Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: 6W5zdJBZuPqdrC881pNg0ZDJrRK9qte+9gQyMuQ3Kfw=
Subject key identifier: 02:20:17:A7:EB:32:BB:5D:19:9C:FB:EA:B4:EE:FA:48:F7:4F:87:5A
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A1735D1B75C84A720EDAC68205B511FBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1AE4
Signing time: Sun 25 Oct 2026 14:00:44 +0000
Manifest this update: Sun 25 Oct 2026 14:00:44 +0000
Manifest next update: Mon 26 Oct 2026 14:00:44 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: tjvnPLXHlQy60u6vyj8b9nupVPnrTmn0KVAti8j9egg=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5d:1b:75:c8:4a:72:0e:da:c6:82:05:b5:11:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 25 14:00:44 2026 GMT
Not After : Oct 26 14:00:44 2026 GMT
Subject: CN=022017a7eb32bb5d199cfbeab4eefa48f74f875a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:8c:70:6b:05:a6:f2:81:a7:aa:88:b5:38:
59:e8:f6:ec:02:94:c6:a9:a8:3c:44:b5:0e:10:e0:
d1:b3:86:27:bc:b8:2e:d8:3c:2f:a5:bf:6d:ec:4c:
ff:2e:a1:a1:49:de:73:ba:5b:2f:7e:50:0e:18:a9:
50:96:97:d7:ec:13:41:99:bd:e7:39:5f:1a:24:93:
a6:b0:5a:6e:97:c8:a1:35:9c:38:0e:ae:b9:9a:8e:
64:56:72:7b:1e:4b:73:5a:b8:f9:5d:e3:2f:b1:8a:
84:f6:c4:1c:a7:d4:9c:2f:d5:db:67:51:e1:70:fc:
51:78:d8:cd:1d:20:f5:84:57:84:68:a6:45:79:3f:
9e:09:69:98:fe:cb:43:33:08:37:65:2e:f2:e3:be:
29:4c:74:f4:39:3d:be:47:2a:70:75:f7:a1:d4:cd:
d9:36:c1:e2:7b:1b:f6:84:8f:26:16:32:26:25:de:
05:d9:86:29:f7:c9:7d:79:78:1a:41:0e:92:33:84:
6e:88:55:ec:9c:ad:28:07:c2:58:45:12:ea:66:a2:
e2:37:ef:8b:bf:d0:cb:91:6e:7e:4e:81:fa:a5:d3:
31:e9:d7:8b:9d:af:f5:d1:87:dd:23:a3:18:15:f2:
f9:84:b7:32:b5:71:f6:97:c6:57:40:b2:9a:fc:b9:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:17:A7:EB:32:BB:5D:19:9C:FB:EA:B4:EE:FA:48:F7:4F:87:5A
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:d0:f3:9e:05:e1:e6:9e:50:0d:b4:78:ae:36:77:6d:4a:
7a:83:82:b1:84:07:eb:78:0b:1c:20:51:79:4e:1c:eb:90:58:
40:68:cc:ed:68:76:a5:6d:aa:1b:6f:6b:b1:fb:98:4c:2c:4a:
21:f0:ea:a6:f5:0e:84:ac:c2:d5:da:0f:68:47:41:a8:c1:b7:
61:6f:58:3e:37:04:58:15:09:63:e7:28:62:94:7c:9f:30:1e:
40:07:ff:9b:65:0d:eb:96:1a:95:65:b7:d8:ab:56:ec:f8:6f:
b0:3d:97:b3:61:21:5b:8f:e0:ec:8f:0c:f3:8a:93:87:8f:6a:
00:4c:f7:2b:83:53:81:08:55:b5:d5:04:c2:07:ea:71:45:c4:
b6:6e:ae:04:71:bc:1d:1b:c4:54:42:ad:4a:07:62:9e:95:fb:
be:0c:c6:c4:cd:a2:5f:4d:95:b8:8a:38:0d:86:77:75:24:67:
19:18:0c:b2:d7:a5:27:29:80:36:65:03:12:70:6f:78:f6:49:
f2:c5:fd:40:60:50:e4:09:6d:e3:75:28:92:65:94:db:25:d9:
00:96:d7:e4:41:ac:d7:e4:4c:bd:13:88:db:ee:9c:81:c5:7b:
0c:91:da:e1:21:e5:36:2a:1e:58:f1:b9:92:dd:1a:3c:f7:5b:
f9:11:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:56:58 2026 by rpki-client