Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: UX2vqMAKk25VE7oS9MTgHwEw386pjctUINaCMg6Lr9I=
Subject key identifier: 88:CF:33:BA:4A:6B:A9:09:3D:99:9B:5C:00:18:EB:22:34:36:F1:E7
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019DE1B33E4CA7C1FD63923980394B1C1F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1909
Signing time: Fri 01 May 2026 04:01:53 +0000
Manifest this update: Fri 01 May 2026 04:01:53 +0000
Manifest next update: Sat 02 May 2026 04:01:53 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: td+erX0iarurfiGRxHRZxX0pg2qPp6/du3s2TCgImEc=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e1:b3:3e:4c:a7:c1:fd:63:92:39:80:39:4b:1c:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: May 1 04:01:53 2026 GMT
Not After : May 2 04:01:53 2026 GMT
Subject: CN=88cf33ba4a6ba9093d999b5c0018eb223436f1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:5d:b4:f5:b0:4e:61:9b:54:da:c7:3d:76:
3a:79:f6:66:da:42:ac:58:49:c0:ca:6a:b8:16:26:
85:1c:c6:ce:7b:f0:f8:ac:2e:d2:26:3d:dd:cb:72:
2f:87:87:d7:ea:36:88:93:e0:4b:0a:bd:07:1e:87:
36:9a:91:96:3c:49:bc:10:eb:8f:62:c2:63:ab:50:
6b:96:75:87:fa:73:45:a0:78:41:9a:61:22:32:e7:
a1:05:4e:ca:fb:49:6b:00:07:98:fc:90:ba:69:63:
9e:61:af:5f:ff:d9:48:c5:a2:86:59:67:e8:21:76:
bc:06:fb:35:1f:a1:11:f6:f5:ef:b1:48:44:19:a4:
d3:72:f3:7b:d2:1e:6d:02:7e:66:9e:26:93:a0:95:
c1:d4:17:7a:d8:79:ab:ac:e4:8f:db:c8:1d:f7:69:
84:32:14:c2:a1:91:0f:b7:8e:83:d7:09:69:cd:01:
40:3b:3d:08:3b:b8:b0:67:dc:e2:78:9b:33:75:37:
fa:d8:1b:1e:9b:f1:44:f2:6f:56:27:bc:93:24:75:
76:28:1c:1b:34:9a:51:54:59:10:e1:48:fb:8e:f1:
65:c8:cf:5a:0e:01:55:0e:c8:ec:07:a8:80:b9:47:
6c:cb:95:dc:6f:65:74:e6:0a:2c:af:40:db:32:2b:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:33:BA:4A:6B:A9:09:3D:99:9B:5C:00:18:EB:22:34:36:F1:E7
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:dd:08:75:00:35:4d:50:5d:c6:bc:7b:1a:67:98:1a:e0:
7f:bc:af:6e:f7:4c:46:52:41:b0:10:4c:8b:67:79:d5:2f:93:
98:20:68:a6:ee:ca:f8:0d:cd:90:40:d4:a1:9b:88:49:0d:66:
87:f9:12:f2:ba:a9:d9:8c:19:85:ab:6b:1f:4b:90:a6:75:1a:
a0:7c:70:da:70:c5:45:ef:2e:b8:d2:97:bf:c5:32:50:ce:bf:
d1:96:ca:17:4c:cb:b2:63:49:a8:8f:ee:df:1c:ca:41:d4:d6:
4f:09:b0:66:29:24:f4:82:7e:cb:4b:1e:fb:c0:a5:81:dd:98:
26:fe:a4:99:f4:f8:5f:c7:c3:ae:5d:9a:b5:c8:92:f1:60:ed:
d6:b0:f4:25:5f:86:36:ef:30:ed:51:0d:25:1b:cd:11:a2:db:
15:77:5f:ab:69:cf:42:55:dc:a9:57:bd:a8:20:a1:0b:d5:5f:
3f:fd:55:5f:5c:e0:4e:c1:2a:66:8d:32:8f:c7:ee:c4:0a:36:
b6:73:34:ab:8d:28:07:55:b4:2e:77:95:1a:f2:42:9c:24:b2:
8b:00:79:76:82:32:b2:a5:18:0f:96:c1:31:54:6f:9f:fe:d5:
53:72:61:f1:41:e4:6e:8a:52:79:33:97:6a:fd:78:0b:36:81:
f0:97:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:16:17 2026 by rpki-client