Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: NVXRJD4prt74emNExH7jWx/BF6wewlCijzZ+4oCCD4o=
Subject key identifier: B3:F9:05:5D:7A:99:5C:E0:3C:2C:7A:24:EA:41:B1:A6:C7:A3:FE:12
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019D25F12B1CEE6D806052B96CC42F4DAA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: mOfJvt2lWyF/3fDvrHc/UvtCBBvPuHklX55IxusDBvc=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2b:1c:ee:6d:80:60:52:b9:6c:c4:2f:4d:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=b3f9055d7a995ce03c2c7a24ea41b1a6c7a3fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:3c:78:1b:85:70:3d:6b:b1:8b:a1:a5:85:
33:18:01:69:a3:b1:9c:57:1f:1f:3e:07:a1:1e:e1:
07:09:68:51:f4:60:b8:06:ee:01:c8:a6:f0:36:02:
ef:22:9c:8e:7f:d6:e6:ba:3e:80:a3:c6:1d:ab:3c:
ea:e3:04:fe:11:fc:53:6a:fb:87:0a:db:b9:62:07:
26:90:ef:58:a7:a3:6c:77:de:d9:bc:88:25:23:2e:
b0:46:53:a6:6c:6b:07:e0:9d:10:f2:20:c2:1f:d8:
4d:40:2a:a2:74:9b:c9:f3:a7:f7:9c:fb:2b:ee:3c:
67:71:84:84:18:fd:1f:01:ac:3a:5e:89:fb:58:60:
ba:a5:79:51:40:4a:24:78:c5:39:dd:73:25:cf:23:
74:d9:9d:b1:77:20:e3:0c:80:13:54:5a:90:ee:22:
85:c6:52:a6:cd:ee:29:9d:e9:0c:eb:50:cc:a4:ca:
87:3f:47:a6:bf:08:d6:2f:ef:58:68:1c:39:81:3f:
35:5e:48:49:96:37:c1:c9:02:01:ec:22:70:9f:1f:
2d:18:3f:a8:86:b5:5b:c3:d8:6c:4e:ab:c3:a1:39:
2b:6e:a1:63:05:ca:aa:bb:5e:e6:a4:25:92:71:74:
35:52:2f:fc:54:37:ad:b3:f3:eb:3f:d8:b4:6f:06:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:05:5D:7A:99:5C:E0:3C:2C:7A:24:EA:41:B1:A6:C7:A3:FE:12
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:19:9f:6a:2f:57:ad:15:b5:6e:f6:d7:85:8f:b2:1c:96:84:
04:81:b9:64:bd:c3:81:78:de:67:09:c1:78:ab:96:87:48:4f:
2a:bb:d2:35:03:92:29:4d:f3:6e:c1:26:8d:7d:68:17:bf:4e:
79:7e:e9:8a:7c:32:f7:e3:4b:da:f1:29:d6:48:28:32:2a:8e:
79:d7:0a:27:9e:21:62:ac:18:cc:7e:5b:86:b9:71:d5:c7:f9:
22:a1:5f:20:39:d8:8b:e6:81:24:b4:b3:52:93:7e:65:97:55:
4b:79:9a:d4:cd:02:d4:9a:76:8d:a3:0f:7f:9a:76:8c:62:e7:
4d:af:35:de:e2:0e:0b:1a:9c:eb:46:cd:81:32:f3:13:7d:fc:
56:e7:9c:a0:5a:c3:3a:ff:88:79:c9:e1:75:68:78:7a:1d:80:
50:99:91:00:0d:ef:dd:32:ef:e4:0e:e3:8b:d6:42:2b:af:51:
90:84:2d:45:a7:f5:3f:97:53:d7:d4:55:e2:69:04:c2:7d:3f:
77:58:da:83:39:76:f5:85:32:fc:7e:fe:01:f2:ca:e9:55:5b:
b8:99:07:05:9c:eb:a4:ac:5b:f8:41:9e:ad:8d:f8:f4:18:87:
24:60:4c:ab:31:d5:e2:ff:bc:22:ac:5b:83:7b:59:1c:49:9e:
c5:b2:0f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Ssc7m2AYFK5bMQvTaoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjYwMzI1MTcwMDU1WhcNMjYwMzI2MTcwMDU1WjAzMTEwLwYDVQQD
EyhiM2Y5MDU1ZDdhOTk1Y2UwM2MyYzdhMjRlYTQxYjFhNmM3YTNmZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1A8eBuFcD1rsYuhpYUzGAFpo7Gc
Vx8fPgehHuEHCWhR9GC4Bu4ByKbwNgLvIpyOf9bmuj6Ao8Ydqzzq4wT+EfxTavuH
Ctu5YgcmkO9Yp6Nsd97ZvIglIy6wRlOmbGsH4J0Q8iDCH9hNQCqidJvJ86f3nPsr
7jxncYSEGP0fAaw6Xon7WGC6pXlRQEokeMU53XMlzyN02Z2xdyDjDIATVFqQ7iKF
xlKmze4pnekM61DMpMqHP0emvwjWL+9YaBw5gT81XkhJljfByQIB7CJwnx8tGD+o
hrVbw9hsTqvDoTkrbqFjBcqqu17mpCWScXQ1Ui/8VDets/PrP9i0bwZHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP5BV16mVzgPCx6JOpBsabHo/4SMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRmfai9X
rRW1bvbXhY+yHJaEBIG5ZL3DgXjeZwnBeKuWh0hPKrvSNQOSKU3zbsEmjX1oF79O
eX7pinwy9+NL2vEp1kgoMiqOedcKJ54hYqwYzH5bhrlx1cf5IqFfIDnYi+aBJLSz
UpN+ZZdVS3ma1M0C1Jp2jaMPf5p2jGLnTa813uIOCxqc60bNgTLzE338VuecoFrD
Ov+IecnhdWh4eh2AUJmRAA3v3TLv5A7ji9ZCK69RkIQtRaf1P5dT19RV4mkEwn0/
d1jagzl29YUy/H7+AfLK6VVbuJkHBZzrpKxb+EGerY349BiHJGBMqzHV4v+8Iqxb
g3tZHEmexbIPvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:29 2026 by rpki-client