Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: pHTffhIgtAdnv4SrTBlxtZ2l10MyiYAIAucGYTIsjV0=
Subject key identifier: C0:F4:36:3C:A5:85:B9:90:B6:BF:15:B6:FF:62:E5:75:9D:6D:46:DD
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019FA9077A2D2DA60AC6C17D2A0A6BBCD068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 14:01:07 +0000
Manifest this update: Tue 28 Jul 2026 14:01:07 +0000
Manifest next update: Wed 29 Jul 2026 14:01:07 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: anwvrB43+ubZ2C7rQE3I8aHJD+pr3NpSUGuIRLp8UGY=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:7a:2d:2d:a6:0a:c6:c1:7d:2a:0a:6b:bc:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jul 28 14:01:07 2026 GMT
Not After : Jul 29 14:01:07 2026 GMT
Subject: CN=c0f4363ca585b990b6bf15b6ff62e5759d6d46dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:ac:39:cd:c5:cc:47:a9:21:be:25:b9:4d:
85:4e:84:c8:aa:ec:58:2a:3e:a4:56:a4:56:13:c3:
6b:a4:8d:d8:f4:32:6e:fa:4d:3d:26:62:f6:da:8c:
3c:64:52:6f:9a:c8:13:11:20:4a:97:5f:4b:45:ac:
56:8b:81:c3:4c:e0:92:66:9e:01:55:e3:94:c2:cc:
7c:8d:97:52:fa:32:8b:bf:47:bf:a3:34:6e:7a:26:
34:43:16:d5:d2:bb:8b:90:be:cf:df:df:e0:93:1e:
78:49:fd:e4:e0:e6:b2:8e:b7:a5:e8:b1:fd:1f:75:
6c:27:72:40:c9:00:a9:49:37:44:6a:27:ce:33:16:
6a:25:f7:3f:d4:69:d4:49:ec:e1:15:dc:76:6b:e7:
0e:33:7b:ba:b3:84:73:0d:8c:f8:d0:7d:0e:78:ce:
8a:78:4d:fc:70:f7:7f:cc:f0:e6:91:f9:3c:2c:96:
d5:0a:c8:50:04:57:2e:27:8e:97:f0:c7:25:27:ca:
7c:00:fb:69:04:1d:c7:ce:01:63:d6:8b:f1:bf:9c:
ae:25:04:c0:18:08:04:2e:9c:c5:b1:da:23:83:32:
85:b8:0f:5f:32:eb:51:c3:eb:8c:79:bf:ba:8e:06:
3c:c5:21:bd:6c:a5:43:30:d5:67:8d:c7:13:28:4b:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:36:3C:A5:85:B9:90:B6:BF:15:B6:FF:62:E5:75:9D:6D:46:DD
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:a9:27:38:af:bb:f7:e8:bf:00:a4:d4:f1:9b:e2:d4:e2:
8c:f3:ff:da:ad:d2:a2:7f:90:12:1e:ef:0e:14:04:88:fe:e1:
ba:9d:65:bd:a4:9f:e3:72:5d:17:43:0d:34:62:4e:6d:05:3b:
b6:4d:6c:d9:98:ea:85:88:71:76:f8:46:3c:b7:3f:25:2e:41:
d2:a7:61:42:3e:e0:e0:41:38:dc:44:ea:c2:5b:c0:1f:09:ca:
c1:a7:14:2f:f9:20:5f:ed:e6:e0:79:0d:ec:fa:5e:3e:0e:4b:
32:06:73:a8:84:5b:85:51:c0:8a:1e:ef:67:d0:b5:d7:e0:82:
c5:f5:b1:c0:0c:a2:18:d0:00:2c:9a:40:08:e8:f7:63:be:33:
3d:01:59:7c:e3:ed:2d:25:83:68:86:a8:cc:6b:42:fa:dc:b6:
71:b5:06:66:d8:c8:7b:ab:82:da:b0:88:46:cd:2d:db:85:27:
f0:d4:57:2f:d1:0e:14:81:fc:05:84:da:ff:96:92:09:81:cf:
e7:08:11:5b:09:6f:9a:bd:28:3b:4a:12:34:d7:e7:87:1d:2c:
7f:aa:47:6c:7a:b6:44:f2:78:08:c2:38:fd:67:b7:4f:e9:cc:
43:3d:c0:42:ec:72:a9:ec:e0:8f:97:81:76:3c:82:7e:72:48:
73:99:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:59 2026 by rpki-client