Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 5LwrDXb9yCY6jgtqiG9KgIUneABQxBKPfcNj5Vr37mY=
Subject key identifier: 96:8A:25:1A:05:77:0B:6E:88:E2:9E:6E:B8:FC:84:32:26:2F:7A:37
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019DA378598C9B52DDEED7F1A60DB9D38468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:06 +0000
Manifest this update: Sun 19 Apr 2026 02:01:06 +0000
Manifest next update: Mon 20 Apr 2026 02:01:06 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: M+NocbrcHWR72YurQtPJD2ipp/hY9XipqK0nQID1ghY=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:59:8c:9b:52:dd:ee:d7:f1:a6:0d:b9:d3:84:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Apr 19 02:01:06 2026 GMT
Not After : Apr 20 02:01:06 2026 GMT
Subject: CN=968a251a05770b6e88e29e6eb8fc8432262f7a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:52:ba:bc:f2:02:c1:37:6e:36:bb:f7:d1:
7f:08:ab:1d:c4:da:c5:b2:b7:e7:36:2e:95:d8:b4:
55:20:90:66:72:eb:4b:c4:3e:d4:d6:66:48:fd:f7:
e5:cf:31:76:77:6f:41:26:93:6f:e8:b4:6a:2a:ad:
51:63:06:f6:11:9e:e5:07:b9:6b:3e:4e:da:21:cc:
71:21:43:e7:d5:e7:93:56:04:8b:9f:b0:8e:69:79:
c2:00:77:24:f5:73:f6:63:28:21:f2:1b:5c:ad:fc:
4f:36:30:c4:27:25:37:67:3a:f0:16:0a:b1:81:b9:
f1:c3:ab:73:0a:5a:dc:7e:ba:f0:cd:12:f2:9f:f1:
87:6d:91:16:7e:41:87:83:77:8d:85:d4:a2:16:aa:
0d:a2:6f:c3:f5:3f:8d:b9:ba:fc:9a:40:51:92:31:
08:76:d0:d2:66:e5:de:94:4e:93:14:4d:37:58:f8:
43:90:64:a9:24:b2:2a:58:68:15:ac:5a:81:40:99:
74:ea:cc:63:bd:96:8a:0a:f5:16:f9:97:06:43:52:
66:3e:f5:67:c6:04:90:c0:0b:b1:62:4c:0d:3b:72:
50:b2:06:fe:ee:3c:32:5b:54:63:00:86:e3:43:23:
14:50:98:46:2b:46:93:c4:5a:37:1e:9f:92:cd:f8:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:25:1A:05:77:0B:6E:88:E2:9E:6E:B8:FC:84:32:26:2F:7A:37
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:10:b2:c9:08:d2:ae:eb:5d:64:00:ce:77:ef:75:72:c7:
10:fd:b0:74:88:75:f9:2e:a3:f1:c1:c4:20:c5:ce:b7:a4:7a:
a7:4d:82:dd:1d:47:d7:4a:d0:0f:61:b6:17:ce:f7:09:53:d2:
0f:89:dd:95:1c:d1:c8:8a:67:16:05:5d:ca:2d:47:ae:7c:40:
73:3d:20:7e:94:8c:a8:9d:c4:86:09:26:ae:09:04:9f:4d:a4:
1c:e0:50:1e:1e:00:d3:2c:01:dd:47:4e:78:be:02:95:09:92:
8e:dd:0a:9b:5f:72:06:85:10:8e:ed:a0:e1:62:06:49:26:6e:
7b:17:72:ff:78:a0:89:80:56:e4:fd:b4:54:62:7e:e3:ae:c3:
ba:5c:4c:77:94:46:a9:a2:64:9c:4c:e3:3d:e7:45:7a:bb:80:
4b:e9:38:c5:74:30:4a:b6:c3:ac:6f:51:45:fb:40:7d:97:68:
27:5c:02:91:c9:0b:bf:cf:69:56:2e:d2:37:4c:09:83:f1:f7:
57:9b:12:93:7d:e4:73:82:5d:9e:c2:77:cc:29:00:4d:e3:09:
df:06:0b:b5:d9:90:6f:04:f3:7b:55:44:fd:54:d6:35:79:4c:
20:b5:23:10:46:a1:8d:9d:90:85:83:3f:cb:5f:ba:ae:3b:a8:
39:f7:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:59 2026 by rpki-client