Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: +PTAdDnldt3N7PiuhjSUeH9TvqnViy7GeLBXGvZwX1o=
Subject key identifier: 78:A4:89:6A:D9:44:C4:DD:DB:DA:CB:A6:21:D7:60:29:F9:71:A7:EA
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019E1F480E8A6AD5E1433D51A37AAC501D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:16 +0000
Manifest this update: Wed 13 May 2026 03:01:16 +0000
Manifest next update: Thu 14 May 2026 03:01:16 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: NJzIvnMQulFrpDmlVKDWHiQH1LdqquZHXBeN+/tq9Po=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:0e:8a:6a:d5:e1:43:3d:51:a3:7a:ac:50:1d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: May 13 03:01:16 2026 GMT
Not After : May 14 03:01:16 2026 GMT
Subject: CN=78a4896ad944c4dddbdacba621d76029f971a7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:45:07:0a:d9:30:ac:97:31:e1:96:8f:39:
83:be:c7:97:f6:68:88:cf:4d:68:d6:cd:73:78:35:
43:a7:31:05:6b:16:cd:95:a3:68:50:6b:6a:54:a3:
be:f9:6b:70:2b:71:db:ac:00:db:63:29:5f:92:1d:
c0:0f:d7:80:51:47:ad:bc:f5:c3:b9:95:36:b7:67:
ac:9a:d2:54:9f:23:9d:2e:0a:9c:97:98:34:8d:40:
f3:20:2d:6e:33:ae:f5:e9:4c:73:c7:0e:5c:9f:82:
43:c9:43:07:fc:24:c7:2d:4d:e2:ec:0d:73:42:f0:
8c:21:58:13:ca:0a:25:8a:73:31:74:c5:3e:63:a3:
9f:44:d9:d0:19:20:ce:8a:09:93:f7:48:c4:12:6f:
05:05:80:70:0e:18:1d:92:10:02:48:65:1b:26:af:
e1:d7:d9:89:e6:af:a7:40:87:de:5c:7b:1d:01:d5:
a3:8a:a8:5c:9d:16:c8:0d:09:4c:6f:70:22:42:1c:
9a:f2:be:d1:59:b4:a3:51:6e:bc:a2:ad:eb:76:23:
98:0c:84:60:c1:59:3f:6d:84:59:5b:44:d2:80:d7:
5b:75:cd:a2:57:7c:be:c1:ec:c7:10:bc:4e:d5:e6:
63:ea:12:ec:ea:0d:9b:21:55:10:a7:54:ca:74:6e:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A4:89:6A:D9:44:C4:DD:DB:DA:CB:A6:21:D7:60:29:F9:71:A7:EA
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:16:61:8c:bf:bc:26:cb:42:0a:1d:2e:0b:31:21:18:c6:
49:b4:40:39:33:76:c0:6b:ac:e5:5b:b4:3a:d9:74:00:84:50:
11:bc:61:d5:c3:51:b3:82:2c:cb:65:09:74:9c:d3:ce:3c:b4:
30:71:a6:9f:92:8f:47:61:a3:a3:18:78:81:7a:33:37:1e:4b:
38:a6:d9:b8:da:3a:5d:20:3e:a3:6a:ef:d5:f4:c8:c5:17:8b:
37:00:9e:89:48:46:f4:c2:78:81:c0:a8:58:2d:88:43:fc:45:
65:f0:04:90:e7:21:45:12:c0:c8:07:dd:e5:f1:0b:f9:a4:cb:
91:e3:9c:40:70:f9:ed:a3:9c:c9:2e:6a:f8:aa:9d:f1:ba:54:
01:74:99:23:9a:4e:c9:20:76:6b:f5:45:1d:84:f4:84:0e:bb:
58:07:67:97:61:62:49:1a:0f:cd:48:d3:34:d0:fd:ec:6c:68:
65:7f:e6:be:69:8d:8c:08:c7:52:dd:2a:12:99:97:9e:35:42:
fd:d2:97:cc:9f:66:05:92:e8:f3:83:ad:d1:fa:4b:06:b5:73:
0c:f7:4f:f8:3b:04:7e:ce:0d:82:6f:76:4f:3a:3f:8a:77:45:
76:74:89:ec:70:82:d2:bf:27:6e:a3:e3:8f:26:43:e7:aa:76:
bf:01:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:27 2026 by rpki-client