Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 9DVuvGisT9KgrpDvvOzLZQuSEG1WSTTtZ3cjzFIZ1/s=
Subject key identifier: 79:5E:D3:FA:EF:92:3C:14:20:28:5B:25:C2:DF:AB:87:C1:26:EB:25
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019F8F476F773F16BF068A4C4215A4434A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0A8D
Signing time: Thu 23 Jul 2026 14:00:51 +0000
Manifest this update: Thu 23 Jul 2026 14:00:51 +0000
Manifest next update: Fri 24 Jul 2026 14:00:51 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: +E+opmIoC6QQ3QidyvF6jkqvh6v2RYfJibW1eAgF/8g=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:6f:77:3f:16:bf:06:8a:4c:42:15:a4:43:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jul 23 14:00:51 2026 GMT
Not After : Jul 24 14:00:51 2026 GMT
Subject: CN=795ed3faef923c1420285b25c2dfab87c126eb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:da:1e:91:80:21:d4:af:3d:fd:c9:70:34:
dd:de:db:98:f0:16:63:72:5b:9a:05:e6:a8:3c:ca:
f5:ae:12:76:82:b4:03:9a:91:e5:64:ab:f2:01:aa:
29:0d:77:77:4d:a2:87:b2:0c:c2:85:e7:46:da:bb:
36:6e:7a:ae:13:52:45:46:e9:b1:a2:d9:4b:f4:ec:
29:74:5d:13:32:82:51:b1:f3:e7:81:97:b0:b1:90:
68:16:d6:cd:ae:d5:d6:f5:20:c2:07:23:a7:a5:e9:
b8:ed:f8:12:62:c8:98:b1:c7:90:5d:26:f7:2b:62:
0e:9c:d9:23:1c:09:34:1f:f8:6e:d8:23:b3:c7:e7:
2f:4c:b1:76:49:ba:f7:7c:89:93:fd:ad:55:b0:f4:
fd:13:99:90:d8:6d:fc:d0:54:c7:7e:73:90:5b:be:
d7:71:72:38:cd:4f:76:e3:85:f1:66:93:3e:06:2d:
40:eb:2d:ef:3c:c1:0c:82:1b:f7:d9:4b:3f:9e:c3:
dd:60:07:b9:a1:a2:79:24:c1:fb:e6:d7:8e:03:c5:
88:8a:3f:c9:6e:13:cc:ba:46:50:31:30:6e:ae:32:
42:be:a7:f2:88:c9:06:c8:2f:9e:63:56:63:84:8f:
54:0e:ef:f6:78:7e:93:36:1e:f5:b5:af:92:5d:95:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:D3:FA:EF:92:3C:14:20:28:5B:25:C2:DF:AB:87:C1:26:EB:25
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:0c:8c:2e:67:dc:54:1a:d4:04:bf:a9:ee:80:1d:93:93:
f8:02:50:4b:7d:cb:d0:31:3f:f0:5d:38:c8:39:ca:6a:7d:f4:
f4:21:cd:34:00:fa:9e:6d:2b:2a:00:4c:63:5c:30:50:83:94:
fd:e0:a2:d0:65:f3:53:85:a3:51:e0:cf:35:eb:50:4f:8c:b5:
f6:6e:10:dd:30:fd:10:bb:99:4f:ab:3e:7c:c7:e8:3b:ee:fb:
71:37:b8:85:9d:be:03:c4:f1:44:5c:2a:22:6a:db:9c:ba:7e:
c9:bb:5d:c8:7b:43:80:1e:33:51:3a:82:45:0d:e6:76:0c:6d:
a5:7c:8b:b1:cf:09:fb:a8:34:9a:c9:6d:16:11:cc:7c:6b:2f:
c7:8c:dd:b4:4a:46:bb:1c:4b:b2:13:7b:f8:52:86:78:67:63:
eb:bf:da:f2:49:3b:57:8d:fe:4c:25:ec:27:9f:e7:c4:3b:1f:
1a:9b:a2:59:80:18:1c:c0:66:92:4c:59:d6:ba:66:9e:e8:94:
c0:f5:1d:17:6e:9b:e9:3e:ab:40:6d:18:2c:b1:46:79:9d:ca:
82:3e:e8:7e:df:ea:70:bd:8f:20:23:af:17:d4:d6:81:92:02:
2e:6f:2c:9d:91:44:bd:d0:9e:64:3d:a9:d9:da:68:1c:31:ae:
b2:fb:d5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR293Pxa/BopMQhWkQ0pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjYwNzIzMTQwMDUxWhcNMjYwNzI0MTQwMDUxWjAzMTEwLwYDVQQD
Eyg3OTVlZDNmYWVmOTIzYzE0MjAyODViMjVjMmRmYWI4N2MxMjZlYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4jaHpGAIdSvPf3JcDTd3tuY8BZj
cluaBeaoPMr1rhJ2grQDmpHlZKvyAaopDXd3TaKHsgzChedG2rs2bnquE1JFRumx
otlL9OwpdF0TMoJRsfPngZewsZBoFtbNrtXW9SDCByOnpem47fgSYsiYsceQXSb3
K2IOnNkjHAk0H/hu2COzx+cvTLF2Sbr3fImT/a1VsPT9E5mQ2G380FTHfnOQW77X
cXI4zU9244XxZpM+Bi1A6y3vPMEMghv32Us/nsPdYAe5oaJ5JMH75teOA8WIij/J
bhPMukZQMTBurjJCvqfyiMkGyC+eY1ZjhI9UDu/2eH6TNh71ta+SXZUi+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHle0/rvkjwUIChbJcLfq4fBJuslMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjIMjC5n
3FQa1AS/qe6AHZOT+AJQS33L0DE/8F04yDnKan309CHNNAD6nm0rKgBMY1wwUIOU
/eCi0GXzU4WjUeDPNetQT4y19m4Q3TD9ELuZT6s+fMfoO+77cTe4hZ2+A8TxRFwq
ImrbnLp+ybtdyHtDgB4zUTqCRQ3mdgxtpXyLsc8J+6g0msltFhHMfGsvx4zdtEpG
uxxLshN7+FKGeGdj67/a8kk7V43+TCXsJ5/nxDsfGpuiWYAYHMBmkkxZ1rpmnuiU
wPUdF26b6T6rQG0YLLFGeZ3Kgj7oft/qcL2PICOvF9TWgZICLm8snZFEvdCeZD2p
2dpoHDGusvvVPg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:50 2026 by rpki-client