Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: Ml+upSw9QZsD4ClPgQnjHUbXwzXQK46F14dMpTv2Wh0=
Subject key identifier: 33:F8:C1:3F:BF:F5:82:F1:A5:65:F7:50:00:3D:5A:AA:E7:32:F9:F7
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019EBEB63725F29BD230B63A7BEFD38FB924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0A21
Signing time: Sat 13 Jun 2026 02:01:13 +0000
Manifest this update: Sat 13 Jun 2026 02:01:13 +0000
Manifest next update: Sun 14 Jun 2026 02:01:13 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: 46yRQO4OQFvpSQ4grTbNj346bm8oMao41UYxsXfulKQ=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:37:25:f2:9b:d2:30:b6:3a:7b:ef:d3:8f:b9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jun 13 02:01:13 2026 GMT
Not After : Jun 14 02:01:13 2026 GMT
Subject: CN=33f8c13fbff582f1a565f750003d5aaae732f9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:40:e0:35:1c:ee:43:0c:8d:18:21:7c:c6:
9a:fa:39:45:b2:ef:c4:6c:d7:b3:2e:6d:ab:6e:b8:
b5:fa:d1:e6:2b:0b:44:cd:c9:5e:17:b7:a1:9f:09:
6f:39:62:06:f3:51:fe:01:90:54:1f:99:5e:cd:bf:
c7:5a:fc:7b:1c:83:f8:93:56:ee:82:aa:49:e9:ee:
76:3b:27:2d:e5:56:c5:51:b5:07:79:23:0d:7c:7e:
18:81:ec:8d:29:a9:54:4b:a6:63:82:4b:2e:b1:94:
9c:6c:d4:f1:e5:ba:ac:b7:83:c0:8d:d9:ae:1a:42:
12:fd:75:ff:94:74:e0:26:0e:25:12:ef:31:fc:3e:
7c:a5:4d:10:7c:f1:7b:c2:54:db:b6:43:29:bb:ac:
e9:d8:3a:51:84:9b:f5:23:0a:c9:e2:9b:69:db:31:
04:c7:32:a4:ff:0c:95:b5:b9:9f:a8:8b:0e:8e:31:
8b:e5:0c:bf:95:a8:42:00:69:17:5f:19:dd:06:6a:
01:4e:8d:a8:cb:46:b4:52:e3:89:70:f2:42:ac:5d:
33:f0:67:c6:d3:5d:fd:b5:1c:14:36:02:7e:34:d1:
ff:b0:dc:4d:1a:ad:5b:a6:6c:53:33:a8:22:f1:a0:
64:d9:1b:a4:d4:bd:b2:49:92:24:72:62:34:3d:91:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:C1:3F:BF:F5:82:F1:A5:65:F7:50:00:3D:5A:AA:E7:32:F9:F7
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:02:f0:97:92:ae:db:ee:e6:60:01:62:1f:33:c4:77:ee:f4:
55:bd:5e:8e:cf:5c:9f:d4:27:6b:4d:53:51:bf:6e:0a:10:69:
c1:d2:1d:9d:f6:51:ca:60:fe:29:9b:d2:d3:3b:a9:fa:db:8c:
4f:16:1c:c9:02:07:6d:09:24:46:bb:1b:ff:f2:37:2e:06:21:
b1:eb:4c:9f:3e:a4:80:b2:bd:55:e8:70:e9:5e:d0:b3:04:ed:
09:11:fe:2a:78:0f:04:f0:fb:11:f7:63:c2:e7:fe:4e:a5:c2:
2f:e6:ed:09:8a:c3:3c:54:45:53:16:74:51:0e:8d:8b:d4:08:
47:f3:c5:7f:f2:d5:18:57:38:c5:79:ad:07:c6:63:e3:ec:6c:
00:65:fb:70:88:75:85:39:70:1e:a7:28:ee:91:d8:63:c6:9f:
25:96:68:5d:4e:3e:c7:01:ad:1d:b6:a3:99:d0:56:8a:c1:80:
ab:4a:54:c3:88:1c:93:24:99:ea:40:b3:db:6d:ff:a3:9d:96:
dc:66:f5:e6:53:a0:de:0a:99:a2:40:bb:02:60:0c:49:44:c6:
ad:30:9c:05:92:6c:10:4e:ce:98:17:64:b1:0f:87:8a:b5:88:
18:28:7e:11:c3:d3:b0:97:f9:92:ef:95:92:c8:6b:8a:a2:f7:
0d:b5:b8:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tjcl8pvSMLY6e+/Tj7kkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjYwNjEzMDIwMTEzWhcNMjYwNjE0MDIwMTEzWjAzMTEwLwYDVQQD
EygzM2Y4YzEzZmJmZjU4MmYxYTU2NWY3NTAwMDNkNWFhYWU3MzJmOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/1A4DUc7kMMjRghfMaa+jlFsu/E
bNezLm2rbri1+tHmKwtEzcleF7ehnwlvOWIG81H+AZBUH5lezb/HWvx7HIP4k1bu
gqpJ6e52Oyct5VbFUbUHeSMNfH4YgeyNKalUS6ZjgksusZScbNTx5bqst4PAjdmu
GkIS/XX/lHTgJg4lEu8x/D58pU0QfPF7wlTbtkMpu6zp2DpRhJv1IwrJ4ptp2zEE
xzKk/wyVtbmfqIsOjjGL5Qy/lahCAGkXXxndBmoBTo2oy0a0UuOJcPJCrF0z8GfG
0139tRwUNgJ+NNH/sNxNGq1bpmxTM6gi8aBk2Ruk1L2ySZIkcmI0PZE8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP4wT+/9YLxpWX3UAA9WqrnMvn3MB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgLwl5Ku
2+7mYAFiHzPEd+70Vb1ejs9cn9Qna01TUb9uChBpwdIdnfZRymD+KZvS0zup+tuM
TxYcyQIHbQkkRrsb//I3LgYhsetMnz6kgLK9Vehw6V7QswTtCRH+KngPBPD7Efdj
wuf+TqXCL+btCYrDPFRFUxZ0UQ6Ni9QIR/PFf/LVGFc4xXmtB8Zj4+xsAGX7cIh1
hTlwHqco7pHYY8afJZZoXU4+xwGtHbajmdBWisGAq0pUw4gckySZ6kCz223/o52W
3Gb15lOg3gqZokC7AmAMSUTGrTCcBZJsEE7OmBdksQ+HirWIGCh+EcPTsJf5ku+V
kshriqL3DbW4Ig==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:18 2026 by rpki-client