Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: ttUc67yBZVrGRrgECmM6O9zxg/vs1QZogWuF4J3vYh4=
Subject key identifier: EF:EF:08:F5:E8:54:01:7B:CE:5A:2F:C7:7F:2B:4A:01:CA:DC:BB:20
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D6DD3A23A7A52793B74096513F00AEC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18CD
Signing time: Wed 08 Apr 2026 16:01:19 +0000
Manifest this update: Wed 08 Apr 2026 16:01:19 +0000
Manifest next update: Thu 09 Apr 2026 16:01:19 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: IG7NGclF9r05Z0Xyab0xwrLPFQUvUAajiXDwRbpoanA=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:d3:a2:3a:7a:52:79:3b:74:09:65:13:f0:0a:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Apr 8 16:01:19 2026 GMT
Not After : Apr 9 16:01:19 2026 GMT
Subject: CN=efef08f5e854017bce5a2fc77f2b4a01cadcbb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:b2:70:52:0a:7a:c8:1a:ba:7d:ff:6a:5f:
d3:cd:4e:15:f0:8c:cf:c6:3c:bc:ae:4d:8b:bc:04:
ca:c6:3b:76:d8:8b:fe:4c:c9:3f:eb:93:f8:68:3a:
27:c3:09:1c:fa:ad:ca:30:51:24:bc:50:04:57:81:
ef:72:63:c5:80:e0:c4:57:4e:fa:06:58:12:1a:0f:
ba:2a:86:f1:09:2d:e9:16:e7:9f:7d:f0:ee:df:03:
56:14:47:20:67:bd:a9:c5:42:f3:97:41:97:fb:62:
a1:36:d4:77:fd:77:ad:8a:23:35:1e:a5:b0:74:3c:
17:eb:4e:33:0f:81:74:de:19:6e:3d:6b:b7:48:07:
ba:85:20:3f:16:50:b6:ad:aa:4d:ac:d8:da:b9:85:
ca:d3:39:55:19:d1:8c:f9:e3:9c:61:1d:b4:71:6b:
07:a2:2b:fa:4b:e6:9b:e8:39:3a:73:b7:11:28:02:
6d:fd:8a:c3:b1:30:be:5b:d1:0a:97:b4:b1:ee:d3:
af:3b:b9:d4:e8:13:fe:9f:f7:d1:89:c8:08:e1:b5:
a3:cd:d0:ba:8c:53:9c:fa:2b:80:ff:99:c0:01:dc:
5d:04:38:75:8d:16:33:63:6c:bd:57:3f:40:8d:f6:
2e:39:69:f6:17:cb:23:19:35:2f:4b:51:8e:96:6b:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:08:F5:E8:54:01:7B:CE:5A:2F:C7:7F:2B:4A:01:CA:DC:BB:20
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2c:37:06:27:cd:a6:a5:dc:69:d0:7e:7d:d2:9c:74:19:74:
93:24:fc:57:2c:ef:b8:ae:b0:f2:df:87:71:3a:7a:ef:c9:a9:
5c:0c:97:88:55:40:a1:05:1e:d3:a0:75:6e:84:d3:0c:16:1f:
77:bf:f8:71:bb:cc:7b:86:95:ae:80:d9:4d:64:3c:ab:07:c7:
5a:e4:68:d2:0e:4d:cf:99:a2:e3:35:80:0e:93:6b:d1:85:e0:
c2:b5:62:0e:89:fd:62:fc:79:d1:9e:82:ab:aa:73:9f:00:25:
e2:ad:58:93:7b:95:cd:e1:55:9b:ab:8d:3d:a9:2e:5e:c4:b0:
15:aa:44:e4:aa:3b:e5:59:01:35:0e:18:4f:68:d0:29:84:bd:
55:ef:4d:cd:8b:50:ef:dc:16:7a:fb:fc:47:7d:c8:6a:11:2b:
7d:00:c8:4d:83:09:59:d1:79:6f:44:87:d9:c5:e4:7a:84:de:
e5:bc:e5:ea:a7:0c:45:34:69:fa:6a:b1:31:ae:0d:9c:3c:df:
37:80:72:01:2e:a8:3e:ab:f7:d3:96:a4:c9:95:e7:ee:67:1d:
37:d5:fc:dc:7d:21:22:4f:cd:57:3f:1d:85:54:6c:24:69:52:
de:20:56:5a:77:8d:d0:f4:bc:c3:bc:05:2f:9a:dc:4d:3d:10:
08:be:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 01:55:27 2026 by rpki-client