Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: B8QHtBeLFS6ggkq5iXxo1nZSL1GboYNrEoY918NJhmY=
Subject key identifier: 9F:00:10:63:99:2C:89:C6:64:5B:99:C2:8B:51:72:F5:4F:5F:29:A5
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019E0C2EF64EDFD8085E66F3380A2B11BF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 191F
Signing time: Sat 09 May 2026 10:01:04 +0000
Manifest this update: Sat 09 May 2026 10:01:04 +0000
Manifest next update: Sun 10 May 2026 10:01:04 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: r2xjnNw5xigmMrOuY7GxIEOq8EYOts/VKMx8dgaMYQw=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:2e:f6:4e:df:d8:08:5e:66:f3:38:0a:2b:11:bf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: May 9 10:01:04 2026 GMT
Not After : May 10 10:01:04 2026 GMT
Subject: CN=9f001063992c89c6645b99c28b5172f54f5f29a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:7e:e6:e6:8d:81:6e:0b:6c:42:5f:85:2b:
14:cf:b4:12:e7:9f:df:13:0e:39:47:55:0b:6f:20:
45:f5:24:99:13:73:6a:5e:ee:42:d4:ee:3a:44:e7:
59:e0:f4:75:2f:fa:d5:89:a1:54:c4:b2:5a:af:7c:
8f:5e:c1:aa:c2:3f:57:52:45:ef:4b:e4:c2:5e:c3:
77:19:1c:36:e4:9e:6b:6e:46:94:6c:58:c8:cc:20:
c3:f2:a6:ac:06:c2:8d:e1:b0:94:45:5d:51:fe:32:
2e:e5:75:ca:41:e3:11:7a:a8:c9:d0:47:9c:35:8c:
78:74:d5:d2:e3:ce:7f:24:8d:e7:af:44:89:1a:bb:
0d:46:95:6f:db:87:26:d9:4d:67:92:60:fb:58:11:
de:68:df:ab:44:3b:86:d5:09:d6:eb:a3:69:56:b7:
de:68:95:6c:b7:55:81:fe:b3:a6:38:78:5c:b6:2a:
b4:be:26:f8:d0:c1:47:08:0a:86:b6:4e:6e:53:ac:
db:e6:18:e2:ed:79:82:77:fb:d7:22:43:30:f6:e3:
d9:81:be:c4:a7:d8:22:cc:ba:a9:8d:9b:32:41:11:
37:b6:81:f5:f2:9e:17:f7:ed:45:91:27:a8:5e:24:
12:b8:8c:ac:71:80:4a:27:82:81:40:2c:4e:40:bf:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:10:63:99:2C:89:C6:64:5B:99:C2:8B:51:72:F5:4F:5F:29:A5
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:45:0e:a8:5c:70:7d:dd:90:cd:3d:ab:bd:16:02:12:7d:
19:69:d0:c0:59:ee:5a:19:9d:88:58:8c:d4:02:2d:32:ce:70:
4e:89:26:31:20:27:4a:cf:14:4f:b1:94:18:31:5d:c6:0c:a1:
d8:06:92:31:c9:1b:6b:0e:1d:f7:be:17:84:b5:4a:38:ff:91:
85:92:ec:4e:a8:27:af:f0:43:4f:8f:0f:70:fe:29:a8:8a:42:
8d:af:66:a7:79:66:db:77:34:2a:13:99:9d:b8:50:d7:f9:04:
fc:5e:3b:c3:27:3a:a1:a4:c6:0a:e5:ee:96:8f:6d:88:99:5b:
e2:84:60:a7:28:3f:74:fb:94:f9:58:5f:77:56:b9:47:86:5d:
de:04:51:ba:9d:80:f5:7a:73:c4:70:f8:81:24:88:ce:15:13:
40:6a:17:2c:aa:17:59:70:f3:a0:55:ca:97:1a:13:c5:46:b7:
16:ba:05:2a:9b:2c:32:d6:10:8d:9b:ff:72:6d:2e:07:2c:2c:
7f:53:2a:c2:62:e0:d7:c0:9c:51:58:7f:9b:6c:88:f3:00:95:
08:b7:24:40:85:e1:b3:8b:02:7d:be:33:15:ba:c9:21:3e:96:
3c:02:96:b6:4b:de:4f:8e:9f:62:9f:85:15:ba:0c:50:7e:af:
11:64:6a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4MLvZO39gIXmbzOAorEb9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwNTA5MTAwMTA0WhcNMjYwNTEwMTAwMTA0WjAzMTEwLwYDVQQD
Eyg5ZjAwMTA2Mzk5MmM4OWM2NjQ1Yjk5YzI4YjUxNzJmNTRmNWYyOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNN+5uaNgW4LbEJfhSsUz7QS55/f
Ew45R1ULbyBF9SSZE3NqXu5C1O46ROdZ4PR1L/rViaFUxLJar3yPXsGqwj9XUkXv
S+TCXsN3GRw25J5rbkaUbFjIzCDD8qasBsKN4bCURV1R/jIu5XXKQeMReqjJ0Eec
NYx4dNXS485/JI3nr0SJGrsNRpVv24cm2U1nkmD7WBHeaN+rRDuG1QnW66NpVrfe
aJVst1WB/rOmOHhctiq0vib40MFHCAqGtk5uU6zb5hji7XmCd/vXIkMw9uPZgb7E
p9gizLqpjZsyQRE3toH18p4X9+1FkSeoXiQSuIyscYBKJ4KBQCxOQL9aEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8AEGOZLInGZFuZwotRcvVPXymlMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0dFDqhc
cH3dkM09q70WAhJ9GWnQwFnuWhmdiFiM1AItMs5wTokmMSAnSs8UT7GUGDFdxgyh
2AaSMckbaw4d974XhLVKOP+RhZLsTqgnr/BDT48PcP4pqIpCja9mp3lm23c0KhOZ
nbhQ1/kE/F47wyc6oaTGCuXulo9tiJlb4oRgpyg/dPuU+Vhfd1a5R4Zd3gRRup2A
9XpzxHD4gSSIzhUTQGoXLKoXWXDzoFXKlxoTxUa3FroFKpssMtYQjZv/cm0uByws
f1MqwmLg18CcUVh/m2yI8wCVCLckQIXhs4sCfb4zFbrJIT6WPAKWtkveT46fYp+F
FboMUH6vEWRqnA==
-----END CERTIFICATE-----
Generated at Sat May 9 12:17:45 2026 by rpki-client