Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: PVbEhinmrWwzSsDgvd3u83w4qJHpxxkuyg4eNlklr4c=
Subject key identifier: F0:44:B5:6B:04:D0:3B:43:96:93:20:2D:C0:60:B9:CA:5D:57:F9:64
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D300784A00CA365F6A16A90724DCE8962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18AD
Signing time: Fri 27 Mar 2026 16:01:32 +0000
Manifest this update: Fri 27 Mar 2026 16:01:32 +0000
Manifest next update: Sat 28 Mar 2026 16:01:32 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: G3XiNabjA6U8VoKLvbFAVATGaKr9p6VGLrWlrt/R67Q=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:07:84:a0:0c:a3:65:f6:a1:6a:90:72:4d:ce:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Mar 27 16:01:32 2026 GMT
Not After : Mar 28 16:01:32 2026 GMT
Subject: CN=f044b56b04d03b439693202dc060b9ca5d57f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:80:99:29:12:25:a0:b4:91:05:35:be:09:
80:2f:7c:79:b5:af:ca:68:d9:c0:6b:e5:bc:fc:4c:
42:ea:59:56:90:e8:04:4f:8a:26:b0:59:47:17:1b:
0e:36:ee:58:9f:d7:50:b5:4b:6b:0a:e5:6c:6d:99:
99:e1:7a:7d:68:14:66:96:73:99:3a:fc:0c:62:81:
3e:92:3e:01:75:a4:32:13:9d:7c:e8:f1:2d:a8:9a:
06:52:85:7b:68:e8:ea:0b:0e:07:54:3f:40:46:30:
09:b4:36:03:53:26:f1:aa:c1:aa:3a:d7:03:cd:08:
90:ce:71:79:10:a6:6b:c4:01:f9:6b:ce:04:3f:2a:
90:12:b0:b3:94:2a:62:fb:1f:61:aa:57:2e:94:e6:
02:48:36:e7:8b:38:a5:45:49:da:b2:dd:7b:1b:6c:
67:fa:d3:74:3a:80:6c:80:ce:49:01:4f:10:d9:5d:
d9:c7:05:b9:c7:77:b0:b0:43:45:92:07:7a:fb:3f:
9e:54:23:99:ec:a5:23:1b:f0:71:1a:0f:42:45:9e:
58:b6:97:f5:95:cf:4b:60:55:c8:9e:30:23:ab:19:
ec:13:bd:6e:c2:ab:fe:5a:48:86:c2:24:e5:02:3e:
82:ab:96:c7:99:66:d6:72:3c:51:38:1a:6c:1f:1c:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:B5:6B:04:D0:3B:43:96:93:20:2D:C0:60:B9:CA:5D:57:F9:64
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:f9:4a:cf:d1:39:bb:bb:cd:59:eb:79:f0:51:e6:52:e9:
65:c4:9e:ba:da:fc:95:69:03:0c:fc:15:b1:ee:87:fa:ac:d3:
2b:29:99:5f:ef:79:89:b6:ca:a1:d9:53:a3:a7:c3:f6:da:82:
35:03:a5:63:b1:d0:1b:87:92:9b:bc:c8:26:02:26:19:f8:24:
37:27:78:bd:cc:77:fc:2f:cb:51:e8:6b:7b:5b:f5:84:40:b2:
d9:b9:55:e0:cd:e5:e5:60:bd:85:32:5c:70:3c:57:d2:cb:8b:
d7:f1:93:08:5d:92:67:98:10:9d:53:38:83:5c:8b:9b:42:56:
fb:99:4f:36:02:d1:e0:c8:23:9c:03:92:2f:da:04:fb:34:17:
84:84:c1:ca:c8:3a:65:97:d9:de:92:d2:84:a1:cc:2a:ab:5b:
c6:e3:5c:55:d5:32:5d:17:bc:97:7c:6b:79:21:7a:68:ca:ff:
33:59:95:83:d7:2a:07:f2:89:95:5a:c0:38:06:cb:f5:14:e5:
56:8c:09:c1:7a:2e:f2:b7:a6:6b:8d:f6:26:a1:3e:b2:6f:3f:
82:e8:93:37:66:89:3d:4e:60:ba:54:73:b7:3b:98:69:97:5b:
43:7d:1c:da:bc:ba:8d:37:27:8e:d4:2f:5a:10:51:88:d5:70:
4f:b0:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 18:51:40 2026 by rpki-client