Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: piWg9S5vggB7+IOpnzZvL0WE2X++WsZliBHegv6eYv0=
Subject key identifier: 4E:4E:47:04:49:CB:67:AC:3F:08:CB:E3:3F:81:3D:6C:72:45:3F:E7
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019FC29091D39381F38C9B223750BE6A3970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1A02
Signing time: Sun 02 Aug 2026 13:01:22 +0000
Manifest this update: Sun 02 Aug 2026 13:01:22 +0000
Manifest next update: Mon 03 Aug 2026 13:01:22 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: RmcGRzfGLDyFn4lrPU16dV/jHvsORul3JLiHspT6ySE=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:90:91:d3:93:81:f3:8c:9b:22:37:50:be:6a:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Aug 2 13:01:22 2026 GMT
Not After : Aug 3 13:01:22 2026 GMT
Subject: CN=4e4e470449cb67ac3f08cbe33f813d6c72453fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:2f:fa:0b:dc:2c:cf:9a:98:74:0a:c6:ae:
7c:36:e2:64:bb:4b:a9:be:4e:1a:de:7c:cc:b8:36:
76:58:0c:5c:78:92:14:f7:89:83:28:2f:45:b3:21:
f5:9b:65:68:d4:40:bd:60:da:cd:74:a3:6d:39:5f:
3a:07:fc:f3:4c:e0:f3:a7:29:d3:da:0b:b9:ba:45:
51:9b:a7:7a:2c:d3:9c:36:bb:66:20:bc:1c:a8:70:
02:34:cd:29:96:47:be:35:ce:71:89:24:77:4b:20:
d3:ab:c5:08:65:89:fc:a6:65:21:25:ba:55:66:8e:
af:33:48:8a:af:95:d1:cc:28:69:8c:8d:ce:24:04:
41:2c:a9:ca:83:b2:5c:a1:ac:cc:b8:4d:c2:8c:d2:
bf:1a:e5:f8:37:d4:fa:d7:b8:a6:b8:d1:e2:e3:ef:
ee:98:10:17:71:04:00:0f:4f:3b:2f:b3:a4:15:f4:
ca:eb:fe:b5:8b:47:ff:e0:6e:5f:3e:ee:95:44:60:
a2:d5:1e:34:6d:12:97:54:5d:21:77:b8:7c:e8:c9:
d7:42:c4:fd:59:a2:84:c2:27:f9:32:85:85:7b:c6:
45:a0:87:4f:ec:ef:d1:82:e9:ab:f0:83:61:42:90:
d3:ee:a0:a7:6c:b1:3b:5d:16:0a:c0:1e:f4:0a:14:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:47:04:49:CB:67:AC:3F:08:CB:E3:3F:81:3D:6C:72:45:3F:E7
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:79:e5:f6:86:0d:7d:f4:03:de:20:a3:58:ab:25:80:45:
0e:18:78:7a:3f:d1:f1:35:02:0a:1e:c4:a4:4a:04:d1:25:4c:
fe:9f:21:01:95:02:d0:58:f1:66:f6:f1:53:1a:81:ce:1f:13:
ad:3b:ba:78:b9:c0:10:e4:ce:6e:ee:07:27:6b:e4:04:00:2e:
60:cd:c8:6b:b3:60:8b:cf:c6:06:53:6b:b2:70:d9:84:68:09:
f7:3b:47:a1:ad:69:e4:52:5f:95:ce:12:f1:48:10:44:5b:da:
30:c0:5d:8a:05:48:7d:3a:7d:4e:12:47:0e:b1:14:a5:ab:54:
5a:fc:08:d1:24:de:c9:3b:7a:50:53:c7:8b:dd:95:89:be:22:
8a:8f:6f:74:08:9d:d0:65:4f:74:06:46:97:ee:f2:27:8e:5f:
60:45:0d:c1:04:27:2d:47:c5:60:7c:49:48:5c:76:31:f7:f2:
ce:7b:fe:f4:57:2a:b8:30:fc:0a:f0:16:59:88:c8:58:a9:7b:
d0:d1:ce:ee:9b:24:59:eb:de:00:3d:c9:c5:6c:e4:f6:84:0b:
80:8c:88:07:fb:64:0c:bc:23:53:f0:f5:ad:84:2a:15:2c:be:
c9:0f:d3:c0:1d:e4:cd:d9:36:2b:45:56:aa:87:f3:d4:e3:0f:
95:72:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 18:59:28 2026 by rpki-client