Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: SesfOvVR2d2lVQY+S3wjYCizieqRFVWNWQhIG9prXUM=
Subject key identifier: 73:D2:CF:4D:E0:96:48:98:54:61:A1:4E:22:6F:92:6E:FD:10:E9:0F
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 01A1DCF08C9723B017500DE71E78124F6FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 119B
Signing time: Sun 15 Nov 2026 02:01:54 +0000
Manifest this update: Sun 15 Nov 2026 02:01:54 +0000
Manifest next update: Mon 16 Nov 2026 02:01:54 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: C81pMTSYM97bZt+gEazTGsaoXCv6Pz2oRxWKRH4EQOY=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:8c:97:23:b0:17:50:0d:e7:1e:78:12:4f:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Nov 15 02:01:54 2026 GMT
Not After : Nov 16 02:01:54 2026 GMT
Subject: CN=73d2cf4de09648985461a14e226f926efd10e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:fd:2a:7c:c0:72:53:45:ea:8e:31:31:7d:
ad:94:33:31:00:d5:ee:87:9b:68:5a:c9:68:6c:29:
87:3b:d0:a6:d4:f6:8a:be:31:99:95:e1:cc:99:25:
f5:c6:37:93:7b:0f:a8:51:81:5d:1b:71:de:27:02:
3f:04:93:34:c5:fd:4c:9d:b3:6a:60:2d:10:1e:4b:
6d:3e:4a:c8:2e:6d:14:1d:20:50:e7:87:2b:10:d6:
cf:6c:82:86:39:4c:cd:0d:df:b5:b7:0a:d2:a7:ff:
8c:fc:2d:0b:87:eb:18:d3:be:45:b9:b8:06:5f:c7:
29:c7:83:4b:fb:92:79:f5:df:5f:9e:40:f0:fd:db:
48:e7:c9:7c:7b:f7:27:ef:21:8c:35:a9:dc:8f:b6:
55:57:b0:81:26:1f:c9:32:29:c5:b8:6b:aa:a8:22:
9a:44:33:65:8d:9c:81:cd:e0:d9:e9:91:e5:65:6f:
cc:94:33:01:ef:f5:f0:8c:8c:2e:84:f0:10:21:8f:
6b:b5:54:ea:0a:25:32:62:85:c6:17:74:1b:dd:6f:
49:ad:a1:9f:42:3b:54:ba:3f:15:ac:35:58:a4:95:
6a:f1:f9:64:85:9b:20:d1:24:b5:68:8b:d1:86:67:
7c:d6:3a:5b:74:b7:ad:78:e8:c0:79:da:1b:a5:88:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:CF:4D:E0:96:48:98:54:61:A1:4E:22:6F:92:6E:FD:10:E9:0F
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e6:50:47:b5:4b:6f:eb:a6:a5:df:1b:f9:63:34:07:24:bb:
d1:ba:72:c3:85:bc:ed:cd:51:ed:28:e3:61:93:6c:7f:13:22:
5f:da:9e:33:27:aa:a9:b7:49:7f:2e:40:10:dd:1e:02:55:2c:
8b:4e:0e:aa:be:e5:cc:cc:f9:fb:ec:86:55:3b:44:6b:41:9f:
cd:d4:11:89:12:69:f5:3a:57:61:fa:11:51:e3:6f:58:bc:11:
4f:e7:5b:88:c6:81:50:b4:4f:17:8d:84:77:61:4e:8a:b1:44:
bc:63:6f:c7:52:ea:73:8d:6f:2b:b6:f2:b1:aa:16:db:a7:8c:
86:ef:f9:3e:d4:34:ae:76:a9:34:5a:7c:a3:d8:08:df:e4:c4:
12:d1:53:65:8c:53:2d:97:0d:e2:fc:f9:9c:ad:e6:ba:ee:aa:
eb:d2:27:a7:49:b1:fd:33:0e:f5:ee:1b:f6:7a:14:55:be:01:
b5:17:92:66:9c:2c:e6:17:e2:13:cf:71:47:7b:43:e4:28:82:
cf:45:81:dc:49:f1:ee:9e:7c:90:ce:3d:af:a9:06:44:d4:67:
6e:90:c6:e2:98:a3:fd:86:de:fb:ea:d7:54:90:c5:b3:e7:e4:
98:d0:a1:af:c1:d7:44:0e:9f:ba:bb:2a:8c:7a:bb:7b:71:d3:
3c:45:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:12 2026 by rpki-client