Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 8gF9pDLbbaQA+pRifMW0eBMT/V6ag8JC3z9OW/aIAT8=
Subject key identifier: 4B:15:A2:84:BB:C6:C5:11:4A:6B:67:F4:B5:D3:E3:8E:FE:21:34:C4
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019A7112FF62BFE60B842408BD370C9D3ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 07E5
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: ibTC9CSEs7UR3tibkMofZzkm7CL0j5DCyq+Ul/DS+MI=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ff:62:bf:e6:0b:84:24:08:bd:37:0c:9d:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=4b15a284bbc6c5114a6b67f4b5d3e38efe2134c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:43:56:29:cd:de:40:03:f8:4e:ab:fd:30:
0e:33:e5:ce:23:ee:78:74:b2:ed:af:ad:9d:28:c5:
5f:af:3a:20:91:4e:b3:74:dd:1e:74:b0:17:b2:8c:
57:fd:b9:fe:c0:ad:5e:c1:fa:5b:c0:67:a9:9f:29:
e6:be:6e:e9:95:09:13:f4:43:23:b8:83:30:5f:61:
ac:92:74:2f:ca:ba:6b:a6:b9:b3:df:cd:37:f0:a0:
b8:10:26:a3:86:ba:6b:54:43:85:b8:45:74:17:1a:
8f:f3:1e:dd:01:ce:55:52:97:5d:f7:c3:30:85:c3:
7b:74:12:65:ef:0c:51:c6:d6:e6:a1:cf:7a:85:87:
5a:ad:2a:31:75:06:23:e8:85:0b:5a:5e:fd:45:75:
e8:4d:c8:fd:a8:65:af:5c:fd:46:7a:44:06:8e:65:
d7:5e:a5:18:c5:31:8f:0b:0c:08:9a:5d:ea:aa:80:
4c:86:ab:f6:a6:59:29:88:59:f2:98:70:ce:2e:35:
6c:32:69:f8:83:5a:82:59:99:84:6f:3e:f8:ca:38:
b0:d2:9a:ee:39:a3:96:60:69:95:87:81:8e:61:4d:
11:31:e2:11:b3:2f:93:f0:fb:9a:d1:55:0f:a7:27:
53:bf:50:2d:f2:18:5f:96:0f:f8:56:d2:8a:dd:2c:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:A2:84:BB:C6:C5:11:4A:6B:67:F4:B5:D3:E3:8E:FE:21:34:C4
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:29:89:de:1b:4b:ad:15:60:a3:c5:df:71:87:1f:c5:eb:a0:
bf:8e:85:cf:73:b8:8e:a1:58:58:2a:f0:57:b4:1e:2e:7f:65:
9f:5a:89:e1:7b:72:92:27:b8:aa:df:ff:60:da:34:79:06:3d:
a2:95:d0:d1:ed:d4:c2:3d:d6:ca:ff:1e:04:6d:5b:9d:4f:68:
5a:c3:e7:f4:f0:f4:f3:b0:92:df:a5:81:9e:8f:33:67:1b:17:
80:b7:bd:bd:b8:c5:da:9f:ca:5c:c2:27:a1:5d:d0:58:f3:59:
90:f6:89:13:9e:ba:eb:86:65:19:a0:6a:eb:f2:30:75:a1:e5:
d7:4b:8a:c0:4c:55:e8:50:ee:ea:5b:17:b1:f4:da:94:09:de:
ed:76:8e:47:24:30:46:36:87:9a:0d:1b:5c:84:1b:8b:0e:d0:
4a:15:29:7f:d9:ff:79:dd:47:80:6c:7c:ef:0e:b4:3e:35:68:
e1:40:20:eb:4f:8d:81:39:a9:7d:e9:60:aa:a4:91:85:73:86:
ef:29:12:6d:91:27:67:d0:42:0f:47:64:71:7c:37:58:53:39:
c4:32:8d:ee:79:b9:8e:92:4e:50:18:f4:c3:69:9e:14:7e:08:
be:24:e4:7c:c4:ef:96:fd:3d:e7:b3:98:cb:6c:f6:1c:9c:af:
9c:5a:f6:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEv9iv+YLhCQIvTcMnT7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjUxMTExMDQwMTAxWhcNMjUxMTEyMDQwMTAxWjAzMTEwLwYDVQQD
Eyg0YjE1YTI4NGJiYzZjNTExNGE2YjY3ZjRiNWQzZTM4ZWZlMjEzNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwBDVinN3kAD+E6r/TAOM+XOI+54
dLLtr62dKMVfrzogkU6zdN0edLAXsoxX/bn+wK1ewfpbwGepnynmvm7plQkT9EMj
uIMwX2GsknQvyrprprmz38038KC4ECajhrprVEOFuEV0FxqP8x7dAc5VUpdd98Mw
hcN7dBJl7wxRxtbmoc96hYdarSoxdQYj6IULWl79RXXoTcj9qGWvXP1GekQGjmXX
XqUYxTGPCwwIml3qqoBMhqv2plkpiFnymHDOLjVsMmn4g1qCWZmEbz74yjiw0pru
OaOWYGmVh4GOYU0RMeIRsy+T8Pua0VUPpydTv1At8hhflg/4VtKK3SwsswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsVooS7xsURSmtn9LXT447+ITTEMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCmJ3htL
rRVgo8XfcYcfxeugv46Fz3O4jqFYWCrwV7QeLn9ln1qJ4Xtykie4qt//YNo0eQY9
opXQ0e3Uwj3Wyv8eBG1bnU9oWsPn9PD087CS36WBno8zZxsXgLe9vbjF2p/KXMIn
oV3QWPNZkPaJE56664ZlGaBq6/IwdaHl10uKwExV6FDu6lsXsfTalAne7XaORyQw
RjaHmg0bXIQbiw7QShUpf9n/ed1HgGx87w60PjVo4UAg60+NgTmpfelgqqSRhXOG
7ykSbZEnZ9BCD0dkcXw3WFM5xDKN7nm5jpJOUBj0w2meFH4IviTkfMTvlv0957OY
y2z2HJyvnFr2Xw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:27 2025 by rpki-client