Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: pVxGh8qTCVQdMaJl9zPICuzeBBaQ/+kHl9dBHUlqdW4=
Subject key identifier: 7D:61:A7:D8:3F:B4:3A:91:37:22:39:E2:B4:53:D9:2F:A1:DA:90:85
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019F93C924E57F23333D2FD99B9D9A6F8B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:01:00 +0000
Manifest this update: Fri 24 Jul 2026 11:01:00 +0000
Manifest next update: Sat 25 Jul 2026 11:01:00 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: cObYuuhtFoh2c/YMrEdUH/Q6xobgI7QXwkfirVVtUak=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:24:e5:7f:23:33:3d:2f:d9:9b:9d:9a:6f:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jul 24 11:01:00 2026 GMT
Not After : Jul 25 11:01:00 2026 GMT
Subject: CN=7d61a7d83fb43a91372239e2b453d92fa1da9085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:3f:57:9f:b2:78:a3:b1:fd:6c:ba:27:f1:
ba:c7:6a:7d:43:2d:48:89:1c:13:7b:ff:87:5c:37:
52:5b:cf:88:47:42:04:18:27:4d:a2:3e:7c:43:0e:
fe:c0:03:c0:bf:dc:bd:3d:dd:07:f2:a9:40:dd:4b:
52:7c:e5:1a:11:c7:65:50:a6:f8:bb:3a:17:e2:b6:
a1:ca:47:c9:35:ab:d2:93:0b:1b:30:a1:1a:a7:4b:
53:f8:db:95:f1:eb:70:92:5a:94:7d:05:53:c1:d9:
61:04:03:b6:c6:41:1d:89:5b:11:29:63:1c:d3:8a:
3a:66:21:f7:30:ae:64:fc:66:dc:e7:85:0c:3a:bf:
5a:55:6b:f0:11:74:42:45:43:2b:f2:ae:41:d4:5c:
41:a6:e4:70:62:3c:7a:68:6f:89:88:e9:f6:b7:14:
19:ca:bc:cd:85:8e:6b:b6:c1:86:0d:5e:42:08:ac:
46:94:98:fa:3f:2c:fe:ae:35:28:9f:90:2d:62:9d:
cf:64:66:2d:f0:7d:a3:de:18:c6:c5:d5:d8:09:76:
c5:40:7c:df:3e:dd:d6:af:a6:92:0a:23:8a:95:e2:
97:48:ac:02:b8:78:47:e2:dc:bb:9f:66:ba:8c:5f:
73:53:f9:0e:2c:00:ea:c0:7a:2e:d2:90:90:8a:08:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:A7:D8:3F:B4:3A:91:37:22:39:E2:B4:53:D9:2F:A1:DA:90:85
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:ff:3c:84:80:0e:1a:5f:9d:a0:28:1e:e0:46:4b:81:39:
ed:15:04:20:20:24:4e:9b:36:63:1f:ad:fc:b3:f6:5f:b5:57:
19:c5:ed:05:8e:86:98:5a:17:d8:b5:c4:52:33:81:6a:5e:45:
21:89:31:d5:a6:14:d6:0c:5b:f1:b1:1d:c4:ea:6e:1c:c2:fb:
77:26:e0:8d:04:4c:21:ff:f1:d5:23:d8:8f:12:4e:08:c8:f0:
cd:63:d2:0a:e2:7a:19:ee:4f:3b:6d:15:8b:d8:ac:c2:79:f9:
ee:98:0b:fa:c1:f9:84:43:e2:56:30:4c:da:ae:a0:d9:e3:e6:
e0:48:5a:57:6e:fd:a4:ef:fb:c6:0f:9c:ad:b0:19:bc:93:8f:
a6:4c:87:0d:cd:4b:42:9d:20:38:60:16:01:d5:0b:3b:b7:f9:
a6:03:86:11:ed:d3:06:70:c2:e3:af:cb:24:94:15:a4:bd:4c:
9c:58:a4:c9:fe:e2:eb:bf:23:a2:21:42:a8:27:ad:c9:28:92:
fe:73:81:0f:ad:53:aa:35:fd:21:46:20:16:73:6c:c5:b1:e9:
0d:71:f4:43:73:eb:a6:97:3f:25:d1:55:0e:b8:ad:2a:b5:54:
19:90:c3:24:95:38:88:73:ed:53:72:70:ec:e7:f6:81:fc:fc:
c5:b5:5b:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TySTlfyMzPS/Zm52ab4tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjYwNzI0MTEwMTAwWhcNMjYwNzI1MTEwMTAwWjAzMTEwLwYDVQQD
Eyg3ZDYxYTdkODNmYjQzYTkxMzcyMjM5ZTJiNDUzZDkyZmExZGE5MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxA/V5+yeKOx/Wy6J/G6x2p9Qy1I
iRwTe/+HXDdSW8+IR0IEGCdNoj58Qw7+wAPAv9y9Pd0H8qlA3UtSfOUaEcdlUKb4
uzoX4rahykfJNavSkwsbMKEap0tT+NuV8etwklqUfQVTwdlhBAO2xkEdiVsRKWMc
04o6ZiH3MK5k/Gbc54UMOr9aVWvwEXRCRUMr8q5B1FxBpuRwYjx6aG+JiOn2txQZ
yrzNhY5rtsGGDV5CCKxGlJj6Pyz+rjUon5AtYp3PZGYt8H2j3hjGxdXYCXbFQHzf
Pt3Wr6aSCiOKleKXSKwCuHhH4ty7n2a6jF9zU/kOLADqwHou0pCQighEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1hp9g/tDqRNyI54rRT2S+h2pCFMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjX/PISA
DhpfnaAoHuBGS4E57RUEICAkTps2Yx+t/LP2X7VXGcXtBY6GmFoX2LXEUjOBal5F
IYkx1aYU1gxb8bEdxOpuHML7dybgjQRMIf/x1SPYjxJOCMjwzWPSCuJ6Ge5PO20V
i9iswnn57pgL+sH5hEPiVjBM2q6g2ePm4EhaV279pO/7xg+crbAZvJOPpkyHDc1L
Qp0gOGAWAdULO7f5pgOGEe3TBnDC46/LJJQVpL1MnFikyf7i678joiFCqCetySiS
/nOBD61TqjX9IUYgFnNsxbHpDXH0Q3Prppc/JdFVDritKrVUGZDDJJU4iHPtU3Jw
7Of2gfz8xbVb0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:46 2026 by rpki-client