Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: H499YZTkiCOUgrsLCF9L0c69UXpgOhtLphJHjugzkpw=
Subject key identifier: E1:68:32:C4:6F:1D:A1:AF:3C:3E:A2:C0:96:BE:A7:25:62:4A:73:D6
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019DF12599E1718F55B2B023177EAE7A46C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1911
Signing time: Mon 04 May 2026 04:01:06 +0000
Manifest this update: Mon 04 May 2026 04:01:06 +0000
Manifest next update: Tue 05 May 2026 04:01:06 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: cEQ26UK5rPGVdiLa96CxHu1oMXxLFOorQ686oXOMOos=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:25:99:e1:71:8f:55:b2:b0:23:17:7e:ae:7a:46:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: May 4 04:01:06 2026 GMT
Not After : May 5 04:01:06 2026 GMT
Subject: CN=e16832c46f1da1af3c3ea2c096bea725624a73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:f3:83:a9:5b:1b:a0:10:47:de:49:a7:71:
10:af:59:9f:ec:54:61:43:5a:88:f9:a6:c7:02:be:
b8:a0:87:74:c0:98:32:ab:f3:32:97:1a:bd:2e:e2:
67:cf:30:ce:9e:57:d8:88:14:db:d8:64:d6:cb:47:
d9:6b:f4:37:df:5a:ed:ba:9e:3c:c7:fe:17:e4:b5:
59:6f:95:d9:b7:5d:0d:ec:a3:55:43:83:54:12:0b:
81:cd:43:69:25:4e:0a:f9:01:c3:65:33:97:66:97:
7f:64:0b:a5:10:81:16:e2:06:f9:57:e2:97:6a:45:
c3:06:f9:37:b2:3b:6b:2f:a0:a1:16:2f:54:92:03:
b2:df:a7:55:db:67:a3:8d:2f:98:0d:24:56:08:e0:
9b:38:46:22:a9:ae:90:59:e6:88:2c:e3:95:7d:4f:
d5:20:90:40:4e:4b:42:c9:b4:60:95:e3:3e:c5:76:
9d:0c:1a:47:29:7b:2e:7c:c1:97:d7:cd:5a:55:b5:
80:da:4e:48:cc:9c:3a:ea:6d:b3:1c:6a:e5:d8:df:
95:55:13:22:0c:68:be:1b:5f:af:5f:7a:cb:b6:7a:
b1:7f:05:82:d9:c9:ee:5c:67:c3:b2:e2:6d:77:16:
5e:97:2c:de:69:9f:1f:ce:17:19:ed:4d:89:79:04:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:32:C4:6F:1D:A1:AF:3C:3E:A2:C0:96:BE:A7:25:62:4A:73:D6
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3b:4a:d7:b3:1f:b2:61:8f:d2:d1:c3:b1:0a:22:f4:bf:34:
88:81:0a:1b:2d:f2:25:86:83:e2:da:cb:ac:96:78:72:3a:65:
a1:ec:b0:f3:a3:70:3f:dd:18:c0:c5:79:93:ac:37:78:a7:5b:
1e:cc:31:c3:8e:1c:5a:d2:c1:3f:b7:b6:a9:b7:80:d7:8e:73:
76:16:f9:77:a9:9c:60:a4:3b:5e:1e:76:03:15:85:83:81:cd:
94:14:18:90:dc:9a:3a:a9:6a:65:05:4b:c9:54:8e:91:c7:b9:
4c:9a:ce:03:d6:18:9e:69:ea:78:e7:c5:8b:a0:a7:93:c3:28:
8d:bc:62:b8:9c:17:0f:1c:67:ec:5d:bb:dd:a6:b4:51:4e:aa:
9f:c1:b3:45:eb:69:ac:5a:c9:d9:0d:ee:6c:f7:af:d9:fa:f1:
e0:b4:2f:6f:1f:df:8f:76:ca:76:32:85:be:74:49:b4:fe:9b:
58:19:bb:93:25:9a:6c:9c:d4:e1:fd:e2:90:8b:87:ed:de:40:
ec:fb:52:39:bf:c6:49:c3:a3:73:e3:26:ba:70:8a:01:48:a6:
92:7e:67:80:30:d6:3f:0a:3a:0b:ea:59:8c:a3:69:ce:40:b6:
cf:33:d0:22:5a:21:85:8d:c7:93:cd:e6:c0:67:5d:e1:64:9d:
77:68:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 10:22:29 2026 by rpki-client