Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: 0biKTS4WKOcKK0FVJfwmFhOdrzLNSKacVOeZ5h9fDrA=
Subject key identifier: 97:95:2D:C4:38:FB:1B:EB:07:F9:CF:8F:C5:43:D7:42:0B:A7:DB:C0
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019F90229C618E8BCCE1BB9EE6845C24243B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:14 +0000
Manifest this update: Thu 23 Jul 2026 18:00:14 +0000
Manifest next update: Fri 24 Jul 2026 18:00:14 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: xK7+gX8gUKaRceXLnpDa9pAT6Y2WnpVNc2HYo3NE5dc=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:9c:61:8e:8b:cc:e1:bb:9e:e6:84:5c:24:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jul 23 18:00:14 2026 GMT
Not After : Jul 24 18:00:14 2026 GMT
Subject: CN=97952dc438fb1beb07f9cf8fc543d7420ba7dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:e0:58:5e:8a:66:a0:b1:f2:ab:27:40:e4:
79:67:df:61:ad:00:67:46:b8:7d:2f:73:fd:58:04:
51:0e:03:22:d5:99:01:05:d4:a6:90:a5:5e:32:2c:
4e:d8:27:bc:bf:05:57:e1:6a:f1:c5:f7:d3:da:e2:
66:94:40:14:44:ae:30:22:05:5e:8a:7c:0b:e8:36:
a7:9f:9a:b4:54:aa:2e:8e:5f:39:26:35:26:34:13:
da:75:3d:e6:ec:61:56:82:8b:d9:34:58:c4:a0:b2:
80:2d:c4:6d:5b:0f:ac:10:69:e8:18:8b:f6:83:4d:
fa:17:a2:b9:36:ac:c6:9d:dc:2f:00:6a:17:00:f1:
27:c9:6d:43:7f:6f:3e:3c:00:55:4c:07:8b:4d:02:
ff:24:54:41:7a:e4:1e:a9:9a:44:8f:e7:92:3e:fd:
75:01:87:c0:25:20:7f:0c:77:80:8a:ff:22:ab:da:
1c:35:5b:3c:0c:33:78:90:05:d4:c4:40:f2:e9:d5:
6f:57:a1:1c:5c:36:06:d7:02:56:e2:02:9a:b9:9c:
2c:1f:24:c6:dd:4a:4f:35:d9:f9:7b:e8:ff:1d:85:
87:25:e1:1c:12:f4:96:75:56:a3:49:a9:79:a1:7a:
11:0f:3b:4c:75:7d:33:d2:49:ab:f2:88:63:1a:45:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:2D:C4:38:FB:1B:EB:07:F9:CF:8F:C5:43:D7:42:0B:A7:DB:C0
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:d4:b7:8a:37:07:b0:32:a0:df:3c:ff:94:5d:1f:85:92:
eb:07:43:75:d5:79:42:30:a2:69:fc:87:5e:cf:c8:81:8f:a3:
5e:71:6c:25:da:8a:34:3c:c9:f0:2d:f8:cd:77:9e:0a:29:40:
81:3e:39:8f:26:75:4d:da:3f:50:75:73:8d:a4:79:c5:23:60:
e2:87:21:c3:7b:64:92:d8:11:60:fc:c3:3f:a9:cc:39:ca:06:
57:a9:f3:f7:1d:96:cc:e5:37:b4:18:f7:c6:38:96:82:16:e0:
6c:80:bb:20:d5:a3:16:71:17:a9:12:7e:c8:96:99:4e:bb:36:
07:9a:b4:cb:82:ab:10:03:18:9f:78:07:40:4d:43:52:cf:1c:
28:84:b6:8d:a6:75:28:08:36:d0:0c:e7:71:2c:ad:51:d6:5f:
ea:9c:01:cd:14:17:ed:59:34:96:f8:f4:ec:24:d4:9d:2b:97:
42:b3:c1:1e:09:14:cd:8b:8d:5b:5d:9e:8c:45:f1:91:1c:41:
b9:7c:df:31:aa:86:b1:05:28:2e:f5:db:98:7b:47:a8:ce:bd:
92:15:7a:09:24:38:7b:c1:2c:1f:0b:aa:40:c3:eb:db:7c:4d:
71:75:55:cb:9d:4c:e2:14:9d:57:9a:be:d1:5b:4a:fb:ca:4d:
f2:07:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:17 2026 by rpki-client