Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: IlMpXGw7eEr4IFUgjpQ9X/v8t6eBVeFgh6s2yd3+G6c=
Subject key identifier: 53:36:73:AD:FA:84:9A:99:6F:97:FB:7E:2A:8E:00:4C:DB:83:DF:CA
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 01A07216B2577C79D405F663CF27583DB5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1A3D
Signing time: Sat 05 Sep 2026 15:01:25 +0000
Manifest this update: Sat 05 Sep 2026 15:01:25 +0000
Manifest next update: Sun 06 Sep 2026 15:01:25 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: hA2GefWn6NsoVRe9S4ZmhOg2JxGtIV7TNgLohu7GjEQ=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:16:b2:57:7c:79:d4:05:f6:63:cf:27:58:3d:b5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Sep 5 15:01:25 2026 GMT
Not After : Sep 6 15:01:25 2026 GMT
Subject: CN=533673adfa849a996f97fb7e2a8e004cdb83dfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:77:31:e8:19:59:a0:93:0d:07:9b:e0:a3:
70:fb:a5:c8:ec:b9:64:08:2b:b3:e4:14:05:89:b3:
75:11:04:27:f2:ca:91:a8:a2:0a:61:b1:5c:c1:8b:
f3:ae:cb:f4:de:8d:6b:3e:0a:64:62:e4:94:8a:31:
9f:7c:d4:24:0b:c2:4f:4c:89:fa:9d:0d:32:32:cb:
71:fe:5d:48:80:13:b3:72:c1:89:44:cc:f7:b8:2d:
19:93:e3:4b:0c:50:eb:4a:15:65:57:09:4d:2e:8a:
c8:91:d8:27:b9:dc:ed:2f:ab:8a:82:5b:e0:e9:b4:
02:81:ad:8a:a4:f1:87:9d:62:de:5e:d5:cb:45:0f:
83:07:f2:8b:81:04:c5:9e:52:f1:1f:64:25:0f:ec:
08:18:58:63:1c:c7:cb:15:b0:91:be:64:35:cf:09:
42:01:81:35:90:35:ea:4d:43:f4:db:5d:6d:73:78:
4c:a0:df:3c:a8:f7:19:64:7a:2d:d6:8c:24:08:a4:
f5:a5:89:ef:7f:9e:94:78:5d:72:f3:9c:84:11:d0:
6e:68:71:ca:f4:8a:c7:ca:02:87:24:68:47:d3:7b:
65:f7:a0:c9:6e:14:a1:2b:dd:b7:40:0d:31:6e:78:
f2:8a:84:33:6f:9e:18:75:c4:f5:f1:63:0d:4b:17:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:73:AD:FA:84:9A:99:6F:97:FB:7E:2A:8E:00:4C:DB:83:DF:CA
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:29:e6:b3:a6:91:85:d4:3b:c3:a9:c8:82:83:84:d3:17:
95:3d:60:b6:4f:61:61:56:b9:e6:40:3e:2b:b7:49:6d:e2:5f:
bb:62:86:09:08:80:da:eb:0b:06:47:42:6c:b7:b0:41:6c:44:
cb:96:90:22:c4:30:eb:8e:8b:07:4f:76:20:a8:99:8d:d4:52:
97:4d:10:6d:8c:82:66:c9:15:96:91:7f:e7:d9:bb:f4:9e:e3:
86:83:28:20:09:ce:e4:b5:8b:62:57:58:fa:da:e6:07:5c:87:
08:b4:1d:0f:3d:a6:dd:21:ab:12:48:06:50:4b:73:6b:d0:b0:
91:fd:d5:19:7d:0c:f7:f5:33:d6:8c:69:68:34:fe:54:6c:19:
1c:9e:f7:48:a7:b2:30:41:33:f8:4d:b5:93:a9:b2:9c:04:1b:
bb:1d:e6:33:8e:b3:27:d7:e3:28:85:e5:05:44:c1:94:1a:8c:
50:81:6c:f1:bf:bb:5d:60:97:f7:b5:3e:33:34:4f:41:78:ae:
94:fb:3a:01:16:a2:3e:c8:70:bb:9e:a8:62:31:d6:02:f9:92:
ce:80:1b:3c:63:08:47:92:52:92:d4:c3:0a:b5:d6:20:b2:6d:
2e:38:41:13:dc:cd:a3:4f:4d:e5:f9:2f:94:9d:a5:7b:38:e0:
8b:7d:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 18:34:12 2026 by rpki-client