Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: Ypaf+U86oW9cPbfdO0BCaRbQbVRbpWgng3aTxu66YSE=
Subject key identifier: 95:1C:81:DB:11:E3:3D:40:1D:D0:ED:31:F7:A7:D8:A2:45:CF:79:40
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019CAC46FCC41B59D6E7F6275E30712FE1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0EEB
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: 83zj0KHRchEgpRvq5/eY56frvGo5yXv4xivEhbM7Lds=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fc:c4:1b:59:d6:e7:f6:27:5e:30:71:2f:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=951c81db11e33d401dd0ed31f7a7d8a245cf7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:be:2c:30:a1:58:a7:b9:fa:69:b6:e4:9b:
9c:da:ab:b9:5e:09:ac:9b:7c:ef:30:3d:ee:dd:4f:
92:db:f2:b4:d0:eb:4a:0a:78:45:69:96:32:76:bf:
68:31:46:51:13:af:ea:d7:56:43:7b:ec:34:8d:e4:
aa:25:9b:01:1a:a5:f4:a1:ca:79:cf:8c:43:47:87:
2b:29:69:19:31:fe:79:f9:ce:b7:aa:8a:64:08:b3:
a5:b3:19:60:6d:2f:3c:c9:0b:70:b8:b3:d8:dc:21:
8f:32:ca:96:1f:6c:bb:71:f7:c1:0b:2a:9c:ae:65:
85:90:9a:12:b0:77:6d:6c:e8:b7:69:e2:50:8f:37:
87:bb:69:b6:e6:a4:43:92:73:ed:cb:98:e0:93:24:
c0:ef:13:4e:a8:7c:6e:92:4a:0c:5e:65:1d:a9:cd:
c9:f2:28:d8:29:20:fc:81:a0:59:8a:e5:75:d1:6c:
b3:69:c1:8f:cb:2d:29:6c:64:be:18:58:5d:4f:05:
16:66:47:23:ca:c1:d8:a5:6f:a8:5b:5d:50:0c:a7:
ed:de:fb:83:1b:d5:3d:e8:c7:bf:d6:6a:6b:3c:f6:
9f:97:9a:94:f2:00:df:97:95:a0:aa:5c:39:b6:80:
b2:23:de:c8:4b:2a:74:a9:58:82:65:c0:02:cc:9a:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:81:DB:11:E3:3D:40:1D:D0:ED:31:F7:A7:D8:A2:45:CF:79:40
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:8f:82:a4:4c:f6:cf:f8:4f:e8:15:4f:95:7b:3d:b5:54:
91:6d:c0:ae:58:dd:84:5b:24:b9:72:71:8b:03:7f:85:08:5c:
96:27:39:17:2f:28:3a:1f:36:82:86:8d:41:0a:30:ca:a8:39:
7a:00:a9:05:62:ec:88:4d:45:4b:89:d5:7b:37:b5:91:59:2f:
f1:65:ee:e3:1e:04:ec:7f:26:f8:7f:35:39:f7:7f:77:ca:9a:
de:d2:20:e7:6d:b6:e2:a7:1b:9f:73:71:45:fb:13:c2:47:df:
5a:9d:04:92:e3:24:ba:e3:78:8f:44:52:e7:1b:41:da:cd:a6:
f1:c5:56:53:50:8c:86:e4:6f:b6:ea:e6:df:6c:d8:e1:59:41:
09:74:37:c6:b6:73:b1:5c:15:b6:53:6e:a6:df:79:02:2d:9b:
e4:28:4d:ea:04:35:cb:b5:f0:41:a2:9a:5d:28:64:8e:4b:b1:
59:2d:7e:eb:f1:c2:c5:8b:48:4d:48:7e:be:2e:d4:c5:d2:1d:
61:c3:63:cb:de:bc:98:f0:a7:5e:d3:04:50:7f:ff:46:4a:21:
f0:6c:90:c5:d4:84:b6:d8:8e:3c:5d:5b:94:66:c7:8c:13:e8:
a7:8a:32:57:96:34:c6:be:c2:82:ec:a8:4b:8f:6b:f5:6a:1b:
b4:40:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:26 2026 by rpki-client