Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: /UQrsE6sydH8a+LlaGjluig92KHH/c3dhNzjdiD8KAo=
Subject key identifier: 66:66:15:51:F2:71:DE:E3:5D:F5:65:5D:13:8E:2E:0F:81:CD:82:F6
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019D992AFD79BB455DA518136B160270463F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0989
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: dccF9/UagoYzFfoYZ7UYF3+TGwtQ4fgy899MEnMhgZ4=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fd:79:bb:45:5d:a5:18:13:6b:16:02:70:46:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=66661551f271dee35df5655d138e2e0f81cd82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:32:c2:c0:4b:fc:aa:08:a1:7e:b0:bb:06:
26:40:24:9c:1e:d7:39:da:68:19:c9:dc:b1:81:ce:
46:b7:11:7e:18:f0:ad:93:00:84:fb:b0:e4:d5:f6:
d8:56:98:42:7c:49:f7:ba:fe:ff:4f:0c:e9:1c:f9:
5c:3e:d0:8a:2c:2f:0c:74:29:59:ec:f6:fc:e8:9a:
7d:4a:7f:09:bf:af:22:21:b3:ee:5d:38:5b:7c:a2:
b9:af:d9:e5:c3:6c:5a:46:97:cb:0d:6c:7e:ae:a4:
ea:d6:7d:14:fb:c7:ab:9e:0c:d8:7f:3e:8b:b7:a7:
f4:80:b2:c6:e2:9e:db:d4:14:1c:8a:27:4c:9a:7e:
31:b2:e9:46:9c:90:e1:4c:a7:6c:39:4a:0f:ad:69:
bc:5c:0d:54:8a:66:25:2e:3e:51:f6:81:d7:a8:a4:
6a:b1:e9:b1:1d:6d:43:ec:92:24:15:04:81:15:a2:
64:54:9f:5b:0b:9c:97:d2:37:83:a6:1a:8b:21:09:
69:9e:aa:14:01:21:76:75:17:f2:a6:62:33:80:22:
2f:90:82:da:af:8f:3b:fc:ef:e4:47:dc:6f:e5:75:
f3:d5:e1:23:28:ce:a9:80:fc:0a:ce:c8:c6:0f:00:
08:c5:e3:74:b2:96:bf:94:76:b4:d9:42:a6:ec:65:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:66:15:51:F2:71:DE:E3:5D:F5:65:5D:13:8E:2E:0F:81:CD:82:F6
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:06:e0:62:43:1e:4d:99:69:19:02:e5:5a:21:99:b0:ff:49:
7c:33:9a:b0:df:c1:1b:8a:36:c5:c2:de:a0:63:d7:e7:bb:dd:
c9:8a:ca:72:ae:14:5c:4b:ad:d9:2e:17:69:82:5a:41:59:38:
9d:9e:82:81:35:9c:82:b8:54:48:64:62:92:b2:78:bf:cd:fe:
70:34:43:a7:f0:f4:f4:8f:20:59:e5:77:6d:dd:f9:60:05:1e:
8e:cf:dd:e1:1c:c3:ba:d2:ac:a6:23:89:49:b3:d5:6d:58:c5:
e4:ee:f8:ae:b9:a7:52:80:38:8b:c4:94:80:7f:05:d8:76:f8:
43:07:7d:af:71:ba:81:f2:f9:b1:1c:30:af:17:e9:cc:6f:40:
a3:ff:4b:fd:7f:75:bb:20:40:a7:19:67:6a:da:54:b6:07:f8:
55:9f:8b:63:b9:e7:2e:0e:88:24:82:18:5d:b0:6c:a5:04:01:
f0:f5:09:6c:7e:b3:12:69:a1:37:26:18:93:09:8c:bb:f9:b2:
07:08:f3:d0:9b:37:f0:93:7a:82:5e:ac:81:20:e6:51:a2:d0:
4f:cd:7e:ed:47:ce:e3:f5:05:28:40:d0:c2:7c:1b:86:8f:80:
77:8d:69:72:c0:9b:7a:85:c1:22:56:97:64:db:7b:8c:a0:4e:
5b:54:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:07 2026 by rpki-client