:a5:17:c1:c8:04:4f:df:40:
ac:73:7e:ff:31:1d:ab:c8:34:0c:eb:3a:0a:bc:97:6f:fb:ae:
b1:7e:9a:4c:89:5e:21:c3:30:d9:ce:80:1e:09:95:5b:59:df:
c9:86:43:cc:57:46:4a:30:39:2a:fa:8d:7b:9d:92:fb:3a:a4:
3b:e5:0a:ef:3c:a6:3c:6e:f3:f1:1f:cd:51:6c:bb:e8:e0:1f:
a0:7b:77:4a:11:61:bd:a4:cb:12:44:6e:2d:c1:31:d2:e1:6a:
7c:f0:0f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxlmK0otogjgatDF6ps7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjYwOTIyMTEwMDM3WhcNMjYwOTIzMTEwMDM3WjAzMTEwLwYDVQQD
EygwMjBlYzk5YzczNDViYmYzMzVhYzg1YzYzY2MzZWUzMDkyNDlhYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlguR980fjssCX4stWg3Bt1Yg+Td5
bv/rapep22WKAfUknRpzCmIfnQazv8e1jY/xgjEtikQ+ws4EzBv8JPN2W2q0GGcE
+rwxaGOnj5iSM2PX1pHIhOqtWbY4+E/Ul2yQDxgNX/YIIlLJFnCSoROQnzz5T3d7
8MPIoqPqq4qdNo17vt4j2jGeF3wBEKoNpj2LQPYinPooYJ1sL9D5pDZMdSpz+/CN
+9eOSxiVn3Yi0VCCELi0BHiT6aZnOF2Edpos4OJKJC/WctJktb1HIoZQVPxHMRpM
HE3q784JK0B4YCfMCCBaKqQDF7IO2L1kk90bbedRDlFPxn9Reqp2UuXcGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIOyZxzRbvzNayFxjzD7jCSSauCMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFONqNL/E
rST6Ixyya0/6x+ZXtWr+zW9CmuXruEY0GiRU5+J8ShiwjvpBhj33+uyLsXUYsYuO
EShoCgs8W3Q8MA2CzGFJrW4DBQsmBWZ9+Nqwa/O3n9a1kbIfzBz/z2R/AXTUC+cF
vClaFbqc2nZ7bnabisbwBLDcfS4IsotoANdaGDjy2J2HI/tjpQKbpHgFz8zZgJbd
qvghj6UXwcgET99ArHN+/zEdq8g0DOs6CryXb/uusX6aTIleIcMw2c6AHgmVW1nf
yYZDzFdGSjA5KvqNe52S+zqkO+UK7zymPG7z8R/NUWy76OAfoHt3ShFhvaTLEkRu
LcEx0uFqfPAPMg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:41:00 2026 by rpki-client