Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: Pr3l2sxNAg25iRrByHfATYINi8OGJ751w+QPxhy7lOM=
Subject key identifier: 9F:FA:AF:9B:F5:00:11:B9:06:AB:A9:84:94:9C:85:D8:2F:FF:F8:0B
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A0F5D70B38535DD0ABD5FBD147056C6DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1AA2
Signing time: Thu 01 Oct 2026 05:01:45 +0000
Manifest this update: Thu 01 Oct 2026 05:01:45 +0000
Manifest next update: Fri 02 Oct 2026 05:01:45 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: NRpQ3bsmy2DHeC+0ioJowrozQRjxKGkWcNismQFrJCk=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:0b:38:53:5d:d0:ab:d5:fb:d1:47:05:6c:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 1 05:01:45 2026 GMT
Not After : Oct 2 05:01:45 2026 GMT
Subject: CN=9ffaaf9bf50011b906aba984949c85d82ffff80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:df:ab:0f:74:2b:ff:94:cc:84:fa:82:54:
14:52:12:ba:ed:56:45:90:97:99:eb:45:d5:cf:4b:
05:5e:86:47:48:a5:c6:8d:2b:00:f8:8d:36:6e:99:
2b:df:ee:2e:aa:56:8c:8e:b5:71:e8:05:12:cf:f2:
30:37:68:11:6d:87:42:13:3f:8d:84:25:6e:48:e1:
8d:7d:cb:df:f9:f5:e3:26:20:c2:5b:e6:67:7d:31:
a5:6a:23:be:05:46:b8:43:17:bf:23:ba:5b:0a:5e:
38:c6:44:0f:2a:49:4b:82:cd:9d:94:2b:15:18:35:
f8:02:94:0a:3b:a6:05:02:bd:ff:94:93:71:4b:59:
7c:7a:f8:30:0f:86:dc:d7:5b:3e:66:41:b6:68:80:
c0:af:61:33:82:0a:14:24:61:71:6b:42:eb:bd:29:
dc:3b:e1:4d:73:58:f0:8b:9a:4c:6d:1f:12:0a:40:
d6:24:4c:7a:73:2e:d4:1f:7a:25:7d:29:0a:a1:c7:
f5:8a:b2:25:0d:dd:20:c1:f0:e5:b0:a3:0d:33:06:
cf:72:e1:40:34:9a:d0:2e:c0:60:db:ef:ab:d5:21:
35:4b:58:23:d7:ce:b1:3c:8c:9f:6d:3c:1a:8f:cd:
24:ef:70:68:c7:c0:dc:76:02:2a:9c:d6:44:1b:07:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:AF:9B:F5:00:11:B9:06:AB:A9:84:94:9C:85:D8:2F:FF:F8:0B
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:09:76:df:51:2f:29:6b:87:67:13:1b:50:cf:a6:9d:cd:
aa:d4:32:54:3f:3f:fe:ca:59:22:12:00:54:48:b7:1b:4a:dc:
f0:81:8a:df:8f:7e:78:88:f2:f9:c8:8a:e4:a6:b6:4e:e6:6b:
40:e7:d2:d6:eb:32:b6:33:3d:51:cf:0a:26:af:1d:51:cd:da:
9e:25:2a:8a:04:09:22:60:09:2f:6b:67:eb:28:49:26:8d:87:
75:3d:45:91:d2:4e:5a:d5:7f:f4:95:65:f0:ab:92:a2:17:60:
a4:e0:ad:d7:04:43:42:72:9a:44:a9:f5:a5:8f:ce:8d:8f:ba:
ac:b6:b5:09:7b:54:2b:09:d7:23:aa:65:3a:86:c6:b9:a5:06:
f8:14:19:21:6e:97:20:30:1c:62:28:ed:bc:b3:fd:31:86:91:
c8:9f:68:d3:ad:68:76:61:9b:39:fa:5f:d2:bd:b1:49:86:c2:
ba:79:21:d7:9b:ec:d5:d0:25:8a:42:d3:ff:be:4b:12:2b:d9:
2e:6c:3d:5f:58:71:bb:f2:98:5e:d4:b1:71:5b:d0:17:8f:d5:
1e:a2:e5:89:3f:06:83:04:4e:43:49:30:29:73:37:36:5c:f7:
87:bf:3c:3c:05:69:24:21:4b:cc:73:45:67:f9:85:b5:be:de:
a5:18:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:17:59 2026 by rpki-client