Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: 5XlcgIFAoQDiO5sG/YyJqm3FKT3ugwgD5VH2iMqa2LU=
Subject key identifier: 86:1A:E6:E6:07:53:E6:78:76:6D:4C:CF:46:B3:0F:64:8B:88:78:53
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D1AC91158E6B2C2E8F70C2E44A4EF7263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18A2
Signing time: Mon 23 Mar 2026 13:01:17 +0000
Manifest this update: Mon 23 Mar 2026 13:01:17 +0000
Manifest next update: Tue 24 Mar 2026 13:01:17 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: a6wHP6NzaOzqk3KyARH6Uo54nAcxhprVWdwMWbW0skE=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:c9:11:58:e6:b2:c2:e8:f7:0c:2e:44:a4:ef:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Mar 23 13:01:17 2026 GMT
Not After : Mar 24 13:01:17 2026 GMT
Subject: CN=861ae6e60753e678766d4ccf46b30f648b887853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:e2:31:31:28:79:0a:41:a6:78:b5:4d:08:
e6:36:66:a5:6d:27:d0:e0:2c:92:ac:6e:c1:22:a8:
9e:ac:75:09:dc:34:eb:3c:63:fc:57:ab:0d:e2:bf:
a0:1c:2b:6e:71:67:80:89:08:2f:ad:2f:cd:9e:d5:
4d:b0:28:40:2e:09:a3:8a:7f:13:5c:fd:e9:e6:33:
3c:a9:7a:60:46:af:27:15:a3:c2:5b:ab:2e:8b:57:
4f:d7:aa:21:8f:f4:f9:54:ba:31:fa:5a:dd:76:d9:
45:84:60:81:ea:ba:4b:61:9c:f0:be:0f:25:06:32:
ea:ab:b1:b3:e2:7f:18:df:34:bb:9c:56:db:97:7f:
7f:d4:f4:6b:d1:fc:51:5d:e8:72:60:ea:9d:c3:5f:
00:09:20:45:ec:09:16:60:83:80:da:32:5e:e7:91:
b5:81:57:34:26:c3:d6:2c:ef:b0:42:11:88:7e:85:
45:f0:92:0a:98:1a:e8:73:ea:71:3e:82:fb:5a:9d:
e2:29:14:98:cf:55:01:d5:b5:c9:5a:bb:96:20:6e:
cd:bf:11:fa:4f:73:0c:25:b1:94:9b:41:91:b5:1f:
84:96:58:9f:06:8c:0f:83:be:02:80:11:11:df:13:
66:74:ef:c2:89:93:79:9f:63:30:20:42:fb:05:71:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:E6:E6:07:53:E6:78:76:6D:4C:CF:46:B3:0F:64:8B:88:78:53
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:3c:b5:da:24:c9:91:46:3e:ca:99:89:bb:0d:f4:ce:e4:
1d:80:31:4c:6b:e7:8c:01:66:ca:b4:41:ce:26:86:9e:f0:e9:
d9:ab:f9:f5:80:1c:df:6b:c5:88:2d:e1:b9:81:18:5e:27:5c:
54:e0:74:6f:57:0f:d9:ac:eb:2e:1d:e8:ca:4f:f9:95:dd:90:
81:46:ed:c8:23:e3:4a:61:07:28:74:6c:c9:42:6e:f1:c7:67:
bc:97:3b:ec:44:89:cf:f7:c6:4b:83:c5:68:28:16:ca:59:ba:
ad:89:53:33:9e:5a:1f:f6:90:2d:9e:a3:d4:9f:f5:62:96:07:
0b:da:37:54:25:9c:cf:7c:26:db:8e:9e:6c:bc:af:5b:eb:db:
23:18:df:af:9d:1b:56:ae:4f:b8:f1:42:3f:71:a6:9e:38:67:
b6:a2:00:9d:b9:70:7d:0c:0b:21:ff:9b:ce:47:ed:13:55:fa:
9b:42:8c:67:05:5b:9e:3d:e5:18:ca:09:72:c9:5a:2c:97:a0:
17:66:f6:73:c3:34:5d:88:6d:4d:c4:3e:bd:73:29:8f:9c:e8:
70:4c:40:72:8a:59:7e:c3:a0:81:00:7c:d3:26:62:78:00:93:
55:78:93:4e:a2:83:4a:c2:f7:28:82:04:77:f1:a2:13:e0:c9:
db:0f:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 19:41:00 2026 by rpki-client