Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: o6Uy20+2+Jk2jyepcAMTpffEgGJP9BFD6ncwsOplRKM=
Subject key identifier: D3:86:DB:35:DD:C4:CA:60:89:95:75:E7:B4:8C:1B:FD:C6:A8:EC:56
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 01A1219C221B4769E6BD63A393D231A3F12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 113A
Signing time: Fri 09 Oct 2026 17:00:42 +0000
Manifest this update: Fri 09 Oct 2026 17:00:42 +0000
Manifest next update: Sat 10 Oct 2026 17:00:42 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: li/Vp9UNubKcu2RTCT0pKlp5Tn6f7Dq3msU+GkouUHY=)
2: LDfTHZtgg9SpOLAcUCBkRkR9ae8.roa (hash: 1t3+l57Hcn09X5UH0bRoB4dCslxZncJ1ud+DZIleEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:22:1b:47:69:e6:bd:63:a3:93:d2:31:a3:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Oct 9 17:00:42 2026 GMT
Not After : Oct 10 17:00:42 2026 GMT
Subject: CN=d386db35ddc4ca60899575e7b48c1bfdc6a8ec56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:d8:0c:09:95:05:19:4b:ac:9e:bd:99:c6:
38:48:c6:99:2e:2d:89:93:71:af:c8:34:51:9d:a1:
65:52:c0:0c:63:3d:77:2a:f5:18:b2:a7:4f:3c:03:
39:ac:c1:a9:81:70:08:f7:90:20:c8:01:9d:09:a0:
60:c9:5a:85:4b:9f:79:9a:d4:f3:dd:e9:7d:81:4e:
fe:18:cd:eb:7b:61:bc:f4:64:60:da:38:bf:51:82:
6a:a0:c7:ce:76:14:40:89:73:5c:42:54:d4:ff:13:
c6:3a:e2:9c:a7:a6:67:74:94:45:d0:61:4c:a0:c6:
83:1e:3b:ec:13:a8:63:5a:29:77:ad:e9:ea:ee:85:
08:bc:26:91:80:62:91:f9:73:a0:4d:d5:42:aa:5b:
1b:2e:0d:f2:d2:b7:3d:1e:13:43:34:74:26:ba:2d:
d6:ea:9d:9d:7a:df:8e:fd:9d:bc:65:27:64:0f:8e:
66:5e:e1:1d:2d:4e:78:83:5d:40:d4:70:2c:bd:42:
03:5a:b5:14:03:63:96:bd:85:a0:c9:8b:9e:29:08:
14:c3:dd:89:9e:c2:c0:38:43:4f:0c:bc:fc:89:d0:
46:15:d9:70:47:ba:57:62:28:ee:b0:8c:ce:fa:e5:
f0:f2:a2:ad:4c:ad:89:a8:9b:14:5a:98:f8:75:86:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:DB:35:DD:C4:CA:60:89:95:75:E7:B4:8C:1B:FD:C6:A8:EC:56
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:e6:90:af:8b:eb:75:c3:bf:f1:fe:46:21:59:bc:2c:41:
ec:0d:3f:53:92:94:64:48:8f:b3:3c:19:fe:1b:1a:f7:2d:64:
66:95:a3:7e:e9:07:29:1c:98:98:0b:89:2f:03:e2:55:7c:d5:
dc:f1:91:92:7d:d5:5d:2b:22:5b:b1:a6:3f:39:c6:07:8e:22:
17:bf:81:a3:d4:e2:c1:39:b9:ed:fa:62:4c:ca:aa:1d:99:e9:
70:84:6c:9b:25:34:5b:54:bb:53:31:a1:6e:4f:0e:55:17:12:
df:8e:51:3c:6d:2e:7f:6a:03:f6:71:c8:da:db:7c:40:1e:c7:
83:84:ef:81:a8:ab:a9:da:2e:26:55:e0:24:af:5e:ed:87:cc:
18:77:c4:b1:2b:43:0d:51:ca:3c:37:36:62:20:90:58:98:98:
17:9d:0e:bf:4e:de:5f:97:df:7e:0d:21:e3:ff:d7:9e:a5:2d:
ac:b4:b0:b0:f1:8e:64:7c:db:0c:3f:8a:58:a9:31:2e:3b:16:
db:56:3e:f8:29:54:53:b1:1f:a2:c1:6d:c5:ed:d7:bb:59:9e:
c5:00:69:b2:24:4a:54:e1:04:95:b9:2f:e3:2f:12:16:15:71:
45:3c:88:9f:a5:e4:7e:b0:b5:10:e9:f2:d6:20:35:2d:e6:35:
5d:69:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:17:09 2026 by rpki-client