Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: 29mii4I5ymtZ0qFNNq5V+FU1XXnK9vQoQ6X3r8x5LFc=
Subject key identifier: 80:7D:AC:1F:7D:B5:C1:02:97:01:3B:6D:E3:9F:EA:4A:07:91:55:30
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 01A0CE9123D1EF5F7D565703A3E021603D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 110F
Signing time: Wed 23 Sep 2026 14:00:13 +0000
Manifest this update: Wed 23 Sep 2026 14:00:13 +0000
Manifest next update: Thu 24 Sep 2026 14:00:13 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: bLfR3IwaoqEl5mC8Xd7mkBChlsQVpJqRi2idFvIsjD4=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:23:d1:ef:5f:7d:56:57:03:a3:e0:21:60:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Sep 23 14:00:13 2026 GMT
Not After : Sep 24 14:00:13 2026 GMT
Subject: CN=807dac1f7db5c10297013b6de39fea4a07915530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:2c:29:2d:74:b2:53:46:67:0a:a0:bf:a9:
4c:3c:be:e5:8a:2e:44:07:bb:d2:2b:f9:66:fe:30:
ce:f4:99:ea:74:7a:3e:83:2c:fe:1d:d5:3c:c7:b1:
a1:29:31:c7:1f:2a:76:e1:4e:f8:97:0b:31:5f:e7:
16:1c:5b:c3:c4:63:e2:79:3f:a9:1e:98:e9:53:0f:
d5:e0:46:cc:1d:5e:7b:f6:9a:68:4d:64:dd:6a:cc:
96:11:d4:2e:da:76:8e:94:2d:74:40:3d:d0:c9:f1:
b5:57:49:58:04:46:85:13:b6:08:e5:15:c3:da:52:
d5:19:0d:84:df:f7:79:5f:f0:80:83:e7:98:ed:27:
da:05:19:b1:71:19:7b:8a:d6:43:32:74:5c:37:81:
f3:79:93:54:a4:6c:e0:a6:27:cf:0d:85:fa:52:02:
ea:a9:9a:1f:2e:ca:ba:d1:8c:15:17:ef:6c:f7:f0:
8a:dd:72:dd:16:34:df:62:1c:d5:28:40:b4:79:74:
79:f9:1d:20:82:92:d0:e1:f3:4e:d3:3e:05:0c:02:
39:79:a1:e0:f8:f8:0d:37:3e:7b:70:09:19:64:62:
fb:43:28:f9:4b:58:59:82:2b:59:35:b3:36:20:c4:
f5:9e:46:47:26:c8:2c:c3:d4:4d:54:de:b8:e5:21:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:AC:1F:7D:B5:C1:02:97:01:3B:6D:E3:9F:EA:4A:07:91:55:30
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:51:c6:a5:12:e2:9f:c9:1e:05:db:9e:4d:dc:4d:7f:f3:
b2:86:bc:54:b5:3c:58:c4:1a:28:09:f8:78:44:d5:09:a2:8b:
ae:e1:ad:0d:45:9c:61:93:07:63:9b:98:ed:46:eb:87:0e:c2:
5b:b7:f0:aa:b1:b9:12:72:bf:61:a3:da:da:40:19:cb:e9:06:
e0:b7:2d:18:5d:d0:27:23:37:5e:b1:22:e1:69:8c:c2:7b:a1:
96:53:c2:a7:be:3d:f5:9f:23:fb:81:fe:29:fd:82:7a:f2:91:
e5:79:b7:0f:97:72:d2:ee:01:8f:54:2d:4a:af:ba:17:13:ab:
ce:45:21:e1:83:fa:df:35:ec:68:53:ca:42:c8:c2:c8:ca:f4:
4d:ad:3e:17:84:b2:39:01:06:f6:85:ba:8d:e9:44:fd:5d:60:
1f:ab:54:fd:74:47:60:0d:42:e1:d1:ef:83:88:37:c3:54:05:
c4:01:63:cc:45:a2:0d:cc:b5:e5:62:f0:32:93:d1:e5:e8:ef:
b1:d4:02:7d:60:bb:1f:84:d8:a0:8b:30:71:62:8b:5c:92:57:
93:59:67:77:f7:0f:2e:3d:8a:b7:c4:2f:e3:66:76:06:90:fc:
0f:c4:f7:de:42:6f:aa:1f:a7:08:18:9f:0f:5e:99:fb:e4:52:
d9:4b:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:37 2026 by rpki-client