Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: g/iH7RvgYPl5SOo1yU2wJh7g9DFiHng3LckJ44KkMh0=
Subject key identifier: 3A:94:AE:65:55:A6:02:DF:F9:24:28:93:9B:6D:89:1D:9D:96:B6:25
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A00FCF7B8682C1372B3BFA61404A85B1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1A2A
Signing time: Mon 17 Aug 2026 13:00:50 +0000
Manifest this update: Mon 17 Aug 2026 13:00:50 +0000
Manifest next update: Tue 18 Aug 2026 13:00:50 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: CLmwVY6iWSuNf2LQh6/P0B0SlIVXjcxLCtiNrh90rRI=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:cf:7b:86:82:c1:37:2b:3b:fa:61:40:4a:85:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Aug 17 13:00:50 2026 GMT
Not After : Aug 18 13:00:50 2026 GMT
Subject: CN=3a94ae6555a602dff92428939b6d891d9d96b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:97:e3:85:16:b8:eb:6d:ea:25:ad:b1:2b:
a0:b7:8f:e9:65:0d:e6:bd:d9:fa:40:fb:73:f2:a2:
9a:cf:52:fc:54:30:ba:23:10:ad:7b:8f:24:96:50:
0f:82:0f:bf:75:17:f0:f9:da:aa:80:ad:ea:05:5f:
65:94:60:22:2f:83:dc:60:b6:f5:8c:76:ed:08:5a:
58:0c:52:99:d1:32:0a:48:a5:6d:d6:ca:10:c8:9a:
25:6f:0d:69:9e:e5:c5:61:41:d3:22:49:70:96:ab:
e9:c4:cc:bf:33:bc:42:5f:47:a8:f5:93:fc:c4:05:
75:57:5a:80:d1:c8:c7:9a:51:b5:28:1f:d2:9f:de:
ee:28:a9:c6:eb:53:9e:34:b8:3e:a4:32:c5:a1:48:
f0:11:d2:c7:1d:ee:c4:92:f5:fc:89:a8:23:fa:31:
d2:5b:a8:b4:b6:42:74:55:48:a1:70:dd:e5:e4:07:
88:07:d9:28:e9:20:38:b8:0f:eb:5f:17:bf:61:26:
e9:eb:8d:52:38:7c:e4:80:ad:87:db:e4:37:07:5b:
2a:81:e5:ce:db:47:65:3f:b6:2c:a7:f9:d7:b4:40:
8c:05:d3:df:8d:f9:6d:93:71:37:f8:c5:4d:11:04:
f7:af:bd:37:3d:ea:2c:6e:a4:7d:13:7f:39:ac:4b:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:AE:65:55:A6:02:DF:F9:24:28:93:9B:6D:89:1D:9D:96:B6:25
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:fe:12:00:19:20:df:e5:4d:0d:ed:a8:6a:92:89:c1:1b:
f5:b6:bd:1a:9d:bf:d4:68:01:2a:be:1d:28:d4:8d:80:bd:e9:
c6:06:fd:ec:63:c6:e2:1c:64:e0:8e:2c:e9:c4:10:b2:ba:aa:
ee:ae:31:23:aa:5d:34:d3:bf:0c:30:df:35:0e:d8:f5:10:21:
61:db:43:05:f9:30:b4:d3:3b:20:e7:98:23:27:ae:73:58:ec:
9b:76:a6:1c:ec:ef:40:15:cc:0f:50:d6:0b:7a:43:d0:d6:35:
64:6a:1f:dd:dc:46:9f:a9:0e:7c:b2:c3:84:e7:e6:6a:e9:2a:
ea:c8:b0:e8:31:65:c2:09:4c:10:13:e9:e5:1a:de:2d:23:8e:
10:65:98:41:b4:1f:28:28:15:47:4c:b0:30:f0:6d:d2:94:44:
41:a1:b5:38:0b:19:20:8f:65:fd:47:5c:ad:24:7b:bf:0d:e4:
e9:c3:d1:7e:c0:71:58:52:47:4c:3c:a8:a3:b1:27:58:49:41:
b1:e8:ff:b0:29:4f:c8:83:a4:ab:62:3b:e9:1f:05:01:ce:1b:
eb:87:4d:7f:8d:2c:8a:29:b7:6a:1a:7c:55:e4:d1:f5:fe:f0:
87:a3:0f:d2:ea:6a:82:be:c8:65:99:38:28:d2:bf:27:93:47:
c1:3f:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:36:45 2026 by rpki-client