Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: KxicURpY8CIPNfKt4LcaOQvUhTS+8YGOz0aC5z8kIfs=
Subject key identifier: 25:6F:44:FA:0E:C2:4A:A0:19:30:83:46:3B:14:8F:EF:6E:0E:E2:BC
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019CA9B3C25708B080B7B2A32DB6BDE5E418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 090D
Signing time: Sun 01 Mar 2026 14:00:56 +0000
Manifest this update: Sun 01 Mar 2026 14:00:56 +0000
Manifest next update: Mon 02 Mar 2026 14:00:56 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: 6EEOG+f3erOcObEafg/XakQzpRQNUT289QySXNfz6mE=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c2:57:08:b0:80:b7:b2:a3:2d:b6:bd:e5:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Mar 1 14:00:56 2026 GMT
Not After : Mar 2 14:00:56 2026 GMT
Subject: CN=256f44fa0ec24aa0193083463b148fef6e0ee2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:13:81:4d:34:2f:ed:bf:09:f4:1d:49:d9:
be:67:e5:c3:63:f9:fe:2d:b8:ae:dd:2c:fb:dc:77:
a2:54:c7:dc:95:8a:d6:63:6a:35:4a:8e:3c:bb:86:
1a:48:db:66:cd:42:8a:92:c0:fb:c7:12:77:ca:71:
bd:fe:ec:3b:de:d0:1a:cd:c7:bc:12:a5:04:c9:58:
fd:29:44:a1:04:a3:0d:60:7d:02:cc:ca:af:70:8f:
1d:23:df:74:7d:8f:83:f5:07:9e:75:96:31:3d:a0:
b2:c4:b3:38:42:b4:76:d5:f4:63:e7:f3:f4:fa:fe:
70:fc:8d:ce:02:6c:1a:bc:46:f1:ab:e1:b2:94:b5:
c6:5c:5e:d3:ae:69:56:4b:a4:2c:a9:11:1c:53:9b:
af:1a:b4:9d:80:09:5c:d5:24:89:af:5f:df:c8:82:
b6:37:2c:59:20:a3:cd:af:ca:2d:4d:4c:81:97:52:
21:59:90:1a:e9:5c:5b:24:f1:e1:91:ba:3c:1d:9c:
2f:48:8e:dd:f5:6a:15:51:36:9a:d0:84:3a:09:b6:
5e:2e:0f:e5:2f:b6:36:f7:8b:af:c7:f0:0e:f0:da:
1d:41:42:4d:e8:95:1e:b6:d6:e9:91:03:a2:7e:df:
7f:aa:94:7b:35:aa:63:70:09:56:66:27:b1:ae:93:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:44:FA:0E:C2:4A:A0:19:30:83:46:3B:14:8F:EF:6E:0E:E2:BC
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:b1:e1:b4:f7:48:27:bc:f8:bd:a3:61:76:87:08:b9:13:
d5:c0:07:96:c7:43:7b:f7:3c:c6:4e:fa:1b:78:6d:8f:c9:97:
5c:e9:90:24:e9:5a:2e:81:f4:61:2d:de:9c:39:59:e8:7d:4e:
25:67:c8:70:b1:41:a2:cb:7c:ae:f1:77:a2:d7:5a:24:f9:e3:
3d:ae:cb:54:56:2f:51:0e:70:12:96:07:a4:94:3e:bd:4f:b0:
e8:ef:cb:e8:4a:e1:fe:2b:e6:52:e3:87:7e:05:31:d9:79:3c:
30:80:3f:e4:c4:17:9a:dc:9f:ca:66:30:e5:40:df:04:f1:1e:
dd:71:02:87:8e:07:47:1d:11:2e:d7:da:18:27:cb:2c:1a:0b:
20:20:8a:5f:00:82:c0:99:8b:da:ae:5c:6f:96:85:40:54:7c:
b9:5b:57:d0:ce:1a:43:71:34:96:d5:59:c9:5d:8e:98:27:53:
5e:68:f9:73:28:25:cf:ce:11:cc:76:73:ab:c7:0d:30:9a:39:
29:ff:fd:5e:27:48:4c:28:8c:45:0e:13:86:cc:98:76:02:51:
06:a7:e0:47:7b:11:b3:15:eb:fb:1c:1c:9f:07:0c:42:c7:d7:
21:6a:b8:f6:bf:ea:77:3c:dc:31:ef:33:9a:b0:d2:ad:4c:9b:
ee:29:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:07 2026 by rpki-client