Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: AAznJAmhBOCFchaFTs8QFDXTEbdSnI+EsSfL961HyaY=
Subject key identifier: C1:E2:44:AF:63:3D:B9:55:3B:2C:05:AB:7C:2A:37:66:09:B0:04:4C
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019D97E1EACCDF521E25E5A22AC2B29B3D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0F65
Signing time: Thu 16 Apr 2026 20:00:58 +0000
Manifest this update: Thu 16 Apr 2026 20:00:58 +0000
Manifest next update: Fri 17 Apr 2026 20:00:58 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: 6bZbl6DuUpO/9QZvhbUoK5hab5JsTLJDCjO0E6UYvUI=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ea:cc:df:52:1e:25:e5:a2:2a:c2:b2:9b:3d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Apr 16 20:00:58 2026 GMT
Not After : Apr 17 20:00:58 2026 GMT
Subject: CN=c1e244af633db9553b2c05ab7c2a376609b0044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:d2:8b:a9:e8:a3:3b:f3:f2:6d:2f:09:01:
63:55:c3:03:f6:ac:89:40:1f:bb:1b:75:56:95:42:
31:13:b1:29:81:46:9d:3e:8b:f1:5a:25:4c:e4:e8:
76:53:8d:7c:76:f4:dc:76:dc:8a:a2:8f:cf:68:a2:
1f:79:d6:c8:72:94:fc:9c:92:9e:46:56:24:82:49:
cc:58:37:e5:3a:12:de:7a:ed:a3:6c:89:92:e1:bf:
59:25:6b:fd:a1:2b:7c:12:e0:48:6e:82:51:ba:e4:
6f:a4:89:11:e6:dd:7d:96:26:ce:2f:b6:be:db:d8:
d7:7d:51:13:8a:48:6b:25:38:5d:b1:2a:c1:f2:a5:
57:c0:20:f2:c3:52:8f:0a:18:7c:d6:b1:8a:14:e5:
63:95:d8:1d:71:29:4a:3d:31:5e:17:ac:65:2d:b9:
07:14:e2:b3:85:e0:ad:8e:ef:3a:5b:2a:3c:88:ac:
32:26:47:60:3d:12:d1:22:6d:a4:ad:14:7f:ad:01:
e7:4a:2a:7d:16:35:a6:26:59:96:5a:b1:9f:8a:0a:
b0:f9:5c:8f:dc:28:bb:7a:9a:ef:bd:a4:64:23:91:
26:1c:eb:c8:2e:85:6f:27:df:ba:21:fd:0f:45:b0:
89:5d:a7:3e:f0:ff:d8:bb:85:1b:e8:b6:7b:08:97:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:44:AF:63:3D:B9:55:3B:2C:05:AB:7C:2A:37:66:09:B0:04:4C
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:42:e2:75:7a:0f:39:1a:21:dc:d3:4c:d8:60:23:2d:f0:
e3:ac:ae:a1:1d:25:bd:3d:f8:9a:d3:09:05:23:04:be:a0:1d:
36:98:79:8e:1f:02:20:a7:06:80:ea:bb:98:38:ac:9c:34:b5:
14:52:cc:a3:0a:ce:30:d9:d2:37:0a:80:4f:40:fc:9e:1b:90:
9d:e3:b7:e2:aa:f6:9f:5b:82:60:03:ec:f2:69:2a:be:01:74:
2f:b9:17:d8:04:85:a0:ea:c2:0c:4d:e4:f5:8c:e4:4d:a5:31:
a9:ad:d2:a3:26:0b:85:3e:9c:d4:06:15:1e:7c:57:22:a2:aa:
ba:6b:50:8d:ec:a2:28:5d:4f:ec:f8:89:a8:a1:7b:8a:86:34:
ca:89:62:b0:e5:a1:c6:f1:83:55:9f:68:eb:37:16:24:60:a1:
67:11:9c:75:be:6b:33:6f:17:7c:03:64:a2:a7:c7:46:1b:d0:
ca:67:43:44:bc:0b:50:51:fc:0c:39:22:81:75:b4:48:15:34:
ea:8a:5b:5e:d2:77:8c:b6:1e:55:70:a2:7c:79:80:5f:17:a1:
94:d5:17:48:da:d7:46:57:15:e4:fb:3f:a6:f7:7e:69:03:ad:
93:c8:29:e6:a2:d8:39:66:3a:27:14:3c:82:b3:73:9e:c3:de:
46:83:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:42 2026 by rpki-client