Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 5OsTzny72nVgbl3HsVPCej2E2fCi9jmo++W6iWZuCfM=
Subject key identifier: 7A:99:ED:9F:93:4C:03:0D:33:57:47:93:68:20:2B:70:35:0D:FC:90
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019DB246707799E144AC5DBD15926D3B9DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 0996
Signing time: Tue 21 Apr 2026 23:00:53 +0000
Manifest this update: Tue 21 Apr 2026 23:00:53 +0000
Manifest next update: Wed 22 Apr 2026 23:00:53 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: ZGvkj6zlUBuSMRb+5XsGGxZDNpmIroJ62UUYZycLnsk=)
2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:70:77:99:e1:44:ac:5d:bd:15:92:6d:3b:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Apr 21 23:00:53 2026 GMT
Not After : Apr 22 23:00:53 2026 GMT
Subject: CN=7a99ed9f934c030d3357479368202b70350dfc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:ce:ec:78:f6:63:8b:26:8e:d5:b3:99:25:
34:41:f0:e2:bd:fa:0a:77:89:6e:11:ba:30:d8:79:
b5:12:73:99:d2:92:50:3d:dd:da:92:f3:9d:f9:2f:
12:7a:a8:8b:fa:9b:b8:19:c3:31:eb:b9:db:1c:7e:
90:be:11:78:ba:b2:05:7e:d1:75:c4:26:24:bb:28:
5d:a6:a8:35:27:07:3e:c1:18:b1:3f:91:84:c7:f2:
07:9e:e1:95:70:d8:e6:44:78:42:bd:f4:96:b0:16:
ef:17:6d:d2:1e:cf:28:bc:1c:31:aa:87:04:46:9d:
e4:78:19:6e:84:46:fd:fc:be:45:33:4b:56:be:1d:
07:96:c8:54:2b:d7:26:a2:ea:50:8b:26:3f:65:86:
4e:0a:8e:79:47:30:d9:1a:0c:63:4c:18:60:c8:d9:
42:72:86:6d:4e:51:d8:c7:ba:21:8b:ed:e8:d2:d5:
b1:2c:13:74:bd:f7:df:26:a7:70:07:37:91:f9:1e:
9a:7e:41:31:2e:9e:4c:5f:a4:e0:d7:e9:cb:5f:af:
c3:1a:de:05:10:49:86:4f:2c:5b:e9:33:28:36:54:
87:99:1c:e9:78:d8:36:f6:8d:99:84:d2:2a:4c:b9:
c4:e2:ef:a4:2f:65:dc:32:44:b5:17:b5:8e:28:04:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:ED:9F:93:4C:03:0D:33:57:47:93:68:20:2B:70:35:0D:FC:90
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:ba:31:2a:65:bd:f1:d5:b3:04:78:e1:eb:c9:61:f5:c7:
61:a9:07:21:f5:8f:22:04:15:82:d9:39:ba:e6:10:d5:08:9c:
2e:19:cb:91:e1:0b:54:b8:85:6b:32:0b:59:12:04:7c:53:2c:
26:15:a3:11:83:27:84:28:ae:f5:dc:0a:d7:07:1e:9b:a5:aa:
39:46:48:f1:98:fe:51:e6:9b:31:17:92:cb:dd:cb:9c:e1:79:
2b:cb:b0:2b:d2:cd:b4:7e:ab:02:f0:76:ec:1c:42:ab:ec:ce:
3d:04:21:97:4d:a5:9c:fe:1f:86:93:f7:d5:a2:3e:9b:99:70:
e1:d6:a5:ca:2c:ad:44:32:a2:c7:e9:c6:80:5a:9a:57:f4:fc:
48:2a:f2:ec:34:1c:ca:e2:c5:5c:ac:ea:8d:e9:b9:2f:0c:0a:
7e:cc:2c:9a:bd:20:84:cd:fc:12:38:52:e3:a4:d4:3c:68:ea:
69:e5:ee:50:8c:09:1b:83:24:cc:01:b7:28:30:ae:68:17:e2:
d6:0f:d8:e4:48:3c:1f:54:9a:02:ea:3e:5f:86:57:6e:5e:ed:
49:ec:01:87:b3:2f:a3:b1:ea:6a:3d:05:87:37:91:8a:54:f9:
e2:75:41:84:12:e8:fc:b8:d8:1a:74:52:55:29:dd:d8:23:93:
5a:d7:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:40:36 2026 by rpki-client