Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: S8Sa9zeUaj/n51nzteHLRA5Fa87FF0LndI1EUHiVgvo=
Subject key identifier: 33:EA:B0:5D:91:1C:8B:28:2A:16:2C:CD:A3:CF:86:AA:79:F6:67:21
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019F8E34CEAFC6660BCA3DB73AF5BCDD3D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 09:00:53 +0000
Manifest this update: Thu 23 Jul 2026 09:00:53 +0000
Manifest next update: Fri 24 Jul 2026 09:00:53 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: 1BNd5PGhp0wNQgr373uC3e0ePDkAiljuDJa//jZqxws=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:ce:af:c6:66:0b:ca:3d:b7:3a:f5:bc:dd:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jul 23 09:00:53 2026 GMT
Not After : Jul 24 09:00:53 2026 GMT
Subject: CN=33eab05d911c8b282a162ccda3cf86aa79f66721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a4:7e:79:cc:0a:8a:a6:f8:e2:8b:0b:25:2f:
7c:60:40:79:c8:c1:7d:7b:4e:3b:38:a6:41:37:01:
87:07:4b:b1:1b:02:d8:87:a2:0a:ea:51:21:d2:5b:
c4:c2:7d:c3:49:31:66:c2:d2:6f:f3:d1:3f:ea:5d:
21:85:ef:fd:90:64:f5:92:0a:f6:12:ae:83:86:43:
0f:03:6b:a7:09:cb:ff:5a:86:e9:f2:89:e6:79:e0:
fc:b0:2f:8c:ab:ac:ea:22:0f:e9:64:61:eb:8d:47:
78:7b:bb:02:f1:9c:9a:2f:cc:e1:b5:4e:ed:d7:7b:
ab:39:53:0b:63:56:1b:3c:58:e6:16:a2:7a:d8:1e:
8b:fb:ae:bf:49:57:21:f1:4c:5f:70:3a:ed:9f:7a:
05:bc:bf:16:5c:dd:fe:45:71:ed:45:99:45:33:dd:
07:1d:03:d4:96:01:d2:c6:d5:4d:73:e3:cc:65:ca:
e5:03:7d:61:18:28:7c:df:1a:bc:98:be:6b:32:b1:
ff:56:f9:98:8d:df:58:c2:93:93:66:8b:b8:d6:36:
0a:c1:2c:ab:ad:aa:24:f3:7e:3d:1b:70:2c:61:e3:
29:20:eb:2f:7c:09:57:cb:76:f6:04:5a:89:0b:72:
f4:29:68:54:14:38:be:d5:40:29:ab:cc:bc:ef:20:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:B0:5D:91:1C:8B:28:2A:16:2C:CD:A3:CF:86:AA:79:F6:67:21
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ac:1f:25:f5:80:12:d6:f2:bc:73:3d:c8:dd:50:28:15:b6:
e6:8b:ca:2a:81:54:37:d4:d9:b1:04:8d:71:7c:14:16:f1:a0:
c6:d0:9f:d6:1e:16:18:fe:6c:fd:29:32:9b:54:15:10:53:fd:
d5:bb:95:4b:df:56:7d:58:c6:67:9e:34:d3:9c:f1:3c:f4:91:
3f:3c:63:4a:f6:3b:c3:6b:84:9f:36:b8:1a:2b:85:d2:2a:41:
26:ae:ae:8b:13:cb:fd:25:65:ee:fe:05:eb:0c:71:0b:27:84:
00:3c:61:ba:f8:5e:27:2d:5d:cd:fa:da:10:08:f4:b9:b7:7a:
84:1f:03:af:cd:78:4f:9e:db:54:0d:94:ee:3d:56:47:c2:05:
6c:b1:1e:d4:50:b6:90:18:69:47:b7:bf:93:82:be:0a:67:b8:
93:de:77:66:b2:eb:a9:62:08:e8:9c:22:71:42:de:92:88:ab:
39:81:b8:33:77:50:94:6b:4c:59:3c:d6:ae:b7:9d:db:5f:33:
9f:54:33:8d:ac:84:2e:ab:1c:4b:e0:51:75:38:4b:ec:8e:cd:
b3:a5:44:c5:bd:0f:9a:f4:65:24:2f:ed:b6:09:11:6d:0f:28:
b6:b4:87:f6:b0:ba:17:38:77:f1:5a:51:5b:ca:46:bd:43:eb:
b6:88:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:15 2026 by rpki-client