Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: CWr/wd16DqI7ccX1I+oA1uNL6wqNVlupL5TeCjYeTHY=
Subject key identifier: 5E:B0:13:1D:3A:BB:CA:4E:B6:91:B1:A9:C2:3E:24:74:20:F6:E9:24
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019CAA583ED9953198A8237925278895D6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: nfMG2bI9EtvKKw0rp46+TzIK+sO7xQs/0rdRrMKxypM=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3e:d9:95:31:98:a8:23:79:25:27:88:95:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=5eb0131d3abbca4eb691b1a9c23e247420f6e924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:ab:fe:84:ae:fb:07:ef:1f:ae:0c:ef:f1:
fc:6e:98:96:71:73:d4:36:b2:bb:0a:47:f8:15:eb:
56:d0:2f:23:0d:88:d1:72:f6:a9:96:74:c9:a7:6a:
fe:2d:a9:ac:1e:ba:91:16:0a:fd:5b:42:08:09:44:
54:0d:73:3a:df:a6:78:32:1f:56:c4:0c:43:bd:7f:
02:c9:8c:c9:a4:01:a0:5f:34:84:2c:88:be:af:58:
08:00:fa:7c:2c:8d:0a:82:2b:64:fb:29:42:02:ce:
f7:50:bf:89:6d:2a:d8:83:4f:63:e8:76:cf:c2:d1:
3f:76:e8:c7:1f:6e:5b:3a:9e:f8:6a:f8:a9:16:54:
d8:7d:b4:99:8d:14:6f:4c:bd:94:f6:05:ed:73:22:
7f:a6:5a:4c:d1:af:3d:67:df:6b:19:8f:f5:15:30:
f7:ed:47:ed:74:76:2d:b0:8f:92:64:93:22:be:71:
99:6b:96:f1:89:35:89:d7:49:8b:21:15:6e:b4:b6:
cb:69:fe:9d:f5:77:7a:5a:52:59:1a:83:b7:31:64:
fb:a3:c9:a0:e6:0c:f2:37:d0:31:37:86:04:5d:60:
c8:4b:85:69:96:8e:e0:a5:3c:34:28:c0:a0:1b:2c:
b0:e3:a6:28:b7:af:91:a6:60:24:8b:bd:5d:da:e0:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:13:1D:3A:BB:CA:4E:B6:91:B1:A9:C2:3E:24:74:20:F6:E9:24
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:ba:5f:c0:2b:7b:14:fa:54:3d:a5:b8:5e:82:28:df:cf:
29:55:9d:39:d2:56:13:3e:a1:75:4d:75:92:8d:5c:43:6b:4e:
d8:7b:32:78:06:26:6b:6a:fd:ed:8c:53:a4:21:bf:d9:27:ef:
49:63:7e:cf:1c:5d:ab:dc:5c:60:ba:8b:18:2d:59:42:73:ba:
02:f3:64:b3:d2:f6:17:08:0c:58:3c:1c:c8:04:ba:9f:f1:68:
c6:a2:04:2a:ad:a5:6e:a8:6d:78:b1:51:d0:32:4c:3d:ec:9c:
f5:a0:47:c1:c0:bb:78:e0:22:66:f0:9d:23:33:e2:39:be:69:
9d:08:da:13:73:55:78:e3:35:4c:26:7d:b9:d3:05:96:c2:6d:
34:41:06:61:ef:cd:9a:26:6b:e6:4c:e8:78:49:c6:6b:ec:11:
68:c7:83:cb:51:ee:74:ec:f8:ae:99:9c:0d:a8:d1:ac:e2:92:
47:34:eb:05:66:72:49:80:a6:57:8e:71:7f:41:89:70:8f:aa:
0f:a8:2d:50:47:03:20:da:1f:c8:e5:69:9a:39:69:e7:a5:af:
4a:d5:ac:be:69:e0:0d:86:3b:59:8a:36:3c:2b:5f:fe:90:f3:
42:d6:d5:af:af:ae:c4:cd:f1:17:04:ea:a3:09:a8:84:60:2a:
41:51:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:34 2026 by rpki-client