Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: nVMr552QSmvNCAfgHq6Go4LUdSnkQ3lshpCpkApqi+k=
Subject key identifier: 48:14:1E:F1:1F:01:0B:29:D0:14:3D:A8:99:66:36:8E:E2:01:2B:FD
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 01A0CFDAC474A17E77652D0772B43B9EBF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0B33
Signing time: Wed 23 Sep 2026 20:00:15 +0000
Manifest this update: Wed 23 Sep 2026 20:00:15 +0000
Manifest next update: Thu 24 Sep 2026 20:00:15 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: e3LOLJC7H1euRK87MdL8K9gFnRE4/LnbcBsN4stFFt0=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:c4:74:a1:7e:77:65:2d:07:72:b4:3b:9e:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Sep 23 20:00:15 2026 GMT
Not After : Sep 24 20:00:15 2026 GMT
Subject: CN=48141ef11f010b29d0143da89966368ee2012bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:14:f5:d5:8d:37:89:04:09:e4:f0:7c:ba:
02:30:fe:32:fe:38:05:4e:86:c9:aa:8e:fe:db:42:
12:95:26:77:97:08:65:17:8a:83:66:1a:b6:00:9e:
aa:21:fb:4c:79:d9:d5:54:0c:58:31:ed:34:a5:3a:
ad:c1:3e:fa:6f:1e:1f:54:2a:17:bd:77:72:24:1c:
1a:ee:3e:97:96:16:67:89:ae:4f:f3:cf:61:5c:32:
60:29:1b:d9:97:9f:0b:86:85:46:4b:c1:4a:64:88:
f8:7c:93:c3:c4:a3:9f:fe:5c:53:fb:a2:1d:68:80:
a7:69:84:0f:eb:c8:1b:0d:f5:64:d4:46:0e:ae:84:
ea:e8:9b:28:20:b5:67:ac:aa:d9:86:07:75:20:8e:
55:85:52:14:a6:78:3f:97:ef:f9:61:aa:68:67:13:
dd:02:7e:1c:9d:56:85:31:b7:c0:82:4a:d3:38:25:
ff:29:65:17:c7:77:b2:86:bf:d4:0b:36:63:73:71:
87:bc:b5:61:53:a4:74:ed:e3:b1:a8:d9:ff:d7:d8:
74:11:71:68:73:21:b8:47:c7:3c:6e:14:23:82:34:
e6:bc:67:91:9b:71:ed:d4:47:94:00:87:eb:0b:2d:
fe:3e:a4:50:53:5c:a5:e1:dd:c7:13:ec:66:7b:69:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:1E:F1:1F:01:0B:29:D0:14:3D:A8:99:66:36:8E:E2:01:2B:FD
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b1:2a:44:b5:97:19:9a:a4:33:db:36:3a:e3:e6:e8:d1:e4:
77:d5:7d:d3:4c:a5:02:0b:2c:60:b2:83:00:01:52:52:b1:37:
93:6f:0f:97:b3:b5:b8:42:b8:8d:26:15:5a:99:01:f0:ae:43:
04:55:28:3a:d8:d3:c6:22:0d:b8:c6:72:87:cb:83:09:e5:10:
c8:44:af:bb:fd:cc:89:0c:52:de:1d:a3:f4:b4:64:82:43:5f:
8a:d4:45:8e:4a:96:a5:63:7d:e6:e7:7f:74:eb:c8:e9:f5:16:
98:e2:20:7f:a1:92:33:56:02:1d:7e:6c:bc:36:99:20:e4:b9:
16:f5:d4:b6:bb:fa:8e:20:5a:fd:16:d4:f0:9f:1b:d8:49:fb:
6b:cf:18:b6:9d:e8:0b:d2:04:26:14:02:2f:72:69:64:0e:d9:
38:9a:a8:41:b9:e9:f7:e1:8f:b3:49:e4:00:ff:78:da:0e:44:
8b:ac:9d:4f:c7:ca:8d:3e:b6:49:d4:4c:97:5e:e7:b5:fb:18:
18:88:e2:b4:34:14:2c:6c:2f:c2:6b:a8:51:c3:18:9f:7f:b3:
e9:be:a5:a2:58:59:1a:e4:9d:70:8e:46:e0:6b:86:cf:3d:3f:
15:53:70:85:11:88:1c:06:d4:d4:98:01:8c:ae:74:3b:50:9e:
5d:2e:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:12:39 2026 by rpki-client