Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: yNNpBMQEYQSEYTR1IjvHaGgc5KJ7HKMFS3JNmq4zyx0=
Subject key identifier: D4:F8:2D:61:D0:05:FC:FB:C7:4C:3E:5B:0E:B1:D4:EE:B0:95:09:38
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A18A897597E1158117B2C530F6BD991687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1AF0
Signing time: Fri 30 Oct 2026 02:00:26 +0000
Manifest this update: Fri 30 Oct 2026 02:00:26 +0000
Manifest next update: Sat 31 Oct 2026 02:00:26 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: N8HPpkn0H9/a0xbOHpGFy7A49WuohoK9iVmsJQ+jaMM=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:75:97:e1:15:81:17:b2:c5:30:f6:bd:99:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 30 02:00:26 2026 GMT
Not After : Oct 31 02:00:26 2026 GMT
Subject: CN=d4f82d61d005fcfbc74c3e5b0eb1d4eeb0950938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:a2:0c:90:34:a9:35:2b:d3:a5:26:c5:1c:
b7:3e:38:d0:ef:e8:38:07:08:21:9f:7f:06:40:c7:
46:80:6e:c2:36:73:7f:ef:59:81:f2:5d:cd:89:51:
c1:f0:21:d4:90:b1:18:15:33:5a:d4:c2:86:c5:fa:
c0:6e:3b:cb:6e:da:d1:31:57:f8:6b:82:07:0c:26:
52:2d:ed:5e:da:70:9b:ac:1e:92:13:3b:18:e6:06:
89:a8:ad:b7:a1:92:e2:5b:88:c3:85:34:c1:46:6c:
22:4a:1d:fe:aa:b2:57:58:59:a4:9e:9e:e9:5d:bb:
7b:80:68:bc:eb:92:38:fe:c7:71:e1:17:dd:82:7a:
ea:1f:58:6a:be:8f:4b:8e:16:c5:6d:41:af:be:bc:
e1:fc:7e:fb:0f:54:b3:d3:4e:87:21:09:da:3b:c0:
11:2c:e6:63:9d:6d:67:8e:67:64:ad:8a:26:c4:57:
cf:9e:a4:ad:12:95:6d:3e:45:68:f6:fa:24:4d:81:
1a:6e:45:4f:c6:62:f4:c5:be:21:60:c2:59:d6:d3:
be:43:45:f2:f9:7f:87:2b:b6:21:f3:d1:97:cc:9c:
2f:e0:b9:26:23:0d:dc:31:79:45:65:1d:63:5e:bd:
ab:cf:6b:d6:86:f3:86:e8:5c:61:53:be:aa:0b:a4:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:2D:61:D0:05:FC:FB:C7:4C:3E:5B:0E:B1:D4:EE:B0:95:09:38
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:84:d8:bc:63:83:4d:1e:7c:27:46:a5:04:38:67:f3:ef:31:
15:8d:c3:0c:11:cc:20:f4:5f:f7:af:fa:73:bf:7b:da:4e:3d:
79:4a:7e:9f:09:09:fd:e7:e8:fd:20:0a:48:24:de:72:85:2e:
06:5c:b7:50:b4:5f:fb:81:62:5c:86:87:35:0b:1e:e4:e3:1e:
56:25:a6:e6:81:1d:8c:2b:e9:0c:a4:ae:c2:aa:7e:aa:23:27:
2f:8d:87:58:85:d6:81:e7:f3:10:8f:56:23:1f:96:27:55:9f:
7f:ae:ed:fd:18:90:d8:7a:e3:7d:1c:08:2e:f1:78:8f:99:81:
3d:8a:0f:58:7b:7a:5e:37:ca:c1:de:35:1a:0e:db:6e:54:8d:
05:16:45:34:b7:fa:92:82:f6:f9:cd:04:eb:b2:eb:d2:8d:94:
40:9a:67:8f:f1:f3:73:a0:c2:b2:3a:8b:46:8d:25:0d:67:2a:
10:57:fe:1c:7c:a1:bf:c9:ea:65:f2:3d:d5:24:70:fe:51:c9:
56:cf:6f:c7:96:0b:72:62:bf:40:67:ea:5f:0b:2d:6f:58:f1:
6a:51:a7:0b:f1:74:cd:28:1f:29:6b:ad:04:81:8c:45:f4:ee:
6d:f1:81:5e:60:db:f1:62:83:5a:df:ea:c6:64:7e:eb:ac:c9:
e7:f5:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:33:07 2026 by rpki-client