Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: U4TZXful7m45JxFUdeeVgWSxylJ2UgkN6zH4D0nt6iQ=
Subject key identifier: 9F:B1:79:50:9B:D5:B6:97:E1:5A:5F:B0:B2:DC:80:93:9D:55:20:70
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 01A0EEC217959585A6F4B14BCD174B77383D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0B43
Signing time: Tue 29 Sep 2026 20:01:32 +0000
Manifest this update: Tue 29 Sep 2026 20:01:32 +0000
Manifest next update: Wed 30 Sep 2026 20:01:32 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: bJ6/y4MeqiCroC0++DX+VQTW6199+WJ/05rdG71BuDg=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c2:17:95:95:85:a6:f4:b1:4b:cd:17:4b:77:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Sep 29 20:01:32 2026 GMT
Not After : Sep 30 20:01:32 2026 GMT
Subject: CN=9fb179509bd5b697e15a5fb0b2dc80939d552070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:0d:31:3f:04:c3:11:94:78:0d:07:40:13:
bc:f7:b5:3b:74:0c:a8:c5:c3:75:bc:aa:88:e2:d2:
a9:af:17:a9:ce:50:69:53:a1:d5:29:bc:2d:23:3f:
e3:22:a4:01:88:77:ad:87:a3:73:ef:0a:44:e6:9d:
05:a3:33:7f:ff:f4:a5:59:7f:d5:b9:aa:8a:64:f9:
f8:db:f0:69:6e:1e:b0:32:e1:79:8c:53:cf:f9:a1:
48:05:73:53:7d:1c:cb:50:bd:4a:36:b9:04:b5:c3:
52:2b:b5:a9:16:f7:ab:c2:52:d6:b4:95:54:31:fc:
10:37:32:99:54:c8:fb:17:c4:50:08:d5:4c:a5:62:
88:25:98:3f:a3:a8:17:1a:14:1b:66:01:e0:c1:a7:
97:74:35:d2:2b:c3:0a:42:a7:1b:40:d2:a0:9a:b0:
60:cf:c2:ef:28:f2:8b:30:ea:df:26:b6:91:76:6c:
91:b5:6a:c5:ad:49:e0:f2:0a:64:58:59:c4:54:20:
fd:81:46:e2:11:d3:a8:5a:aa:e8:26:52:6e:3d:e5:
67:e4:2b:95:1d:16:a8:ed:57:d9:8b:6f:40:a8:ec:
40:c8:be:12:57:6d:1a:85:5e:c6:6d:41:29:8c:3b:
3a:45:37:45:ca:6a:9b:42:75:c6:bb:98:56:7a:6f:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:79:50:9B:D5:B6:97:E1:5A:5F:B0:B2:DC:80:93:9D:55:20:70
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:80:01:14:ea:4d:b0:94:dc:b6:7c:e7:a8:5b:92:6b:fb:54:
cc:9b:6b:77:ce:19:8f:14:20:18:75:cf:d9:c5:cc:9a:46:c8:
ac:c3:86:a5:e8:ef:f6:79:e5:2a:05:b3:ef:50:e7:7f:64:3c:
e5:9b:8e:1a:57:fb:9d:17:88:2c:91:db:98:49:4a:ef:f1:75:
ff:f3:d0:a9:33:68:af:9d:bf:3f:06:92:02:9f:ed:7d:a2:cf:
78:02:7b:1a:af:ef:7b:92:87:2f:58:2d:f0:6a:d9:7f:a2:2f:
d9:d8:fd:1f:a1:63:7f:d9:ae:62:12:fa:3d:fc:f3:77:82:ca:
ca:75:aa:a8:cf:f8:6f:a1:6b:4c:a3:87:4d:be:6e:89:9d:a0:
5a:39:86:7a:d0:09:70:3c:2d:ea:2d:1d:8a:2b:f7:73:38:2d:
a6:c5:5a:ea:e9:23:0f:fd:ea:99:1b:14:ef:2d:44:3b:6d:32:
b0:18:2f:d1:44:ae:d3:ef:41:78:b4:d7:0d:fd:8e:d8:ae:96:
34:fe:db:56:45:c0:af:62:8b:51:6d:97:db:c2:a7:14:90:8e:
bd:52:ab:9b:d5:53:95:2f:5a:e3:53:39:55:5b:6c:4b:d6:0b:
92:f7:0a:34:74:1c:3f:78:a9:32:f2:65:ac:64:e9:87:76:5c:
9e:84:bd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuwheVlYWm9LFLzRdLdzg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjYwOTI5MjAwMTMyWhcNMjYwOTMwMjAwMTMyWjAzMTEwLwYDVQQD
Eyg5ZmIxNzk1MDliZDViNjk3ZTE1YTVmYjBiMmRjODA5MzlkNTUyMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySsNMT8EwxGUeA0HQBO897U7dAyo
xcN1vKqI4tKprxepzlBpU6HVKbwtIz/jIqQBiHeth6Nz7wpE5p0FozN///SlWX/V
uaqKZPn42/Bpbh6wMuF5jFPP+aFIBXNTfRzLUL1KNrkEtcNSK7WpFverwlLWtJVU
MfwQNzKZVMj7F8RQCNVMpWKIJZg/o6gXGhQbZgHgwaeXdDXSK8MKQqcbQNKgmrBg
z8LvKPKLMOrfJraRdmyRtWrFrUng8gpkWFnEVCD9gUbiEdOoWqroJlJuPeVn5CuV
HRao7VfZi29AqOxAyL4SV20ahV7GbUEpjDs6RTdFymqbQnXGu5hWem9WJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+xeVCb1baX4VpfsLLcgJOdVSBwMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4ABFOpN
sJTctnznqFuSa/tUzJtrd84ZjxQgGHXP2cXMmkbIrMOGpejv9nnlKgWz71Dnf2Q8
5ZuOGlf7nReILJHbmElK7/F1//PQqTNor52/PwaSAp/tfaLPeAJ7Gq/ve5KHL1gt
8GrZf6Iv2dj9H6Fjf9muYhL6Pfzzd4LKynWqqM/4b6FrTKOHTb5uiZ2gWjmGetAJ
cDwt6i0diiv3czgtpsVa6ukjD/3qmRsU7y1EO20ysBgv0USu0+9BeLTXDf2O2K6W
NP7bVkXAr2KLUW2X28KnFJCOvVKrm9VTlS9a41M5VVtsS9YLkvcKNHQcP3ipMvJl
rGTph3ZcnoS9SA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:36 2026 by rpki-client