Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 2twmWIMXQ0mHt3kL+Ce06z1TppuVrsgnkjAidR1HDm8=
Subject key identifier: F0:C3:1C:05:4E:D6:59:E1:8E:B5:8C:01:25:73:04:08:75:E0:45:CB
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01A1DEDE787C439C3806C6B631EE50B8E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 11:01:24 +0000
Manifest this update: Sun 15 Nov 2026 11:01:24 +0000
Manifest next update: Mon 16 Nov 2026 11:01:24 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: dCJcvVP9cj7miBwNH6fDT7tTc6VGAE9cn7wJzXSPLFU=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:78:7c:43:9c:38:06:c6:b6:31:ee:50:b8:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Nov 15 11:01:24 2026 GMT
Not After : Nov 16 11:01:24 2026 GMT
Subject: CN=f0c31c054ed659e18eb58c012573040875e045cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:7e:b6:06:f5:67:01:8b:07:63:22:b9:c3:
62:bb:c0:9e:f6:cf:b1:a7:57:22:a1:38:f0:83:a1:
80:da:bc:b1:00:ed:f9:55:13:b7:6b:bd:4f:74:e1:
5a:ba:a2:a2:8b:06:d4:1c:58:5e:96:5f:1f:d5:54:
8d:08:fd:02:bf:cc:c4:65:45:31:59:36:b4:c5:30:
0f:4f:b4:b4:c7:d5:c5:a6:94:c7:32:59:e2:02:fa:
68:1b:28:8a:f1:d8:7c:aa:f2:30:de:d0:50:19:32:
22:7d:48:d7:d6:ea:1e:fc:bd:ae:10:60:a8:0b:fc:
6f:99:e8:e7:4b:f1:7b:8a:d4:63:c4:85:ef:fa:0e:
93:de:25:ca:34:df:4b:0e:e7:62:df:23:0b:f3:af:
d7:46:9d:83:da:31:70:8e:94:05:75:f2:a3:7f:61:
13:d4:24:2b:80:28:0d:8e:83:b3:f0:2b:2c:1c:eb:
48:bd:e4:99:f7:ca:0e:f4:ef:cd:9a:12:7b:e4:53:
e2:43:18:20:ca:78:fb:af:a8:46:ba:64:32:28:25:
de:1a:cc:33:44:13:32:74:b5:c9:1f:c1:cc:fb:58:
39:41:dc:11:5f:64:cd:60:87:75:c7:8c:cf:8f:c5:
45:e1:79:d8:81:b2:49:b6:7e:a8:3c:76:be:eb:5b:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:1C:05:4E:D6:59:E1:8E:B5:8C:01:25:73:04:08:75:E0:45:CB
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:51:b5:69:33:b3:82:1d:75:6f:43:26:75:b2:c6:91:db:
89:3f:e8:2f:e2:47:9e:64:54:7d:76:07:b2:39:4a:7a:31:b4:
61:1a:ff:bc:47:78:cf:34:9f:b1:22:d0:f0:e7:48:dd:2c:8b:
ca:3f:74:45:90:99:6a:4f:4f:fe:a6:91:48:f1:47:12:61:eb:
ad:b3:6f:b8:e8:50:d6:20:ca:bb:27:c0:23:54:30:bc:b8:0b:
11:9f:2c:eb:7c:d3:83:0d:90:32:3d:7d:b5:62:8a:0e:c4:1a:
0b:f1:df:75:c8:0e:16:b7:27:51:77:0d:db:5c:4c:e5:35:47:
ee:ef:21:59:03:bb:74:d5:69:df:81:a0:b9:75:11:b6:a8:58:
8a:74:06:e4:86:67:cd:0e:a1:92:f8:77:a5:f4:65:1e:d5:5f:
18:e2:b2:5b:9d:98:00:bc:4f:74:b3:62:60:5e:53:16:e1:c3:
36:94:2f:b5:32:48:8d:36:7e:e8:a1:be:18:d6:42:d8:6c:ca:
fc:5c:25:4b:f9:4f:15:86:b1:a1:51:37:d0:1c:45:8a:5d:82:
f6:6c:f5:4f:b9:7b:e0:b4:83:bc:42:6e:92:7f:bf:6c:84:ce:
bc:60:e8:17:1b:f9:78:e4:26:c8:94:be:0f:36:7e:16:10:ee:
06:02:90:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3nh8Q5w4Bsa2Me5QuOG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjYxMTE1MTEwMTI0WhcNMjYxMTE2MTEwMTI0WjAzMTEwLwYDVQQD
EyhmMGMzMWMwNTRlZDY1OWUxOGViNThjMDEyNTczMDQwODc1ZTA0NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTJ+tgb1ZwGLB2MiucNiu8Ce9s+x
p1cioTjwg6GA2ryxAO35VRO3a71PdOFauqKiiwbUHFhell8f1VSNCP0Cv8zEZUUx
WTa0xTAPT7S0x9XFppTHMlniAvpoGyiK8dh8qvIw3tBQGTIifUjX1uoe/L2uEGCo
C/xvmejnS/F7itRjxIXv+g6T3iXKNN9LDudi3yML86/XRp2D2jFwjpQFdfKjf2ET
1CQrgCgNjoOz8CssHOtIveSZ98oO9O/NmhJ75FPiQxggynj7r6hGumQyKCXeGswz
RBMydLXJH8HM+1g5QdwRX2TNYId1x4zPj8VF4XnYgbJJtn6oPHa+61sq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDDHAVO1lnhjrWMASVzBAh14EXLMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3lRtWkz
s4IddW9DJnWyxpHbiT/oL+JHnmRUfXYHsjlKejG0YRr/vEd4zzSfsSLQ8OdI3SyL
yj90RZCZak9P/qaRSPFHEmHrrbNvuOhQ1iDKuyfAI1QwvLgLEZ8s63zTgw2QMj19
tWKKDsQaC/HfdcgOFrcnUXcN21xM5TVH7u8hWQO7dNVp34GguXURtqhYinQG5IZn
zQ6hkvh3pfRlHtVfGOKyW52YALxPdLNiYF5TFuHDNpQvtTJIjTZ+6KG+GNZC2GzK
/FwlS/lPFYaxoVE30BxFil2C9mz1T7l74LSDvEJukn+/bITOvGDoFxv5eOQmyJS+
DzZ+FhDuBgKQ4Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:09 2026 by rpki-client