Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: VwsKFD+KQDWmZvhhtZOEW09KJS0MaRWqytiygTogt6c=
Subject key identifier: 64:CC:D2:C0:C9:C5:3E:5D:CD:D0:84:56:41:4D:E8:6A:98:D3:42:7A
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 01A0CBFDF8F23508925096A3B6CD17CF788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0B31
Signing time: Wed 23 Sep 2026 02:00:14 +0000
Manifest this update: Wed 23 Sep 2026 02:00:14 +0000
Manifest next update: Thu 24 Sep 2026 02:00:14 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: Amx2/tUVB3VJh9YYqh2HSVN/ioWkOQQFPFB59bb6CZs=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fd:f8:f2:35:08:92:50:96:a3:b6:cd:17:cf:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Sep 23 02:00:14 2026 GMT
Not After : Sep 24 02:00:14 2026 GMT
Subject: CN=64ccd2c0c9c53e5dcdd08456414de86a98d3427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:33:45:fb:25:2a:29:71:16:e1:1c:68:49:
d8:f0:b2:8a:e8:9f:9a:3f:5e:80:cc:b5:f5:6a:7d:
5a:74:8b:e1:79:ab:d8:83:ce:37:29:00:15:66:b9:
19:e0:87:02:5e:ce:29:61:d2:0d:75:c3:91:48:02:
61:c4:05:f3:bd:31:9e:0c:5b:2d:8e:6c:e0:68:78:
8e:5d:81:e6:cb:72:5e:02:0a:fa:e5:33:6b:64:12:
7b:53:44:a2:7d:fe:ee:eb:aa:30:8f:03:4d:61:37:
02:ea:7c:b8:cf:ee:06:cd:6b:42:e6:31:5c:57:ea:
43:b5:29:62:d9:e0:a6:48:ad:a5:54:10:d6:11:b5:
fe:37:2a:09:5f:ff:7f:04:8e:ea:af:7b:7b:e9:24:
9b:22:f2:2f:b3:96:f4:b5:f5:f0:28:e1:a5:39:f7:
09:9d:41:61:91:ab:ca:71:b7:b3:7e:0b:65:5d:b4:
4d:45:8e:6f:5e:69:78:f8:8e:a5:a5:ac:9c:ef:cb:
a8:38:74:e1:e4:12:9b:55:fc:49:bb:d7:a9:53:a8:
7f:41:06:71:f2:8c:a9:5f:ea:c2:31:59:bc:30:13:
ef:b3:6a:c1:1e:3b:7e:24:10:e3:a9:47:99:f6:8c:
94:ee:87:30:63:2d:f6:d2:f2:58:22:a2:e1:54:c8:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:D2:C0:C9:C5:3E:5D:CD:D0:84:56:41:4D:E8:6A:98:D3:42:7A
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:ef:dc:3a:2a:ac:8d:f1:84:6f:9d:5a:a7:cc:61:8f:42:
c2:cb:94:4c:9f:21:9b:43:07:4c:f1:b9:0c:bb:33:5b:b0:6a:
70:ed:ec:19:c6:f0:e4:f1:cb:d3:80:0a:d3:5e:31:1d:d4:9a:
fe:4b:bb:fa:02:70:12:c9:5e:65:f8:94:0a:ba:31:c3:79:66:
6b:3b:a1:de:9a:48:96:3f:ba:a0:5b:01:98:e8:bb:a7:3e:66:
18:45:84:7e:a3:f3:0a:45:29:5a:f3:ee:aa:8d:8d:30:6c:65:
a9:64:99:25:09:c8:d3:85:f1:d0:a0:20:0c:1b:f3:da:1d:33:
c8:28:11:9f:8d:08:b4:3b:a8:49:6f:41:17:91:65:21:ea:56:
b8:e7:e1:22:45:0e:f9:e3:19:55:d5:4b:07:10:87:e0:66:88:
00:b2:4f:b9:0e:52:8d:7b:3c:c0:9f:4c:f8:18:9b:e1:72:70:
f5:3c:be:6d:05:7f:1c:56:1a:ff:1b:18:79:23:f9:19:d7:ee:
10:8a:fd:13:7e:c8:3e:6e:45:c1:54:37:31:0a:0c:20:eb:0c:
0a:be:3e:d7:c6:26:ac:cf:27:76:47:7e:13:6f:68:25:4a:17:
f2:78:d7:00:ee:e1:9c:3e:40:95:54:5d:b2:90:40:07:ad:4d:
12:d6:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:57:16 2026 by rpki-client