Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: 0aHfKgghPkx7a8BMsKxCrC9FK7sFycBH70WPxhTVeDE=
Subject key identifier: F2:73:99:A2:CB:5F:E2:B5:2A:1A:97:36:CC:B9:B9:B4:02:BB:F4:4E
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D623D8F1D70BB8E15811B6944AFB5DC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18C7
Signing time: Mon 06 Apr 2026 10:01:34 +0000
Manifest this update: Mon 06 Apr 2026 10:01:34 +0000
Manifest next update: Tue 07 Apr 2026 10:01:34 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: NBRQwW4tC4Oqz55UNh5rDR9aMxxQ1MqkIAZCY4v1Qdo=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:3d:8f:1d:70:bb:8e:15:81:1b:69:44:af:b5:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Apr 6 10:01:34 2026 GMT
Not After : Apr 7 10:01:34 2026 GMT
Subject: CN=f27399a2cb5fe2b52a1a9736ccb9b9b402bbf44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:c4:24:ab:36:0f:36:42:13:80:a1:17:36:
73:22:ca:9e:68:62:b7:82:94:35:ca:82:45:dc:0e:
b9:1a:15:2d:3a:ad:5d:86:b2:28:f4:ac:f2:81:76:
12:8e:20:46:c2:59:2f:25:12:9d:fb:e5:0e:aa:09:
d5:3a:10:36:17:8b:a0:b2:46:aa:95:ad:38:bc:9f:
5c:91:8e:a0:81:8a:04:f7:f4:c1:29:24:40:0a:ec:
67:fe:da:95:8f:de:3b:58:1f:93:b6:41:73:7d:3d:
5d:a1:a7:4a:9b:9e:ec:14:e4:af:b3:9e:bc:3e:5a:
da:80:57:f1:b9:d3:1d:7e:b2:c8:a5:2d:43:b2:c9:
63:83:a5:f9:dd:73:d3:ed:0e:99:6a:70:d1:da:6a:
56:5b:67:c1:ae:1f:79:52:be:5f:54:58:7b:a3:81:
78:b8:70:f5:fa:c5:93:1a:0a:4e:64:0d:fd:09:bc:
94:65:07:71:42:c8:94:63:4c:68:41:92:73:e9:f2:
32:40:df:1f:c6:0d:8c:bc:eb:3a:f2:e3:47:0a:0f:
fb:90:d0:b1:08:d7:fe:93:18:06:59:6f:ec:d9:15:
ad:dc:66:18:9d:2a:6a:fc:6a:89:3d:0e:74:fc:0e:
c1:09:1d:c4:b2:ae:6d:29:ac:80:37:ec:5f:07:b4:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:99:A2:CB:5F:E2:B5:2A:1A:97:36:CC:B9:B9:B4:02:BB:F4:4E
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:21:8c:96:99:cd:fd:03:bd:9a:1d:83:3b:5f:b2:45:0d:7d:
60:f3:65:83:f3:cb:aa:eb:bd:b8:e7:9a:52:98:df:c4:18:c3:
4e:22:3a:22:74:0b:7e:e8:82:1d:f4:89:c6:24:0d:57:54:8c:
34:ea:9f:6a:fb:25:1b:08:15:d4:b1:d8:9c:82:08:af:9b:03:
67:7f:be:b0:79:01:36:24:7a:ad:1c:c0:93:66:d4:56:1b:b2:
ad:8f:7b:3a:20:d6:41:4e:a8:be:37:c6:6c:46:a5:d5:ba:0e:
7e:6e:13:1e:c2:08:d0:e4:be:f4:ab:1d:60:9a:1d:e1:16:23:
66:d7:2a:87:34:81:d2:02:81:44:3b:4d:a8:99:64:3f:8c:c6:
1a:ce:a8:19:53:44:cf:43:63:69:71:f7:a2:23:03:93:03:1d:
3f:7d:5c:f8:ac:4c:fe:a3:cb:c8:c8:a9:a0:f1:eb:d1:31:a8:
28:78:b1:b8:1b:2e:68:a8:b5:67:57:ba:73:f2:79:33:63:13:
3c:5a:a3:4c:f2:d6:ce:17:78:56:13:15:58:d8:58:4d:3a:d4:
c4:ec:b8:c9:65:d6:40:83:6c:e0:d4:e9:d8:c8:ba:f9:08:84:
0b:96:59:3c:8f:06:bc:87:38:52:2c:49:88:8b:b1:64:cb:ae:
cd:19:10:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1iPY8dcLuOFYEbaUSvtdxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwNDA2MTAwMTM0WhcNMjYwNDA3MTAwMTM0WjAzMTEwLwYDVQQD
EyhmMjczOTlhMmNiNWZlMmI1MmExYTk3MzZjY2I5YjliNDAyYmJmNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+7EJKs2DzZCE4ChFzZzIsqeaGK3
gpQ1yoJF3A65GhUtOq1dhrIo9KzygXYSjiBGwlkvJRKd++UOqgnVOhA2F4ugskaq
la04vJ9ckY6ggYoE9/TBKSRACuxn/tqVj947WB+TtkFzfT1doadKm57sFOSvs568
PlragFfxudMdfrLIpS1Dssljg6X53XPT7Q6ZanDR2mpWW2fBrh95Ur5fVFh7o4F4
uHD1+sWTGgpOZA39CbyUZQdxQsiUY0xoQZJz6fIyQN8fxg2MvOs68uNHCg/7kNCx
CNf+kxgGWW/s2RWt3GYYnSpq/GqJPQ50/A7BCR3Esq5tKayAN+xfB7QBywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJzmaLLX+K1KhqXNsy5ubQCu/ROMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiGMlpnN
/QO9mh2DO1+yRQ19YPNlg/PLquu9uOeaUpjfxBjDTiI6InQLfuiCHfSJxiQNV1SM
NOqfavslGwgV1LHYnIIIr5sDZ3++sHkBNiR6rRzAk2bUVhuyrY97OiDWQU6ovjfG
bEal1boOfm4THsII0OS+9KsdYJod4RYjZtcqhzSB0gKBRDtNqJlkP4zGGs6oGVNE
z0NjaXH3oiMDkwMdP31c+KxM/qPLyMipoPHr0TGoKHixuBsuaKi1Z1e6c/J5M2MT
PFqjTPLWzhd4VhMVWNhYTTrUxOy4yWXWQINs4NTp2Mi6+QiEC5ZZPI8GvIc4UixJ
iIuxZMuuzRkQAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:31:23 2026 by rpki-client