Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: aZIKf5P62weE6HCbEvoS/Yb/RFY4WZeDgyoKflum0B8=
Subject key identifier: A8:A7:55:01:66:1E:67:B8:38:94:3B:B7:B1:57:14:09:88:A2:50:3A
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019E1D22FEB3D923AC19460A3124CCEF4FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0FAA
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: Ay6sgvjRIl5b5U69XVMp3BT+SvMxNDESiqmmCARDvUg=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fe:b3:d9:23:ac:19:46:0a:31:24:cc:ef:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=a8a75501661e67b838943bb7b157140988a2503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:ca:29:79:7e:59:2f:d6:ab:d6:d7:b2:f7:
a6:b9:82:6e:8c:22:0d:4b:11:98:3b:4f:d9:3f:35:
98:af:84:8b:52:94:2a:2a:a7:22:46:59:51:5e:6e:
97:4b:c1:cb:69:4d:aa:b6:63:18:dd:64:f5:9e:67:
b1:7a:5d:fd:80:2b:09:a1:25:17:f5:2e:14:af:b9:
f4:1d:89:59:03:0d:08:7e:66:69:9a:e0:89:cc:c0:
18:0a:0d:68:61:dd:f3:a3:05:3d:51:c1:98:63:cb:
25:d3:52:ee:8d:2b:2f:63:4e:db:ed:3b:3f:ce:cf:
26:a5:74:13:9f:9f:74:12:82:eb:41:9b:c4:9d:9f:
30:39:83:f9:26:72:84:2e:d7:e5:19:e7:63:a7:b2:
ff:6f:66:5e:e5:f9:0d:1a:1b:ce:b0:54:b4:3c:c0:
d4:55:5d:58:35:68:24:e7:4c:cd:66:1b:ed:3d:fb:
07:40:77:57:37:cc:e8:6f:98:83:0e:92:c7:7a:37:
c9:aa:04:45:e3:ae:dc:ce:1e:e7:4b:9c:ca:e5:7c:
c5:f0:f0:17:c8:13:e0:68:6e:4c:35:1b:85:f7:77:
f9:2b:81:17:ef:84:dd:e6:37:7f:5a:bc:79:03:af:
9a:c4:b1:56:b6:3c:94:05:f5:82:27:67:c8:ee:66:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:55:01:66:1E:67:B8:38:94:3B:B7:B1:57:14:09:88:A2:50:3A
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:38:26:4d:d8:2c:64:12:39:a8:d6:a1:15:87:d0:ef:32:0f:
a2:32:7e:e0:87:92:53:9d:d3:47:7e:4e:4d:8f:29:89:54:e9:
e1:5c:8b:61:b2:22:0d:eb:64:ee:84:25:1c:0d:3d:b5:be:2c:
37:9b:2a:91:30:76:54:5e:37:98:2f:4f:c9:70:f2:28:67:89:
d1:80:f3:ad:41:07:55:de:72:53:c1:e2:e7:78:c5:a1:6c:99:
f1:3d:b3:41:37:53:1c:fa:72:14:02:f7:83:17:c5:1e:f2:40:
84:9e:f9:70:c5:58:17:79:64:a1:1a:45:b9:ee:2d:6a:b2:27:
3d:5e:02:7d:64:ff:6a:cc:26:c3:42:c9:69:19:84:96:8f:d2:
6e:e4:9c:cc:87:9f:f9:01:ff:24:20:1c:f9:f3:47:ec:82:1f:
3a:19:3f:a0:9c:4f:42:8c:4d:af:29:f7:38:a6:97:d7:e8:76:
41:b0:a1:50:0a:24:8e:5e:65:d2:75:51:b9:48:29:a5:04:79:
d6:99:57:7c:da:39:78:25:39:4e:bd:1e:c4:a3:09:1e:4a:e3:
4f:b1:a1:b2:30:69:00:22:9c:d6:b0:32:70:ec:43:9b:79:d5:
ef:23:d6:4e:07:8b:2e:60:87:5c:91:2b:c1:c4:b9:80:8d:25:
fc:b9:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:58 2026 by rpki-client