
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: Ya+zNm/Vff1EhtcSMc+5KJC61Vdvg1ienTcdSfGo7ZU=
Subject key identifier: 8E:F7:D4:9F:B9:5A:BD:9F:66:EB:1F:2C:E5:87:5C:39:A2:DF:BE:47
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A0CF369B1CEB84BF9E4F30D2AB671BF088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1A8E
Signing time: Wed 23 Sep 2026 17:00:57 +0000
Manifest this update: Wed 23 Sep 2026 17:00:57 +0000
Manifest next update: Thu 24 Sep 2026 17:00:57 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: uAM1Osqg3Y/itSm6zGMdJLCBpziu2fJW6QJZAJdo95w=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:9b:1c:eb:84:bf:9e:4f:30:d2:ab:67:1b:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Sep 23 17:00:57 2026 GMT
Not After : Sep 24 17:00:57 2026 GMT
Subject: CN=8ef7d49fb95abd9f66eb1f2ce5875c39a2dfbe47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:98:93:03:29:db:71:06:e8:57:57:12:77:
f4:6b:77:89:35:9e:cd:0d:fa:12:cf:5b:d1:ed:e7:
28:0e:72:c1:12:2f:c6:63:e9:32:8f:ca:29:eb:9f:
2c:b1:b7:5c:eb:bc:5a:b1:f4:1f:ad:28:75:99:63:
d1:2b:bc:3a:d6:19:dc:9e:3e:25:b8:ef:f0:8f:e7:
03:04:97:bc:4d:94:05:d3:6e:47:9a:85:e4:96:f9:
8d:59:85:61:77:8c:a6:32:2a:be:d4:de:d1:13:70:
b2:24:3a:7a:76:b7:c2:a8:10:25:0a:9a:23:2b:6c:
37:ac:b8:b7:ee:90:14:8e:e8:fe:be:cb:a4:14:4d:
17:4d:39:5d:fe:3f:05:31:1c:7f:0c:87:09:f6:99:
8d:61:8f:78:ab:91:28:35:71:3f:78:21:7d:f1:0f:
2b:d8:0c:38:41:c7:41:13:a3:52:2f:45:f9:1f:39:
7c:30:85:df:2a:ed:ba:a4:c4:97:60:fe:14:cc:9b:
9c:04:cb:13:54:13:a2:6f:58:6e:c4:00:1b:89:fe:
7c:17:f9:d4:48:b9:28:8c:95:e3:e4:ba:9a:a9:09:
0c:72:ed:2a:7d:f9:c7:5d:ec:36:5f:f0:90:b5:f8:
b2:18:3d:5c:ec:e2:96:15:df:96:52:60:11:c5:84:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:D4:9F:B9:5A:BD:9F:66:EB:1F:2C:E5:87:5C:39:A2:DF:BE:47
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:11:68:eb:b6:9f:39:65:28:35:3b:2b:e1:31:a5:2e:70:e5:
c9:2c:06:67:0b:f9:85:00:c9:84:cc:42:ba:2f:45:40:1c:86:
5b:2f:e5:00:7c:91:db:64:ea:bd:da:19:5f:f1:4e:52:4a:fa:
9d:78:b8:47:34:16:83:59:dc:7b:5c:b3:04:04:b5:bb:e1:7f:
26:29:6a:78:8d:53:cc:78:22:38:28:77:a7:bf:28:86:ad:c9:
80:37:da:d0:36:ac:8f:aa:04:02:b5:23:9f:d1:4a:1e:38:3e:
2c:ef:0f:7c:5e:27:e3:a2:63:b3:dc:ef:bb:b9:12:50:71:bc:
ea:c3:b7:6a:e3:db:17:85:0d:74:8b:db:6d:ad:bf:b5:78:9a:
f4:63:ea:fc:3d:8e:13:f7:d9:fa:a4:8d:3d:c2:2b:ed:cb:84:
99:99:28:0a:9b:dc:19:0e:eb:61:33:b8:c4:8a:4c:99:99:fc:
5e:4f:bb:3e:dd:a5:06:61:42:04:2c:ed:65:90:57:1f:9e:e2:
bd:a6:5a:12:0f:13:70:88:ef:ff:75:17:88:87:a1:b4:b2:55:
63:1c:82:a0:76:97:2c:6f:d7:82:c2:d9:5d:05:c5:c4:d9:b4:
e8:46:23:39:ed:49:97:b0:01:52:fe:01:1e:04:6a:63:85:30:
4e:3c:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:06:14 2026 by rpki-client