Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: lKf8XHe8TrIS6+iHUCGZtAql2gjrlBU6MDRBpEGSY9M=
Subject key identifier: 9D:F9:83:8A:6F:37:11:31:B0:DC:2C:D1:58:7E:D2:89:7E:D1:09:A4
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019FAA50C59061656382D6AAF3C81CE07917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0A9B
Signing time: Tue 28 Jul 2026 20:00:47 +0000
Manifest this update: Tue 28 Jul 2026 20:00:47 +0000
Manifest next update: Wed 29 Jul 2026 20:00:47 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: ftzZET+cBQjTlIplmEoifMyCqisvs4a+b53ptH117Jk=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c5:90:61:65:63:82:d6:aa:f3:c8:1c:e0:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jul 28 20:00:47 2026 GMT
Not After : Jul 29 20:00:47 2026 GMT
Subject: CN=9df9838a6f371131b0dc2cd1587ed2897ed109a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:7f:32:f1:47:fd:bf:88:cb:a7:c5:22:9d:
27:6f:85:17:7a:42:42:5d:c7:cf:20:30:17:77:75:
30:01:29:4d:35:f1:e0:de:21:6a:49:87:20:13:b6:
d7:cb:35:7c:5a:5a:51:19:f8:6d:9c:5a:80:df:19:
52:2c:b9:a9:ce:16:ab:88:a2:bc:21:f8:20:6c:4c:
ef:02:c5:1a:44:34:f2:34:0b:57:ac:02:81:ca:76:
5d:43:a8:80:f4:12:fd:78:89:0b:56:4b:6f:60:e9:
c1:74:d5:37:18:07:cf:e4:63:38:b1:17:40:71:1d:
be:ea:f4:3a:0e:08:98:ab:f4:c5:21:72:68:68:52:
eb:15:4b:67:a2:49:bf:53:8d:c1:68:df:20:17:46:
11:87:c0:b2:47:19:f1:4a:37:ec:34:8b:1d:aa:ec:
7c:4c:2c:ed:26:c9:68:b1:07:0c:8b:72:2f:48:a6:
f5:af:aa:6a:29:36:d1:49:f9:b4:48:db:d4:63:05:
4c:ee:f0:7e:87:4e:d9:ef:79:0b:83:79:ed:ab:ab:
65:55:c5:e1:81:6d:6f:e2:13:3e:4f:7c:96:63:ce:
87:83:54:62:32:18:cb:3b:68:e7:5c:02:28:c9:2f:
e4:57:2d:84:1f:26:b2:97:11:43:e5:10:b9:9a:f6:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:83:8A:6F:37:11:31:B0:DC:2C:D1:58:7E:D2:89:7E:D1:09:A4
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:a9:e0:32:b1:11:e1:95:e0:1a:c0:0e:46:1f:63:2c:51:
b4:36:4a:05:d8:e9:b3:03:d5:d4:b9:b5:49:2a:2f:9d:19:c8:
1d:4e:9e:0e:bc:81:26:17:00:c8:e8:e3:04:18:90:34:ca:5c:
79:b6:86:61:fb:88:50:ca:a5:37:49:94:bf:a3:46:19:f1:b1:
65:02:b4:0b:9c:b5:5b:2e:77:8e:fa:61:16:2d:cc:3d:b9:30:
cc:a4:fd:70:dc:8b:4d:78:17:0d:b6:f0:49:b0:ed:f9:7a:c8:
bf:4a:7f:a9:3d:21:d4:06:9f:72:eb:38:a3:c6:56:cb:44:4f:
21:62:d4:b4:70:a6:5b:30:a7:2b:45:e5:b3:5a:4a:91:5f:23:
63:ea:f7:62:73:6f:ce:ed:18:cb:0a:47:0c:14:42:4e:08:b7:
a2:c6:2d:ce:c4:a8:00:f0:f7:80:ef:7a:3d:9b:03:6d:48:44:
75:52:29:53:80:72:23:87:66:1c:b5:5c:21:d6:c6:5c:f1:e3:
a7:97:b9:58:dc:f5:5a:c7:ae:5e:13:19:80:ae:b5:b1:96:1b:
88:24:5c:a6:9c:47:ab:45:2d:b3:41:6c:63:38:51:a0:12:c0:
6f:fa:84:4e:5c:c7:a6:3f:24:b0:1a:56:66:bd:37:a9:f3:ca:
28:81:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:33 2026 by rpki-client