Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: ofabUrdSkgmKFongd17vtlFLqzpTj8KN9igH8+bvDaY=
Subject key identifier: 4F:9B:07:4C:B2:10:0F:F0:B8:9C:74:2E:58:D4:D7:6B:2F:4A:26:09
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019CCA88662F58E2446E1C4EA80C959EA39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 091E
Signing time: Sat 07 Mar 2026 23:01:02 +0000
Manifest this update: Sat 07 Mar 2026 23:01:02 +0000
Manifest next update: Sun 08 Mar 2026 23:01:02 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: H8sjYejq8X1kPD9ngFGY5IQNOLhCMVGxdcoLh22AIx0=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:88:66:2f:58:e2:44:6e:1c:4e:a8:0c:95:9e:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Mar 7 23:01:02 2026 GMT
Not After : Mar 8 23:01:02 2026 GMT
Subject: CN=4f9b074cb2100ff0b89c742e58d4d76b2f4a2609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:73:83:dd:52:9b:5d:38:de:be:ca:7e:da:
5f:0e:3c:02:35:55:85:17:6a:8d:57:ae:8c:36:81:
f9:b9:2f:aa:77:09:c8:42:89:30:70:8b:69:c1:1b:
b2:f5:55:29:dd:77:70:fd:4e:84:4e:bf:e1:c8:8c:
c3:72:9b:b3:a9:61:5b:41:62:89:d4:49:92:e8:ba:
fb:74:d1:0c:b8:a6:69:f9:c1:e3:05:67:1c:55:ac:
52:07:33:4d:81:65:ae:7e:9b:3e:5e:0a:7b:41:49:
76:61:0f:54:81:0d:a6:89:72:78:38:17:eb:d7:d1:
19:f6:c0:ce:50:f6:07:a9:0c:6a:a5:b6:9b:b2:e3:
93:d4:13:f4:b7:a3:7d:59:50:4a:ea:3c:6f:89:b9:
ad:b3:f8:53:aa:3c:27:a4:35:b5:16:bc:0b:66:ce:
13:36:f2:ae:33:6a:06:1b:35:a2:bb:0c:a9:81:85:
3c:60:22:2a:1f:e3:d6:f4:aa:10:26:df:6e:0d:15:
d3:73:e3:17:ed:ec:f3:6d:70:53:15:fc:1e:3d:e4:
98:d9:9b:78:f4:85:db:9e:46:31:18:bd:cb:09:7e:
91:31:51:5f:29:0f:b3:25:d2:73:ba:bf:9e:ff:6e:
3e:cb:66:00:c1:11:2b:e1:8a:3e:d4:7f:02:47:b1:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:07:4C:B2:10:0F:F0:B8:9C:74:2E:58:D4:D7:6B:2F:4A:26:09
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4a:81:db:c8:07:68:78:5c:66:c1:3f:de:bf:f8:85:ee:4a:
85:7e:83:d2:fc:51:48:bf:46:a4:26:e6:32:ad:05:22:fb:d3:
ba:a5:3c:54:31:2e:29:7b:66:51:da:dd:63:11:6e:47:d7:14:
a4:33:73:ae:42:68:24:8d:ba:99:81:2e:f0:f2:32:72:41:97:
05:bd:06:7a:f4:43:16:45:ec:c2:64:c5:03:e3:d6:9a:31:e8:
f3:76:a0:65:8b:ad:f1:cd:1d:bf:87:17:cb:74:3f:e3:c9:78:
5e:91:a7:73:20:11:26:22:c2:bc:f3:ba:46:36:86:fd:a7:eb:
8f:0d:83:0f:70:84:d6:c2:a4:e1:dd:82:62:10:a7:b0:6f:7a:
0d:a1:4a:36:18:83:68:8b:b3:98:f6:c3:ff:84:f4:1d:4e:6e:
3d:c9:d5:7b:e9:0f:d3:37:3e:9d:50:16:bb:a9:e5:c6:f9:9d:
8c:83:06:ca:34:e0:6a:e0:81:7f:e3:81:b4:38:17:64:79:56:
de:20:3d:6c:97:b6:67:f3:85:1d:f5:4d:4d:b0:e4:ce:73:39:
9e:11:f8:55:99:d7:c8:9c:19:4b:cf:4f:a7:73:10:7a:ee:3a:
a3:cc:a2:fe:ec:84:ca:3a:4b:e8:72:5c:bd:42:e0:ad:d1:03:
1b:25:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:37:49 2026 by rpki-client