
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: wI0iVZemGFnerrF9FG6ylYfzrEPbvqT6q2iY1I70hug=
Subject key identifier: E7:86:32:BA:58:3B:15:81:BB:60:02:BA:C9:6E:3C:85:C6:FC:46:5D
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 019D27A8BF4D50D7B7A30B6FA8F9A4E65F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: 7LsBYX6UnQJjHO1OTwDr7b5AbQQ.roa (hash: x1DmSRqiESbAlCSOZoAMtbVAuMjmRTF3G6bOp+G4clM=)
2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: Ev6QZCv+JgHKuKvtDBem/PKfuxs76d4S96nvVv7f/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bf:4d:50:d7:b7:a3:0b:6f:a8:f9:a4:e6:5f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=e78632ba583b1581bb6002bac96e3c85c6fc465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:84:d8:7f:50:8a:01:a3:4b:4d:cb:44:2c:
22:0e:1b:71:c3:b0:ec:69:4a:a5:81:42:9e:a1:16:
28:b8:8f:a2:95:26:3e:23:4d:87:a7:0b:43:34:8d:
62:38:d2:d2:0e:97:2c:49:2f:4e:37:f9:d4:6e:12:
05:56:40:59:7b:2c:20:ce:a8:6c:9b:46:41:ca:16:
0e:01:1d:52:60:2e:de:08:91:ca:7f:ae:2d:56:25:
b8:33:74:7c:1e:8e:99:e3:61:14:00:c3:ab:95:93:
a3:c0:68:90:ad:21:fc:02:c9:9a:ed:95:56:1e:d2:
88:a6:7f:5d:67:92:41:a7:52:b3:fc:74:40:60:5c:
0a:f3:cd:25:bc:bd:3b:b8:6a:5a:e3:8e:98:94:6b:
77:86:a7:4d:ff:8f:4d:35:28:e7:de:c4:7a:30:a4:
fa:0a:05:b8:10:f5:a2:be:68:10:3d:7c:20:26:37:
82:33:f5:9a:69:74:62:27:35:6e:ec:4d:ec:9f:2c:
be:45:d6:ea:2f:17:f8:a8:08:cf:26:31:4d:08:9d:
83:13:7c:ff:b3:ea:57:a8:1b:f7:90:ba:9a:d3:c2:
b7:5c:c3:60:34:4c:26:e8:58:87:7e:ee:3d:e4:1e:
f4:16:01:56:30:b3:bc:57:9c:ea:8c:fe:59:88:eb:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:32:BA:58:3B:15:81:BB:60:02:BA:C9:6E:3C:85:C6:FC:46:5D
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:aa:a2:8a:58:25:a5:6b:55:1f:8e:99:71:fe:c0:5b:cd:
f6:04:b8:bb:16:b2:53:3e:c1:f6:8d:d4:57:75:f3:d9:23:53:
c3:74:eb:ec:48:6e:fe:27:61:fa:fd:c1:3a:15:cf:26:0e:cc:
f7:da:27:5e:e2:08:64:b9:46:aa:b6:42:cc:38:6e:5f:b5:55:
9c:85:45:4d:a9:a4:bd:54:49:05:26:9c:26:c3:7a:c0:ca:b9:
a7:34:8a:b9:24:ce:d6:dc:39:1a:90:35:2b:14:a5:1f:80:0e:
c7:6f:c7:dd:cb:b3:ee:3f:4d:57:53:b1:fd:59:9d:da:45:21:
71:0e:7e:5e:df:48:f3:82:2e:f1:94:4f:0f:15:49:48:57:5b:
3a:c6:1d:c5:77:40:1e:f8:dd:7f:cf:2e:08:57:1d:98:cd:bb:
4d:4b:5b:b7:6c:39:64:cf:be:0b:1e:35:fc:cb:68:5c:b2:66:
90:a9:21:19:fb:a1:5a:1c:8b:77:de:75:95:b2:d5:6d:ef:29:
00:ea:e7:e0:85:fd:e6:09:85:aa:6e:e9:6e:b5:67:23:40:73:
87:37:01:11:17:ad:f7:0e:09:04:61:3d:de:2b:fb:76:64:e2:
02:3c:ac:5f:f9:07:61:91:09:d7:8a:99:53:68:7d:62:9b:ae:
85:a5:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:39 2026 by rpki-client