Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: VGPaB34qW3lS/SKrW6MDWv02yqx0rX5Qo7bGpRCQz+U=
Subject key identifier: 32:7E:0B:01:1C:56:7C:1C:34:7F:67:DF:C1:22:FB:F1:73:7F:45:B2
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019D9A3EF3CBB37756E61828F81FE5AF57B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 18E4
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: mfWZLXq7hYPC899qU/qJipqfs9Emj4na01LsTp1yXk4=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f3:cb:b3:77:56:e6:18:28:f8:1f:e5:af:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=327e0b011c567c1c347f67dfc122fbf1737f45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:28:75:e2:83:41:fc:36:71:10:84:45:7a:
39:e1:fa:44:6e:7a:b0:5f:96:3a:ce:93:62:c4:7f:
9f:d9:0a:ae:13:63:16:5a:91:44:7e:67:9e:87:f3:
02:2a:32:ab:ca:81:df:ff:e8:3a:77:25:d8:ef:0a:
f1:02:73:f2:bc:85:30:11:d4:bc:ac:9f:22:db:20:
b2:3a:6f:59:86:19:9e:37:35:b3:4c:6c:03:03:67:
9a:01:72:cf:c1:10:65:14:e5:b5:7f:a7:e1:4d:29:
7b:24:89:79:f0:7d:db:68:76:7c:cd:75:ca:a4:38:
9e:46:1d:b6:ac:8c:c3:ef:ef:79:0d:eb:7a:a8:df:
68:ba:55:96:e2:c1:80:69:8b:cf:e2:08:22:db:3e:
e5:10:73:00:7e:95:03:b0:64:34:9b:a5:99:0f:13:
55:39:89:4e:48:7c:32:30:d7:d4:43:1f:d2:af:50:
aa:29:d7:bd:24:47:c3:30:fe:af:bd:25:44:88:55:
5b:dc:92:71:9b:80:ea:f7:3e:96:90:d0:4b:c1:dc:
b4:10:42:aa:c8:0a:5c:b5:d9:c6:91:65:98:bb:16:
cc:76:fc:34:73:af:48:e0:40:16:20:2b:b7:df:60:
6e:04:d5:80:d8:0e:8a:51:74:47:e0:d1:9a:46:b8:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:0B:01:1C:56:7C:1C:34:7F:67:DF:C1:22:FB:F1:73:7F:45:B2
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:da:9f:8b:c4:4b:e3:55:52:63:c0:88:ad:a7:a8:48:46:1d:
3a:2c:85:42:d6:be:f5:99:fc:96:07:69:14:ca:cd:98:e1:de:
37:64:ab:e6:0a:0f:fa:e3:c2:2e:cf:24:ce:36:f1:c3:69:7c:
7a:11:30:37:24:d5:3b:61:fb:30:89:cc:65:c8:96:3c:cf:1f:
37:8a:21:b2:d7:04:ec:b8:7f:c3:e2:7f:bc:d4:22:54:ba:4e:
db:7c:a7:82:13:7d:3e:cf:9f:2e:ab:73:99:62:e1:7d:2a:73:
b7:d9:89:39:6f:72:79:63:76:ba:24:c5:24:34:a5:ba:03:cc:
8e:7d:d1:2b:f8:24:03:e1:bd:d0:49:11:86:bd:77:df:38:82:
4e:dd:57:c9:ba:c2:bc:c3:5b:ed:e9:6f:92:75:03:45:4b:d3:
46:cd:8f:96:c3:ee:55:3c:06:63:0b:5e:2b:d5:bd:15:08:a9:
a2:61:2a:23:79:f2:ac:67:a5:35:00:b5:c9:3e:40:4e:13:0c:
fb:f9:e6:0d:6b:23:f9:eb:1c:79:11:4f:a2:ef:18:16:8c:89:
69:10:67:de:11:25:e8:10:8b:61:28:a8:d9:e7:75:92:b3:7d:
39:46:6e:4d:81:8d:b0:e2:11:3a:df:6f:f6:94:16:39:3e:72:
ca:2a:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:26 2026 by rpki-client