Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: ojQu7FlwmPDVpAL3HxBYs2IIXMO9VFGWt7rQuPjIfKs=
Subject key identifier: C3:4D:E8:7E:17:F3:83:33:B7:33:D3:5B:CD:30:D8:10:7A:41:31:23
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 01A1822B9A7734A0F2274EF8238AF28CF12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 11:00:57 +0000
Manifest this update: Wed 28 Oct 2026 11:00:57 +0000
Manifest next update: Thu 29 Oct 2026 11:00:57 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: BGSLQSPFOz83E_NblrhG1IAmhqU.asa (hash: asWA1gfumdcyjgh7btrioaYdsJZ8SGpkhyyRndl8L+0=)
3: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: l0nmFz90c9hHKUloPVH8V3TcOA5ATgI3niOtBgEOdtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:9a:77:34:a0:f2:27:4e:f8:23:8a:f2:8c:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Oct 28 11:00:57 2026 GMT
Not After : Oct 29 11:00:57 2026 GMT
Subject: CN=c34de87e17f38333b733d35bcd30d8107a413123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:94:ee:cb:d8:4c:03:6b:f0:34:16:fb:7f:
8f:e8:9b:67:7b:46:d6:bd:4a:82:58:c9:21:f9:7f:
f4:d9:74:af:58:66:67:04:ff:48:7c:f3:13:6f:1b:
37:2c:47:49:41:ff:52:81:38:35:16:26:5c:88:d0:
bf:de:eb:b2:31:bd:97:84:77:8a:5c:0f:1a:77:65:
8d:de:85:03:7b:f0:f1:96:3f:bc:68:a0:8a:8b:32:
e5:c2:77:1f:3d:38:4a:97:98:90:65:dd:36:38:6b:
b5:49:52:54:e9:63:39:5e:3f:5f:c1:0a:24:7f:e3:
25:ea:b9:ec:d2:14:2e:9e:fe:8a:84:6c:2d:b2:86:
74:07:67:59:3a:2f:08:43:77:da:53:77:60:44:7d:
b5:d3:52:22:ae:17:0f:f3:3f:24:a7:bf:81:47:0a:
d2:02:6a:80:80:38:87:87:5c:c7:f3:9e:3e:0b:c0:
00:63:13:ed:3e:b4:bc:01:11:aa:f2:5d:dd:85:51:
b9:b1:9b:68:a5:bb:52:01:cc:56:45:03:d8:b1:0f:
ba:34:4b:ca:32:c8:21:f8:2c:7e:ff:a5:5a:43:b1:
a1:b6:b1:22:19:3a:5a:a2:59:24:1c:36:04:9c:09:
7f:88:d0:57:44:d6:1b:97:7c:6f:ba:ee:78:99:bb:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4D:E8:7E:17:F3:83:33:B7:33:D3:5B:CD:30:D8:10:7A:41:31:23
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:ef:03:bf:af:8a:91:7c:10:a7:2d:4d:d0:21:9a:9f:63:
2c:06:54:39:f4:f9:ae:3c:12:d7:68:81:47:43:f4:be:90:a1:
c6:61:40:fe:47:a4:aa:73:83:ed:64:c4:6c:24:37:15:32:de:
a3:e9:48:6f:f0:1f:6b:3a:16:f0:a8:53:08:7b:46:fd:ef:a6:
28:53:74:d3:58:06:07:fe:6c:82:86:91:cd:ff:03:dd:03:6e:
21:e1:1f:40:d4:a9:e3:0a:24:3c:1e:12:9c:b0:43:73:0e:28:
f1:b3:21:91:8e:4f:dc:3a:34:a8:77:0f:bf:b6:d9:91:cd:8b:
36:ca:78:e1:71:c3:73:13:13:35:40:dc:7b:24:2e:23:6a:d3:
b4:f2:bf:42:1b:23:d7:cf:68:61:c6:5c:f7:41:ba:32:cf:06:
04:ac:1e:64:6b:37:29:42:4e:0d:f3:50:91:be:cd:a7:72:b0:
a5:70:b1:fb:4e:00:c6:46:a3:a1:c7:67:25:91:ee:14:85:17:
ae:a1:5e:77:aa:d6:24:f2:3e:3f:b5:49:f6:b9:99:44:b3:9f:
d8:a0:95:f8:84:a9:b6:c5:7e:6f:48:34:40:ab:ef:3e:9a:b3:
84:53:b9:20:ac:55:c8:42:b1:2f:f0:8a:f8:11:fe:c3:86:ef:
5d:b0:96:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK5p3NKDyJ074I4ryjPEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2
MDA1MTYwHhcNMjYxMDI4MTEwMDU3WhcNMjYxMDI5MTEwMDU3WjAzMTEwLwYDVQQD
EyhjMzRkZTg3ZTE3ZjM4MzMzYjczM2QzNWJjZDMwZDgxMDdhNDEzMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qSU7svYTANr8DQW+3+P6Jtne0bW
vUqCWMkh+X/02XSvWGZnBP9IfPMTbxs3LEdJQf9SgTg1FiZciNC/3uuyMb2XhHeK
XA8ad2WN3oUDe/Dxlj+8aKCKizLlwncfPThKl5iQZd02OGu1SVJU6WM5Xj9fwQok
f+Ml6rns0hQunv6KhGwtsoZ0B2dZOi8IQ3faU3dgRH2101IirhcP8z8kp7+BRwrS
AmqAgDiHh1zH854+C8AAYxPtPrS8ARGq8l3dhVG5sZtopbtSAcxWRQPYsQ+6NEvK
Msgh+Cx+/6VaQ7GhtrEiGTpaolkkHDYEnAl/iNBXRNYbl3xvuu54mbuZ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNN6H4X84MztzPTW80w2BB6QTEjMB8GA1UdIwQY
MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt
OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm
LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH7vA7+v
ipF8EKctTdAhmp9jLAZUOfT5rjwS12iBR0P0vpChxmFA/kekqnOD7WTEbCQ3FTLe
o+lIb/AfazoW8KhTCHtG/e+mKFN001gGB/5sgoaRzf8D3QNuIeEfQNSp4wokPB4S
nLBDcw4o8bMhkY5P3Do0qHcPv7bZkc2LNsp44XHDcxMTNUDceyQuI2rTtPK/Qhsj
189oYcZc90G6Ms8GBKweZGs3KUJODfNQkb7Np3KwpXCx+04AxkajocdnJZHuFIUX
rqFed6rWJPI+P7VJ9rmZRLOf2KCV+ISptsV+b0g0QKvvPpqzhFO5IKxVyEKxL/CK
+BH+w4bvXbCW+Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:39:46 2026 by rpki-client