Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: L8Q65YYS6Jz9+qRiXUaGg5BP7l16vR4sD7JI/jD8nko=
Subject key identifier: 06:60:5C:1C:B6:E6:E1:9E:81:4C:C1:BA:45:57:87:A1:FE:90:16:70
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019D254CCA741C1FB7CB803E50009F314CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 094D
Signing time: Wed 25 Mar 2026 14:01:22 +0000
Manifest this update: Wed 25 Mar 2026 14:01:22 +0000
Manifest next update: Thu 26 Mar 2026 14:01:22 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: vK7a8cjHmCQQP6B4TTP+dwDqZBCx6fi0RJTNpkaWoFM=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ca:74:1c:1f:b7:cb:80:3e:50:00:9f:31:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Mar 25 14:01:22 2026 GMT
Not After : Mar 26 14:01:22 2026 GMT
Subject: CN=06605c1cb6e6e19e814cc1ba455787a1fe901670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:18:7c:06:d9:60:5c:12:72:d2:6f:4e:ec:
cc:b7:ea:5b:28:8e:59:60:04:ee:0c:81:5a:2e:7f:
15:32:61:32:57:1c:4d:11:c3:1d:7e:fd:62:7c:d3:
49:dc:80:c0:8a:e6:b6:96:93:d2:61:4c:aa:b7:65:
33:6f:41:58:e9:d7:3c:86:7a:83:ca:49:3e:c1:37:
2f:5d:b7:1e:b9:f0:28:90:75:49:f8:19:b1:66:ee:
49:d7:f8:39:9f:ac:f3:31:d6:c9:53:2d:38:8c:ea:
31:01:a8:32:5f:2b:4e:2d:c6:3f:df:d7:15:f2:36:
ee:48:ca:7d:2a:9f:6e:5e:4f:26:98:7d:70:8f:ed:
30:a5:fc:40:fc:f2:ca:7d:e9:89:e9:ea:1c:aa:85:
f2:21:1e:09:ba:9d:47:a5:ff:2e:70:46:fc:91:a5:
ba:c0:78:b4:8f:8d:5c:0d:3e:71:b2:2b:32:d9:2e:
6c:90:c2:4f:e5:6b:cc:d4:fe:09:13:7d:f0:47:9c:
5a:b4:db:68:de:70:6e:41:b7:20:87:6e:11:01:7a:
c5:f9:67:d6:08:43:66:7e:ae:89:22:6f:23:18:6f:
6e:32:ae:3b:13:2c:1e:2f:a0:57:ae:7e:46:11:43:
64:c3:7b:46:15:24:fe:66:6b:64:f7:51:0c:a9:39:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:60:5C:1C:B6:E6:E1:9E:81:4C:C1:BA:45:57:87:A1:FE:90:16:70
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:ae:0f:a3:5f:6f:c4:69:59:0b:2d:a0:c8:f7:8b:51:94:
9c:d2:7f:a6:5e:ad:37:a3:7f:0a:53:41:55:b5:b8:d3:65:8f:
9f:88:b1:85:e4:42:69:37:f1:76:da:76:dd:86:29:c3:d8:09:
0e:5a:db:74:ec:97:f1:37:b7:ce:e3:21:dc:8f:a9:b6:60:f4:
a1:fb:92:a8:ee:3f:29:ca:ec:ae:06:e3:74:35:d1:36:8e:4a:
c3:d4:4d:58:ec:24:85:45:9d:e9:82:48:a6:b9:57:f8:2f:f9:
ac:a6:74:16:3b:9f:0f:4f:9d:9e:5f:85:c9:8b:88:c2:5e:93:
dd:d1:7f:e8:3f:08:b3:4c:af:27:23:ed:68:78:e7:44:5b:b6:
5b:1d:5a:07:fd:98:b0:ce:d6:6c:03:27:ab:13:49:b0:08:94:
33:72:ab:90:17:7c:23:bf:8f:a0:f7:fb:f2:d1:16:8e:e0:3c:
0a:2d:90:0e:41:da:1f:83:e8:06:7c:57:7d:fb:5b:d2:b5:ab:
9f:0a:9c:88:f9:fe:25:91:96:50:95:0e:ca:c6:91:36:f6:b2:
c1:cd:ef:84:29:30:1c:35:89:c4:71:e0:72:72:f2:92:8b:11:
50:f9:3e:52:df:73:5a:98:d4:4d:af:de:61:ec:61:62:77:b2:
f4:be:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:57 2026 by rpki-client