Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: /vUfjIZzRJzPTYkMEj3eAL1Csx1tdZzWfny7kbVIEOA=
Subject key identifier: E1:21:32:63:9A:B6:8B:9F:4A:EE:84:CE:41:D1:A5:DF:42:49:93:76
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 01A0C2FB423DF6A7D8DF5344067B227D5BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 1109
Signing time: Mon 21 Sep 2026 08:00:41 +0000
Manifest this update: Mon 21 Sep 2026 08:00:41 +0000
Manifest next update: Tue 22 Sep 2026 08:00:41 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: j980RLdNw95HLVQLA7MOTQoDQnfcqBt0UtmpG5kKmhg=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:42:3d:f6:a7:d8:df:53:44:06:7b:22:7d:5b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Sep 21 08:00:41 2026 GMT
Not After : Sep 22 08:00:41 2026 GMT
Subject: CN=e12132639ab68b9f4aee84ce41d1a5df42499376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:8c:3e:f7:17:3e:32:12:9b:92:bd:43:ed:
24:48:4f:39:27:8e:ba:de:df:04:e7:7c:f1:aa:f4:
9c:2a:d3:11:a6:47:bb:f4:2c:5f:89:f1:2c:d2:2d:
57:de:30:e1:7d:e9:2b:c4:58:32:48:1c:24:f3:9b:
cc:6b:8f:f7:70:44:26:e4:5e:eb:f9:33:57:3b:cb:
ee:90:cc:98:e8:40:80:6f:65:1a:a2:d3:64:47:74:
09:d1:eb:56:69:e2:8c:f1:a9:2a:31:53:4a:b3:d5:
7a:3e:13:0c:4b:4c:f5:c6:4d:6c:20:05:fd:db:2b:
66:8a:fd:cc:b3:74:9a:24:ec:1e:00:5b:3f:19:85:
9d:fd:99:47:33:90:e3:fa:6c:96:76:1f:c3:04:82:
3c:3f:e7:76:0e:5d:96:18:d7:ef:df:25:79:d2:45:
9f:a7:7b:60:e9:2f:30:77:15:8e:eb:d6:5d:34:cd:
97:f8:8c:a4:3f:51:99:be:cc:a3:a0:b9:13:e6:36:
29:6c:2b:e1:d2:ee:38:28:67:66:f1:52:83:5a:51:
51:81:9e:00:01:e2:28:44:78:9f:4a:c9:6c:e0:1b:
e2:a7:40:2b:8d:66:36:6a:74:6a:03:d8:c9:f9:47:
18:d0:5b:77:60:3b:27:8e:6f:50:21:f1:1d:99:98:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:32:63:9A:B6:8B:9F:4A:EE:84:CE:41:D1:A5:DF:42:49:93:76
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:95:e8:aa:b8:83:f5:2d:05:9d:04:8d:80:cb:02:23:bf:
87:7f:a8:9a:b9:b4:b8:3d:a7:98:41:28:be:b1:f1:a0:60:51:
c5:bb:bb:46:54:35:5f:a4:0c:93:5f:1a:ca:0b:c3:b4:da:65:
b9:7c:ea:b7:37:c7:b4:a7:8c:b8:5a:6b:73:26:de:65:88:76:
62:e3:1e:32:40:e4:42:91:46:fa:b2:1a:04:f8:2f:ce:53:56:
ef:d8:a6:c5:db:f8:13:ea:b5:46:0d:ce:0f:ff:bc:5c:aa:90:
0e:fb:57:23:0a:c2:82:59:05:73:60:ed:30:17:d1:03:70:65:
81:fc:e8:44:b6:83:56:67:6f:02:cb:59:6b:34:31:c2:16:a7:
a8:31:cc:70:21:71:23:ee:22:00:6a:f0:41:be:61:63:cf:bf:
29:49:15:18:50:76:f7:92:bc:b9:4a:ca:e8:00:52:96:b9:da:
95:e0:58:ab:2e:a7:5e:b5:90:fa:f8:f3:48:9f:a2:10:1a:8f:
ca:76:f5:5f:4a:f0:19:d5:6b:52:53:d0:14:44:b6:35:54:70:
ad:cc:da:04:86:60:98:43:d4:22:47:cf:e3:f6:56:44:a2:86:
07:1d:cd:22:64:83:f8:eb:9e:3c:33:b4:d7:b0:12:66:d0:68:
ee:ed:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:23 2026 by rpki-client