Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: fBzDh07UXIKg/MMmzW26uLUBY6UQMlgskOwRnamVpc0=
Subject key identifier: DC:9D:C4:9D:01:D0:67:CA:7B:56:F4:71:13:27:08:F9:6C:D8:62:F5
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A17D05531035A691C684FD2F6C488D8EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1AE9
Signing time: Tue 27 Oct 2026 11:01:03 +0000
Manifest this update: Tue 27 Oct 2026 11:01:03 +0000
Manifest next update: Wed 28 Oct 2026 11:01:03 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: oWQQPRRr4rmexmggvlcUn8FWe2ymSoq0qkbuDbuuYDk=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:53:10:35:a6:91:c6:84:fd:2f:6c:48:8d:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 27 11:01:03 2026 GMT
Not After : Oct 28 11:01:03 2026 GMT
Subject: CN=dc9dc49d01d067ca7b56f471132708f96cd862f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:d6:9d:55:52:2b:1b:47:84:dd:d4:99:6e:
c4:74:20:9d:52:76:c2:f5:11:e5:72:0c:33:2e:da:
cc:f0:8e:a6:53:8f:f4:9e:00:23:9d:93:75:df:21:
95:b0:65:93:fe:a7:5b:cb:7e:a0:27:f4:e9:d2:9a:
c7:23:24:d4:06:7e:b4:d9:07:29:a0:b3:8c:95:81:
ab:c5:7b:0d:1d:8f:49:51:7f:9b:7e:2f:55:63:c9:
92:cb:c6:12:55:83:85:58:fd:3c:b6:5b:55:b6:09:
86:1f:a5:df:7f:e9:c4:b6:85:13:b5:71:51:3b:ef:
5e:63:25:b5:d5:9c:54:c2:90:c2:d9:9e:d8:3e:eb:
ed:35:51:7e:0c:14:86:39:89:eb:75:6a:95:aa:a1:
27:54:1e:c7:5a:45:26:20:77:fc:d8:db:47:6b:b9:
b0:96:12:0c:5d:1f:47:82:35:1a:e6:b4:61:88:36:
e7:1b:2f:67:7c:6e:ed:15:ba:b5:69:a6:59:69:67:
49:54:28:82:04:89:ee:50:b6:14:57:a7:96:32:73:
27:34:2b:b6:fc:6b:3c:67:8d:74:ab:43:4b:82:2a:
a0:34:93:42:ac:dd:32:24:7b:05:76:54:95:0f:ce:
f2:5e:99:bc:de:cf:df:3c:9e:d4:92:65:c2:0a:ef:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:C4:9D:01:D0:67:CA:7B:56:F4:71:13:27:08:F9:6C:D8:62:F5
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:2b:28:fe:c6:80:7a:49:c4:40:49:69:cf:5f:5f:d2:05:
ad:cd:f0:22:71:2e:a2:2d:eb:20:ad:e5:19:cb:34:fc:2f:0a:
9b:a8:06:bc:bb:16:3f:ce:37:b2:3b:19:22:17:8d:6e:57:81:
74:b0:37:05:a8:d7:28:c8:98:fb:98:a0:f9:42:06:cb:cd:c4:
89:7f:e2:c9:e6:51:fa:bb:38:4b:e6:04:52:c2:c9:78:93:02:
ee:e3:ea:55:87:c2:cb:33:e1:dd:e1:78:c3:0f:7d:34:96:0d:
cf:9e:8e:10:98:cf:19:09:98:d4:1b:54:c6:96:9e:a6:44:38:
dd:9c:10:a7:af:73:94:7c:d3:ea:5e:9d:8f:3c:c4:4f:2a:71:
2f:69:f9:ac:ad:d8:34:93:c8:2b:48:64:4a:bd:2e:da:41:98:
f8:3c:ba:53:da:c1:45:af:b1:17:5c:c6:cf:f5:3f:8e:72:76:
4e:1c:fe:bc:a2:49:bc:23:a6:db:19:d3:3e:2b:81:16:49:c4:
16:29:7b:53:1f:32:9c:f7:43:fd:23:aa:6d:7a:3f:94:9c:0c:
c6:df:5a:f4:4a:5d:08:30:4e:0d:6f:e6:88:26:22:03:30:76:
45:23:43:1c:1e:f7:5d:5d:6b:f1:53:41:73:0e:7c:c3:58:c8:
0d:7e:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:02 2026 by rpki-client