Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: TaDcg5LeoC8oS7XG7GSMuaHCRn6wF74C5OJX4Ojq1oY=
Subject key identifier: EF:A2:34:68:46:AA:64:36:D1:B6:6B:5E:48:1A:80:A2:86:6D:DE:5A
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019F8869A4387F23795836F9565BFD55B0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 19C4
Signing time: Wed 22 Jul 2026 06:00:52 +0000
Manifest this update: Wed 22 Jul 2026 06:00:52 +0000
Manifest next update: Thu 23 Jul 2026 06:00:52 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: 7xzqgea/d57Yggjg42UerONPPCXDeRWJKloMbz2kN+M=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:69:a4:38:7f:23:79:58:36:f9:56:5b:fd:55:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jul 22 06:00:52 2026 GMT
Not After : Jul 23 06:00:52 2026 GMT
Subject: CN=efa2346846aa6436d1b66b5e481a80a2866dde5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:e8:90:c0:2f:36:68:1b:a8:f3:37:7a:29:
37:cd:9b:4b:73:0e:e1:6d:a2:a3:02:ca:a7:47:f6:
29:8e:17:a1:61:c3:99:11:39:3b:d1:cd:e6:0a:77:
f8:95:df:f1:d3:f1:ea:36:d4:d4:b2:ad:fd:05:09:
b4:94:76:24:07:00:66:2e:6a:18:e2:9b:46:73:20:
91:dd:f2:e5:d1:2c:fc:f5:12:ae:84:20:de:a0:01:
a1:8e:56:d9:2e:dd:09:88:02:1d:1c:70:b1:3f:af:
13:a3:a2:d1:8c:b0:e2:73:03:18:91:6a:b6:31:f2:
fd:48:c6:10:3f:14:d4:65:d5:29:f8:01:a2:d5:ca:
9a:ce:38:77:74:42:92:bd:38:70:60:d5:c6:78:aa:
e6:29:90:63:ec:f6:d4:a9:18:e3:fd:17:75:65:8f:
b9:08:fa:b1:4e:2d:35:5a:97:33:1e:95:3f:8a:3e:
9d:08:42:65:fb:46:6b:78:d4:60:a5:6f:3d:27:18:
99:18:2e:0b:44:af:9d:81:e0:7c:f0:06:9f:95:89:
fe:55:ac:94:e1:79:6c:e7:18:11:01:b9:7a:24:0d:
76:70:47:42:70:a4:d4:f4:9c:d2:05:fc:96:1a:1c:
f6:2b:ed:df:86:e8:30:41:2a:ec:d9:4a:92:f7:92:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:34:68:46:AA:64:36:D1:B6:6B:5E:48:1A:80:A2:86:6D:DE:5A
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:46:cc:59:cb:c6:db:ab:12:26:bc:67:a2:23:d9:19:88:83:
0a:10:ca:bc:b7:80:0b:da:cd:25:e0:f2:d1:8a:c1:e9:1e:e1:
0d:bb:a4:33:35:4d:2a:34:23:99:31:ff:12:38:82:e8:d3:64:
fa:47:4d:08:00:fa:9f:1f:ee:f6:c6:d2:17:14:10:6e:21:7e:
ff:41:6e:f5:c3:76:1b:7d:1f:87:e8:4a:2e:47:b8:50:c5:62:
50:f4:c5:59:65:ae:b4:52:a4:91:c7:51:02:7d:5e:2a:1d:8f:
a9:6e:56:56:41:81:37:d2:13:06:1b:f7:8a:01:d3:50:b4:e5:
0f:bc:4f:91:b0:71:3c:e2:24:35:0b:69:0c:e1:1c:0f:29:ec:
f8:83:0d:c7:bb:9c:ec:98:26:61:66:d6:b6:c7:55:37:2f:59:
3d:12:f9:fa:f5:15:db:95:e6:94:22:86:7a:c8:02:ab:a1:47:
09:e5:9b:45:aa:f8:b0:59:e4:9d:f2:ef:2f:38:d1:b0:3a:bc:
45:0c:ec:50:c9:b9:bb:51:90:16:5d:8d:9a:8c:76:d4:5d:b1:
b7:41:41:05:ca:98:ac:16:45:64:18:fb:77:28:4c:7d:d4:e4:
03:92:20:cc:95:93:cf:b4:1a:61:69:6c:eb:d4:96:6b:a6:0c:
dc:3c:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 12:27:59 2026 by rpki-client