Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: m5bwYuht9RLTP8Cs8xMuzhVutkNBFGw/m1x+jfdEbJY=
Subject key identifier: 72:81:AD:A8:E8:B7:8D:54:CE:30:3D:D4:C4:E5:09:3A:C7:FB:40:81
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A199FCD8398E11F7DB0A1FF521435892FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1AF8
Signing time: Mon 02 Nov 2026 02:00:46 +0000
Manifest this update: Mon 02 Nov 2026 02:00:46 +0000
Manifest next update: Tue 03 Nov 2026 02:00:46 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: FGsAfyef3tS4QTmZYWAZabzBL8m2VvUMnYOOn9LOUR0=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:d8:39:8e:11:f7:db:0a:1f:f5:21:43:58:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Nov 2 02:00:46 2026 GMT
Not After : Nov 3 02:00:46 2026 GMT
Subject: CN=7281ada8e8b78d54ce303dd4c4e5093ac7fb4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:0b:5a:51:dc:bd:0d:24:d8:8f:dd:76:f2:
84:20:2a:25:5a:04:4f:81:07:29:0f:83:1b:b2:64:
1b:0a:0c:b6:e6:59:38:9d:9f:4c:5f:df:84:5e:b7:
4e:7b:eb:9e:d0:20:dd:64:68:51:f8:f1:1e:49:72:
85:65:74:5a:08:b7:28:9f:80:e6:d6:f4:1a:9e:27:
68:77:af:e5:83:8c:5c:7a:b8:ff:a6:c3:7c:0c:ee:
23:85:91:43:ec:de:6f:4f:40:12:7f:77:9c:fe:31:
09:f0:84:71:63:72:f6:b1:e3:21:01:b7:f1:11:7f:
de:7c:08:5c:d5:03:3f:92:94:e3:09:2f:59:71:27:
67:71:32:f6:18:a2:a6:87:6f:5e:ca:1d:9c:d3:1e:
8a:9a:20:05:70:78:f1:85:61:f7:61:e5:5d:b1:7b:
00:de:b6:1b:f8:f0:67:ab:7d:59:29:9e:bd:d8:13:
c3:9c:db:fc:ed:87:c9:87:6b:66:0a:d6:69:d4:eb:
6b:2b:aa:65:51:33:fc:e1:12:a2:d0:80:03:97:f8:
6e:ea:40:6c:47:04:bf:d0:51:ff:73:ab:3d:51:90:
2c:46:05:a3:a0:4a:f2:0c:cc:9c:9b:03:0b:2e:03:
8b:85:0b:96:c3:6b:48:92:f5:b3:37:81:72:0a:f6:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:AD:A8:E8:B7:8D:54:CE:30:3D:D4:C4:E5:09:3A:C7:FB:40:81
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:81:3b:a0:ed:03:e9:5c:29:7a:54:bb:bd:3c:42:10:34:
c6:e0:d0:07:60:9c:83:52:b9:39:8b:ee:c6:03:14:66:ea:c2:
5c:6b:8c:d7:f0:35:8e:00:cc:90:7e:b3:e7:18:41:b8:f4:dc:
e5:c4:0a:23:50:f2:74:b6:56:73:dc:52:82:e6:89:75:5e:4f:
f0:29:40:2e:30:d0:47:a7:c0:88:f2:ca:d3:b9:ca:5e:f9:30:
9a:bc:bc:2f:28:09:b5:b4:01:c4:9b:de:08:76:98:c3:88:d1:
75:7c:ec:1d:44:17:10:17:37:82:fb:a0:86:a1:5c:e8:32:84:
5a:b5:8f:cc:fb:57:ca:94:9c:2b:f7:9e:4c:59:40:ab:e3:54:
0d:2e:3a:0d:f1:54:3f:34:87:e3:c0:8a:4d:ee:5a:27:08:b8:
c2:51:58:05:22:43:d3:7a:aa:74:a9:54:6d:d6:49:a1:82:fe:
88:d0:e1:8f:64:20:54:71:f3:4c:88:3d:a5:8a:b3:62:46:20:
12:0a:bb:9e:c7:22:1f:b5:ba:e9:cc:52:e4:3b:ee:22:8c:09:
01:22:22:a7:34:4d:77:42:15:98:e8:2d:19:48:8d:0d:3d:ff:
47:47:0b:f8:7b:88:8e:03:fe:5e:1f:e3:ed:ba:cf:63:58:07:
66:3b:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:12:11 2026 by rpki-client