Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: Rg8NDTLyIavw+RXBqqXljKHCxcajDoHvCUlH8xAM0nE=
Subject key identifier: EC:32:CB:72:42:25:0D:E3:07:35:C4:06:61:5B:D6:D0:A5:F2:13:75
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D6FC1E082983D6A6BEE6FDB0BF70AF5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18CE
Signing time: Thu 09 Apr 2026 01:01:10 +0000
Manifest this update: Thu 09 Apr 2026 01:01:10 +0000
Manifest next update: Fri 10 Apr 2026 01:01:10 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: MtlgdJ4yicUJOMKCrzCYjYkyEB9zNUFkY2SxfEdGr/E=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:c1:e0:82:98:3d:6a:6b:ee:6f:db:0b:f7:0a:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Apr 9 01:01:10 2026 GMT
Not After : Apr 10 01:01:10 2026 GMT
Subject: CN=ec32cb7242250de30735c406615bd6d0a5f21375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:14:19:90:00:13:55:64:d4:b7:62:9a:29:
f7:cc:74:fe:d9:5a:68:b9:1d:12:1e:1d:57:0c:38:
1c:57:c4:d5:95:cb:c3:5c:16:21:9e:44:de:b5:3e:
1d:60:cf:ef:4a:f4:ed:6b:de:9c:7f:92:10:6d:55:
93:1b:d5:53:0d:43:0c:9a:9e:ad:4d:ce:ac:e6:b3:
53:b8:41:16:de:d7:e0:15:52:d4:a9:e8:e0:b0:a9:
ae:61:03:6f:42:1b:9a:43:32:71:08:aa:53:9e:e0:
27:51:63:25:a2:cc:66:54:ea:40:2f:97:49:2d:1a:
35:5c:2d:a9:b2:0f:49:f3:2c:b5:0c:54:05:b5:19:
cd:45:08:c8:d2:6c:67:63:73:43:d9:54:3a:15:bd:
46:c6:10:44:c8:2f:bf:06:cf:06:2e:42:39:69:d3:
d9:6a:29:ab:0e:66:d8:02:5f:28:fc:a5:36:e9:17:
fa:0c:c0:67:7d:79:2c:00:70:67:58:f0:ca:19:27:
f4:ab:f3:8a:9d:9d:31:1c:6a:6c:e1:0e:80:4c:13:
d4:ae:f5:ff:71:22:ae:3c:3a:e1:3f:6b:cd:08:44:
e5:66:f8:a0:05:c8:bf:00:7e:f7:2e:9e:d7:82:97:
65:b8:17:0d:85:9b:89:37:48:c6:9f:78:6d:d4:c4:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:CB:72:42:25:0D:E3:07:35:C4:06:61:5B:D6:D0:A5:F2:13:75
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:f3:bd:ff:78:4f:45:6a:3b:e2:03:96:5d:95:63:68:ee:
32:c1:04:9a:49:53:e7:6c:d0:68:22:91:4e:d1:d8:fd:a2:89:
21:06:0b:88:18:95:8d:93:4a:03:c0:0c:ff:c4:e9:ea:74:ac:
6e:96:10:bb:a2:ea:b5:f2:cd:8f:6a:7f:58:ed:af:22:15:15:
9b:73:09:38:fb:68:09:73:0c:12:5f:46:22:7c:1c:b1:89:f2:
41:9e:df:75:c3:56:2f:e4:0b:39:94:14:8c:cf:d8:a0:01:0b:
78:96:8c:a0:d5:5b:88:a4:64:13:17:5a:6d:7a:9f:f1:be:a0:
7c:0e:a6:32:e4:7b:65:8b:ed:7d:e9:a8:c5:82:50:26:1f:f3:
fb:ee:4d:45:a0:78:3a:0b:3c:fe:19:e6:ea:a6:bb:c1:ff:b9:
34:27:7f:5a:c6:70:75:2c:8d:29:27:a3:af:bc:5d:df:ba:8b:
5c:9d:11:ec:78:d0:c0:4d:37:3f:3f:30:27:bf:a0:f9:2e:55:
8f:cb:c9:b4:4c:7f:f6:2f:4f:08:6a:7b:98:cd:73:0e:8a:9e:
5d:06:13:ad:6a:af:82:78:62:3a:7d:8d:f2:07:6f:12:0a:81:
bb:4d:b6:10:c5:4e:58:b8:81:0b:a4:de:e5:57:f8:e1:e3:de:
2c:aa:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 08:37:03 2026 by rpki-client