Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: 9XCRbTQm74ijOwZIx448pIYmtrz+TmbWJ+iM/2nx7mg=
Subject key identifier: CC:86:5E:42:DD:25:D1:B7:20:25:7D:A3:22:1A:93:5E:C9:AD:6E:B2
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019F91DAA229063CCD202CC71DA40CE312DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 106B
Signing time: Fri 24 Jul 2026 02:00:52 +0000
Manifest this update: Fri 24 Jul 2026 02:00:52 +0000
Manifest next update: Sat 25 Jul 2026 02:00:52 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: 2owDsBE1APC7AVWJjnSeEuIcmYJZ1oRtY6N3bo/5Bok=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a2:29:06:3c:cd:20:2c:c7:1d:a4:0c:e3:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jul 24 02:00:52 2026 GMT
Not After : Jul 25 02:00:52 2026 GMT
Subject: CN=cc865e42dd25d1b720257da3221a935ec9ad6eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:82:cb:25:62:b3:93:d7:d8:b4:16:f9:fd:
62:d7:07:7e:6f:fa:e8:a1:35:9d:45:55:0a:18:a3:
b6:3a:79:b3:08:9b:e1:20:96:b6:2f:ea:b4:1f:a0:
f4:31:1b:bc:f4:29:6f:ed:64:19:77:8f:d0:3d:00:
01:c9:0e:1b:14:5d:23:86:2c:67:2f:5a:32:63:4c:
ec:93:64:c6:68:17:e2:92:dd:29:cf:32:06:18:48:
15:1a:99:62:43:09:37:1e:81:60:a8:5d:c3:c3:b3:
55:75:a8:54:41:d8:95:14:2f:3a:c3:fe:3e:dc:2d:
c4:96:34:94:6d:c1:48:4f:8d:16:6a:f5:37:1d:29:
25:18:37:74:bc:17:0f:83:9a:68:c3:02:ce:c6:3d:
84:08:3a:03:78:8b:01:71:cb:4d:4c:4a:e2:68:ea:
ae:df:bd:d4:15:ca:4f:d5:ee:52:2b:6a:01:67:bd:
4e:c0:2d:8e:43:01:9d:03:44:24:48:41:29:7a:80:
74:6c:9e:48:37:c2:0b:2e:80:0d:c8:39:21:8c:41:
d1:ee:f4:67:1e:cc:a6:c0:e9:85:24:2b:90:fe:74:
86:5e:15:93:50:1b:d3:96:63:e0:12:fb:2e:e3:13:
33:56:de:70:de:16:15:64:a9:70:a2:53:c1:1b:a1:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:5E:42:DD:25:D1:B7:20:25:7D:A3:22:1A:93:5E:C9:AD:6E:B2
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:e8:c4:55:fa:fd:6b:41:0f:67:b6:fc:f8:aa:89:bb:9b:
ab:f7:d0:4b:25:5f:4f:49:f4:b9:c9:4a:c4:95:ac:54:e4:e2:
9f:c9:3f:f8:8e:bc:81:7c:1c:36:75:4c:22:39:02:81:bc:45:
b6:14:cd:a9:6f:0d:38:95:1d:97:61:ae:f9:c0:c6:67:af:75:
c6:8d:5e:05:e9:07:c5:e7:24:b1:ad:b1:fe:dc:a4:c2:ef:bd:
19:c7:07:1c:93:2e:84:2c:fb:3d:e4:5c:db:60:2e:c5:40:7f:
ec:a1:bb:41:54:fb:33:9f:ff:91:43:f8:7a:75:92:ad:b2:64:
83:38:6f:19:e3:57:f3:55:ea:1b:15:93:e3:5d:b8:6e:78:ee:
04:ee:51:e8:c5:0a:0b:ea:68:ad:f4:8c:a8:16:d2:25:6d:a0:
50:5a:fb:4f:da:d6:46:0a:3c:49:02:11:ad:45:52:06:35:52:
33:75:61:18:2f:33:1f:c6:c7:a2:d0:c4:32:19:98:c8:54:62:
ed:82:22:5c:59:bf:26:f9:dd:05:22:ef:c7:28:69:7a:76:d1:
f0:9d:bf:9d:f5:a7:ac:1b:51:57:f3:63:82:e5:4f:3d:4c:74:
2d:47:04:7f:8b:46:68:c2:b8:13:4c:1a:f7:cf:99:e2:31:62:
bc:b1:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:45 2026 by rpki-client