Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: ByEETdBCdGscDu063DTYKhzHHi11KQM8gMyxSOnCOFI=
Subject key identifier: 6D:2D:CE:4A:B4:C1:A0:74:9D:7B:E9:3E:6C:70:7F:EA:4E:A3:B8:BE
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 01A0D2373114C55F8D5EFDC3CB0D279B67B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 07:00:27 +0000
Manifest this update: Thu 24 Sep 2026 07:00:27 +0000
Manifest next update: Fri 25 Sep 2026 07:00:27 +0000
Files and hashes: 1: 7LsBYX6UnQJjHO1OTwDr7b5AbQQ.roa (hash: x1DmSRqiESbAlCSOZoAMtbVAuMjmRTF3G6bOp+G4clM=)
2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: XQvJFuPeeWLGCw7jL3/rNd+Y63n6BO3/hH4XTKeYTj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:31:14:c5:5f:8d:5e:fd:c3:cb:0d:27:9b:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Sep 24 07:00:27 2026 GMT
Not After : Sep 25 07:00:27 2026 GMT
Subject: CN=6d2dce4ab4c1a0749d7be93e6c707fea4ea3b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:36:18:2f:9c:1e:eb:92:b9:84:b7:77:f2:
5d:29:6e:29:e2:d6:c0:cb:ed:37:ff:54:a1:09:70:
04:74:22:5f:ae:97:84:35:69:93:56:45:37:ed:9c:
79:28:1c:95:b9:6d:6f:93:27:1d:fb:21:65:8e:e5:
dd:b9:70:96:da:4d:43:dc:22:93:5e:39:76:54:7e:
46:5e:a3:25:2d:df:f4:8b:8c:9b:20:b3:e4:01:ea:
b6:ee:0a:f3:59:2e:4c:07:03:b5:24:5f:b3:90:3b:
76:74:23:f2:3b:8b:3f:14:c5:36:91:24:52:c3:e0:
53:c0:4d:a8:3a:fa:63:b5:d9:8f:43:de:dd:12:4c:
99:64:9c:72:45:cd:19:53:e3:24:e6:f2:ed:7f:bb:
9b:ed:e3:17:57:83:f2:8c:d2:23:2a:d7:6b:80:9a:
3b:fc:f0:93:fc:f1:23:ff:d2:78:3c:c1:84:af:f3:
be:76:96:a8:13:3b:9d:d7:dc:6f:b0:c8:fb:ea:6d:
8a:db:58:5d:bf:9c:f8:c0:74:24:9d:b4:94:37:36:
05:ca:ac:0c:e5:bf:c3:98:c2:ac:ba:76:0f:82:76:
c8:00:9e:8d:7e:bf:06:3c:1c:56:c2:23:b8:47:db:
32:92:50:e2:93:c0:57:88:e2:3e:72:ed:30:85:85:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2D:CE:4A:B4:C1:A0:74:9D:7B:E9:3E:6C:70:7F:EA:4E:A3:B8:BE
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:73:9d:d5:21:60:20:f5:d8:f5:bd:7c:88:3c:1b:41:af:
b2:72:08:50:5e:ce:f7:be:c2:fa:fc:08:db:04:46:a0:20:11:
04:59:da:5e:53:63:9c:f7:24:4f:01:70:b0:74:a3:6b:22:b6:
d2:4c:3a:2f:ef:17:bd:07:cc:8e:7e:4b:74:22:b3:0a:c2:ba:
3a:75:a4:47:e1:d9:fe:40:14:aa:35:ff:57:81:8f:05:d0:5e:
c3:c3:db:a5:27:98:f0:36:82:65:63:e9:a5:fe:f3:87:09:81:
56:8c:2a:ad:89:20:cd:49:f3:4b:10:5f:d2:f2:05:3b:3c:44:
ca:d2:e3:11:7c:10:ed:40:6f:f2:52:be:dc:c5:b6:5f:38:15:
27:06:13:98:fc:de:c5:e1:a1:87:e1:76:26:07:e3:20:18:26:
ae:b3:58:0e:9e:c2:75:75:5a:c5:8b:8d:e1:1e:9f:91:91:b7:
f1:98:ec:2a:41:75:74:c4:2d:47:74:ad:94:27:08:87:71:6e:
0f:4d:25:a5:17:e2:29:f2:d9:ee:25:a1:e3:a9:d1:e4:01:ce:
e1:88:91:45:05:3f:95:a6:b8:ca:39:67:0d:a8:46:d1:3b:16:
41:57:f1:0b:74:4a:de:c0:5f:2f:ab:39:01:46:dc:c3:13:a2:
ef:c0:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:14:23 2026 by rpki-client