Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: MksAvsKP3Bp2T1TfVr+j5vetEWwmtPIA2dVl7c93tUI=
Subject key identifier: FE:0E:8A:36:E8:6C:D9:89:79:5D:D6:7C:34:C2:9E:E0:8A:F6:D9:E1
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01A0C4E9718ADAF9F2F9ACFDF65A00F66A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 17:00:28 +0000
Manifest this update: Mon 21 Sep 2026 17:00:28 +0000
Manifest next update: Tue 22 Sep 2026 17:00:28 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: govViVXHdFH6V2EGNV4E/xXDL4ffo8UVwda+BxyWCes=)
2: YqgbCTBdte2ogbdDfcLF7Chsb3Y.roa (hash: kVqwoLLbEpvLFrLtgoJmEkwq7O0fcevuzW4yIfblZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:71:8a:da:f9:f2:f9:ac:fd:f6:5a:00:f6:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Sep 21 17:00:28 2026 GMT
Not After : Sep 22 17:00:28 2026 GMT
Subject: CN=fe0e8a36e86cd989795dd67c34c29ee08af6d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:cb:82:db:98:2e:60:14:c5:ca:60:87:39:
23:e5:25:92:f8:00:04:4b:dc:72:06:9d:48:e9:15:
bb:63:7f:f8:3d:9b:2f:15:3e:a3:e0:a5:3a:f1:ce:
81:70:c5:d2:1d:cc:8f:ae:8a:15:e1:96:1c:b0:2a:
b6:31:62:d0:1d:73:8f:a0:6f:66:f5:6e:04:8e:b9:
5a:22:fc:10:fa:86:5f:f5:81:4d:36:ab:63:62:13:
4e:3f:e8:cc:7f:76:5f:81:49:bb:f3:65:e6:0c:ef:
13:32:00:c6:87:b7:16:a5:06:8d:cc:54:73:40:6e:
7f:66:9f:2d:fd:ad:04:8e:fd:54:25:da:a3:bc:63:
99:fb:7f:d4:e8:d0:80:d3:e3:c5:7e:f1:bb:0b:e6:
e2:98:db:aa:11:cf:1f:61:95:67:f1:55:55:ab:9a:
09:ca:db:58:13:2e:16:6d:0a:d7:73:3c:fa:3a:d7:
cd:15:c5:f7:62:fa:4a:b1:fa:b8:de:e9:5e:7d:c6:
6f:82:d8:49:86:79:4d:25:64:b6:c0:7f:e5:e3:99:
d5:7b:c4:1e:ee:fd:ba:d8:a9:af:46:55:54:2e:19:
b7:8f:e5:6e:21:10:b6:66:9e:0c:71:b6:88:1c:88:
d3:f1:17:a2:19:f5:62:65:e8:9a:82:a1:bf:84:44:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:8A:36:E8:6C:D9:89:79:5D:D6:7C:34:C2:9E:E0:8A:F6:D9:E1
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d4:9e:20:f9:5a:3e:43:77:75:81:44:91:02:1e:f0:66:29:
51:0a:0e:12:b5:8c:22:14:6e:b1:3a:65:3a:fd:6e:2d:22:0a:
d4:cc:89:8b:99:fd:be:3f:99:19:74:96:b7:84:39:73:fc:fd:
ba:4b:98:78:74:e4:8b:1e:15:94:7e:0a:ce:0a:ee:47:81:82:
14:74:c6:c1:fb:f4:9a:91:05:f8:d8:0d:00:f8:b0:e8:19:06:
77:a5:2e:bf:52:cc:c0:19:35:a1:c0:5c:10:fd:0d:e4:03:50:
bd:24:e5:83:34:33:35:05:57:f3:61:11:f1:70:fc:6c:79:42:
4d:b2:5f:85:43:e1:d7:50:89:b8:90:8a:4f:36:37:01:bf:f7:
64:05:c0:44:1a:f7:48:23:7c:04:ad:6c:73:d4:19:cd:e5:29:
43:8f:04:51:a6:38:2f:e9:63:92:5a:6d:c5:56:12:91:0b:ac:
e2:c2:eb:a5:42:59:13:6e:8b:95:97:ad:af:b8:12:94:e5:09:
09:e2:4f:df:12:9f:f1:6e:a5:54:1e:17:98:04:33:7e:52:dd:
45:60:70:11:60:3c:75:1f:aa:c6:f1:9d:5c:33:d9:3d:f9:8c:
03:81:70:43:05:59:7c:a5:9b:be:23:ed:77:d4:69:23:9c:e5:
55:76:20:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6XGK2vny+az99loA9mpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjYwOTIxMTcwMDI4WhcNMjYwOTIyMTcwMDI4WjAzMTEwLwYDVQQD
EyhmZTBlOGEzNmU4NmNkOTg5Nzk1ZGQ2N2MzNGMyOWVlMDhhZjZkOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEPLgtuYLmAUxcpghzkj5SWS+AAE
S9xyBp1I6RW7Y3/4PZsvFT6j4KU68c6BcMXSHcyProoV4ZYcsCq2MWLQHXOPoG9m
9W4EjrlaIvwQ+oZf9YFNNqtjYhNOP+jMf3ZfgUm782XmDO8TMgDGh7cWpQaNzFRz
QG5/Zp8t/a0Ejv1UJdqjvGOZ+3/U6NCA0+PFfvG7C+bimNuqEc8fYZVn8VVVq5oJ
yttYEy4WbQrXczz6OtfNFcX3YvpKsfq43ulefcZvgthJhnlNJWS2wH/l45nVe8Qe
7v262KmvRlVULhm3j+VuIRC2Zp4McbaIHIjT8ReiGfViZeiagqG/hEQv6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4OijbobNmJeV3WfDTCnuCK9tnhMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINSeIPla
PkN3dYFEkQIe8GYpUQoOErWMIhRusTplOv1uLSIK1MyJi5n9vj+ZGXSWt4Q5c/z9
ukuYeHTkix4VlH4KzgruR4GCFHTGwfv0mpEF+NgNAPiw6BkGd6Uuv1LMwBk1ocBc
EP0N5ANQvSTlgzQzNQVX82ER8XD8bHlCTbJfhUPh11CJuJCKTzY3Ab/3ZAXARBr3
SCN8BK1sc9QZzeUpQ48EUaY4L+ljklptxVYSkQus4sLrpUJZE26LlZetr7gSlOUJ
CeJP3xKf8W6lVB4XmAQzflLdRWBwEWA8dR+qxvGdXDPZPfmMA4FwQwVZfKWbviPt
d9RpI5zlVXYgCg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:52:47 2026 by rpki-client