Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: SoL3JI08cz3Xj+OElEDQ044pDqjI9/6KfdS/mu1daS8=
Subject key identifier: D2:1D:80:F3:08:C9:C5:45:35:88:BB:12:F2:CE:45:1A:58:4D:6B:CC
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 01A001DCCE5BF57789E1DE7AE2216367D38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 10A5
Signing time: Fri 14 Aug 2026 20:00:42 +0000
Manifest this update: Fri 14 Aug 2026 20:00:42 +0000
Manifest next update: Sat 15 Aug 2026 20:00:42 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: HnC14RHQ8VtXEDfCaj/EomiX2vLcm9Pm1qIeYLzY9Q0=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ce:5b:f5:77:89:e1:de:7a:e2:21:63:67:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Aug 14 20:00:42 2026 GMT
Not After : Aug 15 20:00:42 2026 GMT
Subject: CN=d21d80f308c9c5453588bb12f2ce451a584d6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:5a:04:9b:ec:8e:57:05:93:e2:24:a8:3c:
d4:46:0b:e7:d6:35:31:df:f2:78:0a:1a:84:60:b5:
76:22:2e:8c:0b:79:6b:a2:34:fd:69:e8:92:c8:6b:
2e:2f:18:15:8e:a9:72:d5:d9:7e:04:41:97:5d:24:
fe:65:26:4c:2e:70:43:0d:ea:d5:ea:7e:dd:fc:02:
b4:53:c6:64:ff:c0:03:8c:ce:f6:68:bf:d2:45:84:
c0:e2:38:68:9a:a6:74:4c:1d:a9:d4:a6:df:0d:18:
6d:bf:df:66:fc:93:67:d9:d9:e9:e3:58:07:af:89:
b4:bd:91:5c:12:4f:0b:0e:5b:44:12:c2:f6:47:df:
a5:bf:a0:17:a9:83:5e:67:2d:90:f8:ea:c7:22:9a:
9d:0b:5d:12:3e:ee:ee:dd:63:94:7d:01:05:74:2e:
4c:19:72:27:f8:45:4e:d6:12:9f:7f:de:fa:5f:ac:
8d:52:fe:fc:2a:ed:b4:1c:76:6d:81:36:0d:54:97:
9e:1e:a2:fb:a1:9c:76:01:ae:25:31:7b:45:bc:95:
c1:33:2f:76:8f:3e:62:1d:8a:c1:b0:36:fb:18:b0:
a1:39:1d:f1:14:be:64:b6:c5:5c:6f:b0:c7:83:1b:
2a:46:42:26:34:a9:eb:ce:d3:f6:aa:9e:db:91:38:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:80:F3:08:C9:C5:45:35:88:BB:12:F2:CE:45:1A:58:4D:6B:CC
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:15:bb:0a:d8:56:20:9c:84:15:3f:b3:80:61:58:b0:78:1f:
ee:76:e8:f7:7f:0e:a6:e0:b6:bc:08:0c:d0:d6:2f:e8:06:02:
9a:91:6e:91:bf:e7:d5:43:b0:0e:ea:8b:99:77:37:6b:33:d2:
20:0b:f1:b1:5a:22:77:91:7a:5b:43:f1:91:71:5e:ea:bd:c7:
6f:50:6b:f6:46:b5:27:8b:85:e8:dd:a1:af:86:73:3b:a9:5b:
02:da:14:70:1b:00:67:19:52:f5:79:f2:15:6b:90:d1:a4:a1:
64:fa:de:6a:20:6f:69:13:eb:bd:26:d7:83:76:60:3a:eb:03:
91:d3:b3:f3:e7:20:fe:f9:8c:c7:d9:75:77:17:36:9e:e3:97:
e2:51:f6:94:15:a3:4b:e1:0c:a2:98:8d:20:72:c4:f3:68:96:
25:5c:a8:68:b1:7c:11:58:99:77:ba:65:1c:3b:1f:2e:3d:7c:
11:30:af:5b:4c:50:06:27:e6:42:9c:dd:09:68:1a:51:2c:a5:
ea:62:07:49:b8:52:8b:9d:10:18:1c:a1:aa:a4:71:a6:f4:e7:
fb:0c:f0:cf:29:15:83:e2:22:7f:76:e9:96:8c:1c:5c:a5:b6:
25:e7:37:26:77:d1:55:fa:55:d2:ec:16:bf:79:f5:99:34:96:
f5:34:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client