Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: fhXlb6bzD7cDhPv5t1wVB02MA3JHg6GFwfDTmOLeuxY=
Subject key identifier: 6B:A9:FA:E3:8D:57:D8:71:24:52:B3:E7:C2:E9:9A:66:3B:95:47:B2
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019FA90721ACF30FAC32B3AA1A15B92E4B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 1077
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: pGsoA9wbRbz8QxQMNAfvPewiQA6rMzgCJjr6aTSCdtU=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:21:ac:f3:0f:ac:32:b3:aa:1a:15:b9:2e:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=6ba9fae38d57d8712452b3e7c2e99a663b9547b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:76:1d:2c:fb:de:d9:15:5a:5b:a3:14:79:
bb:8c:3f:ad:14:4c:3d:9f:51:88:fc:2a:a4:3d:43:
19:48:65:6a:2e:a6:f9:07:48:3b:66:11:20:66:53:
0d:b5:38:82:c8:99:13:ea:5c:20:9e:d3:48:30:74:
9a:8a:0b:77:12:a3:b5:27:97:2c:76:87:ae:0b:22:
76:b7:d7:98:d8:49:45:8a:29:c4:39:79:0f:46:58:
9f:63:3a:e1:c3:df:52:d9:91:c2:be:d6:a6:7c:b4:
00:78:4f:41:62:e0:2a:4f:b6:76:8e:9d:dd:4f:b3:
2f:3c:c2:ee:4d:de:3a:f7:c4:d3:b3:e3:59:e8:49:
f5:32:6f:47:e3:1a:16:12:d3:67:5c:42:4c:65:bf:
d0:56:5f:91:93:f0:a7:8b:fd:7b:8a:44:6e:07:72:
a1:5e:39:71:a2:62:f7:e2:d7:6e:8c:60:e0:a9:4c:
8d:0b:d2:3f:63:16:40:5f:16:c1:f6:86:e8:1f:d1:
0f:2a:96:37:21:80:8e:6c:79:01:45:d2:05:b1:b4:
35:6a:d2:0a:c7:5d:6e:f7:97:3a:0a:d1:22:7b:85:
66:5b:60:b1:7c:89:95:e1:f9:a9:98:b7:bd:3d:92:
6c:36:08:34:a2:cf:30:62:18:d5:0f:c8:3e:87:01:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:FA:E3:8D:57:D8:71:24:52:B3:E7:C2:E9:9A:66:3B:95:47:B2
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:c0:1d:a7:6d:03:d4:9e:ab:f5:61:94:d3:f3:71:60:7a:
68:41:91:a4:c6:64:d8:bb:61:dd:8e:8a:77:43:d7:ad:54:65:
5a:8b:e4:7e:72:64:28:c6:0c:ac:8e:8e:23:ad:93:bc:ca:a2:
8c:be:ab:6e:9d:96:57:27:d1:12:70:14:b3:92:ae:fa:54:bc:
63:01:e1:ad:d5:4a:81:37:6a:ef:ca:6c:54:54:e4:a8:82:2b:
0a:e3:88:92:bf:f6:de:05:50:30:c0:8a:4b:92:c9:91:24:e9:
fb:93:38:5f:ac:56:a4:c9:76:6c:76:d5:2d:48:13:fa:55:1f:
e9:58:32:5f:8e:61:27:de:84:89:f9:e4:4f:fc:bc:e0:36:0e:
a1:01:c1:af:62:7c:24:27:de:5e:20:39:71:e7:69:4e:ff:f4:
a8:bb:37:54:f7:c8:62:01:cd:b9:de:e6:80:0f:00:68:8b:b4:
23:ad:c1:60:cf:26:3d:0f:e0:f7:2d:1f:69:52:25:6d:4e:cd:
47:fe:c2:b7:86:1c:b0:05:02:3c:54:91:51:c5:5e:97:ad:6b:
83:b6:78:d9:90:b5:0e:ce:d0:a3:12:cd:11:01:f2:ae:21:bf:
a5:93:c1:6c:d8:b3:71:ea:4d:23:1c:fa:ed:ed:6a:df:22:c6:
37:d2:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:05 2026 by rpki-client