Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 5mavuBXptZ/Cx0kI647zjcpy8lLVh4hwjztL2f9osKY=
Subject key identifier: 6F:73:67:A4:21:9F:2C:45:39:DF:B9:06:6F:B4:B9:06:8C:FF:E8:01
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019E1C7DFEFC4B52FD87DAFEACE11CE12DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 09CD
Signing time: Tue 12 May 2026 14:01:19 +0000
Manifest this update: Tue 12 May 2026 14:01:19 +0000
Manifest next update: Wed 13 May 2026 14:01:19 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: Rjlnm3BBLOMRJaRZIADffyfOxFcWCiLe6zkDQeywYVU=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:fe:fc:4b:52:fd:87:da:fe:ac:e1:1c:e1:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: May 12 14:01:19 2026 GMT
Not After : May 13 14:01:19 2026 GMT
Subject: CN=6f7367a4219f2c4539dfb9066fb4b9068cffe801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:73:62:91:75:76:36:ef:5b:9a:83:47:0b:
63:14:0b:38:ae:5b:94:53:6f:ef:d1:23:c5:d1:49:
e4:d5:e6:70:c3:8e:b8:dc:55:f1:a8:36:07:19:2b:
ca:fc:8f:83:28:c9:8c:e2:60:58:9d:d2:97:b7:50:
5d:e2:32:2b:12:e1:a0:b6:00:2c:cf:b5:d8:ab:6f:
01:f2:62:d1:ef:67:bd:f1:66:0f:a7:89:51:2c:44:
64:2a:0b:69:f4:5f:3a:9c:45:1e:cb:e3:d8:00:de:
af:f8:ae:bc:b5:e6:9c:ee:32:2b:de:7e:89:12:93:
2f:80:a1:1c:72:c1:f0:df:48:1d:b8:67:14:b0:4a:
b5:53:8b:a6:c4:7f:05:9c:84:42:6f:82:3f:0b:fe:
28:9c:15:29:53:cb:ee:d0:a0:7e:43:6b:a9:b3:84:
49:79:1b:f3:cd:c2:51:82:3c:ff:d9:7a:a0:fb:2c:
81:69:4e:d1:e1:6b:73:12:95:79:68:0f:07:0e:92:
b7:0e:fc:ed:15:3b:a4:a1:2e:ce:fd:b9:08:55:6d:
72:aa:4a:2c:b9:fa:46:eb:e9:28:60:55:99:69:d6:
da:c0:98:ab:ab:9b:b2:48:a3:29:6d:33:12:73:ec:
28:b3:ec:2e:12:2b:4d:fe:a1:89:71:99:12:4a:63:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:67:A4:21:9F:2C:45:39:DF:B9:06:6F:B4:B9:06:8C:FF:E8:01
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:b0:c1:f5:1a:a7:80:07:54:6d:67:16:5b:00:9f:00:0c:
da:62:8c:20:11:cf:59:4e:cb:ce:5f:5f:57:68:1b:c8:31:9e:
2b:27:db:34:15:62:b1:79:15:b7:d8:19:e4:11:6b:70:71:f2:
1a:09:51:d2:bf:4f:95:dd:51:0e:83:ef:ca:31:0a:fa:e8:c5:
7f:5f:4d:ef:f2:7b:0d:4d:ee:8b:e5:a6:c0:90:ac:b4:98:b1:
24:6d:57:f8:93:05:c2:53:21:9c:5c:48:2c:a9:8b:b4:88:3f:
d0:5a:ad:89:ed:15:39:a9:79:e0:54:38:36:19:ab:1f:89:d5:
aa:bf:5b:e8:43:75:11:89:fe:a5:dc:08:47:57:df:b5:f1:d6:
e4:0b:8f:ed:ef:5b:f6:e3:04:af:d7:4d:e9:44:0e:da:f0:4b:
60:20:62:9d:0c:ff:8b:e8:f4:ae:3b:e0:21:87:16:a1:cc:c8:
14:fe:8d:28:cd:b0:c8:78:a3:9d:16:f8:18:30:1c:36:20:82:
28:75:be:e9:fa:66:7d:5b:c4:0a:2a:ef:54:f8:cc:56:4f:e2:
70:4d:18:19:67:1c:08:f3:8a:47:95:e5:d5:07:48:e7:2b:51:
8f:28:8b:33:f5:a1:7d:66:2e:40:b1:3c:44:ef:1a:da:02:46:
f4:f2:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:56 2026 by rpki-client