Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: QzIdP9IoK+ZpXmoWaKmQv+surxCbBRz2P8vkjaIOhJs=
Subject key identifier: F1:2D:0F:4B:FA:B4:89:6D:DF:A9:A2:33:4D:5C:2C:A4:79:6F:93:6B
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019D26280D7CE9E4DAD75F0DCE75BE66A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: IlwPaf5YGBgjLOWIg/jST8oNLLeczQMDuX0p9J/HlbE=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0d:7c:e9:e4:da:d7:5f:0d:ce:75:be:66:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=f12d0f4bfab4896ddfa9a2334d5c2ca4796f936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:ff:7b:62:10:45:8c:f1:27:da:d0:38:11:
96:43:d6:99:ab:59:70:5f:92:53:eb:bd:46:56:ac:
ec:c0:30:74:5e:63:bf:e2:0d:c0:f7:c7:3f:5a:0b:
db:84:b1:c6:3e:82:f2:58:9e:a2:71:f3:b7:74:d8:
bd:29:71:4c:4e:5a:a4:f8:be:3a:5e:f7:f5:91:1e:
e2:b5:26:d7:7c:ea:86:1c:f4:91:a0:b1:60:b1:e6:
75:61:ca:70:51:06:38:51:d2:4e:bc:ff:73:f5:29:
2f:e5:63:2d:de:71:87:9f:ac:67:25:b6:d9:1b:1d:
fc:d4:7b:9c:7f:34:39:24:e6:4d:52:f7:ed:9e:14:
a4:45:e6:23:95:39:ea:c3:04:c6:de:c9:b3:bc:2e:
fb:25:9c:6a:63:a9:bf:f9:58:f9:69:4f:d0:54:55:
5b:16:1e:ba:c2:b1:59:de:e9:9b:c2:a9:ff:b2:b5:
9f:53:62:00:98:f1:26:c4:d0:84:af:30:46:a5:65:
ce:4e:89:39:e5:db:c8:82:91:d2:8f:c4:85:cb:e0:
10:ed:53:a0:f4:05:1d:a7:04:a9:ca:18:68:1a:db:
3a:f6:a2:4d:c1:3a:d9:ef:58:b2:0d:8e:00:3c:70:
23:2d:73:57:a8:4f:e9:41:01:d9:75:d4:bd:01:a5:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:0F:4B:FA:B4:89:6D:DF:A9:A2:33:4D:5C:2C:A4:79:6F:93:6B
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:1c:a1:90:34:c5:13:23:d4:00:5a:5e:ce:8a:fa:5f:e5:
6c:99:16:28:a5:7c:85:87:70:7f:17:af:8f:b9:30:43:bb:75:
64:e4:f4:4c:20:fd:00:2a:8d:1d:89:50:c6:f4:a3:b9:fc:11:
78:cc:48:a4:9c:a3:21:17:a3:9b:87:48:19:4a:23:1c:96:7f:
58:96:84:aa:d6:81:8d:97:a2:68:1b:e0:f1:82:13:8e:9f:a2:
13:b5:d2:ed:35:98:48:c8:f5:9a:ca:4c:22:7a:3a:6e:c6:e1:
42:96:90:a9:02:45:d8:24:2a:4a:97:d1:72:06:d5:37:a8:97:
73:14:d1:59:39:11:6e:20:2d:68:1b:3b:72:1b:9c:58:2a:0e:
b3:af:ad:7e:25:88:68:c7:a0:80:00:e2:f2:4c:62:e5:26:46:
9e:db:87:57:86:34:5e:dc:09:d7:28:a5:e1:33:fe:93:c8:df:
9d:6a:58:dd:d9:4a:bf:61:8a:d6:26:a8:47:3c:8a:96:a3:14:
68:2e:f5:84:84:39:8f:d0:06:81:fb:09:9d:7a:1c:89:a6:95:
27:d0:cf:72:16:58:35:08:09:b1:c1:d3:13:52:73:a8:59:de:
51:e0:10:a1:b8:34:0f:5b:12:e8:23:85:fe:35:8b:43:c2:5c:
05:73:7d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKA186eTa118NznW+ZqVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2
MDA1MTYwHhcNMjYwMzI1MTgwMDUyWhcNMjYwMzI2MTgwMDUyWjAzMTEwLwYDVQQD
EyhmMTJkMGY0YmZhYjQ4OTZkZGZhOWEyMzM0ZDVjMmNhNDc5NmY5MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMP/e2IQRYzxJ9rQOBGWQ9aZq1lw
X5JT671GVqzswDB0XmO/4g3A98c/WgvbhLHGPoLyWJ6icfO3dNi9KXFMTlqk+L46
Xvf1kR7itSbXfOqGHPSRoLFgseZ1YcpwUQY4UdJOvP9z9Skv5WMt3nGHn6xnJbbZ
Gx381HucfzQ5JOZNUvftnhSkReYjlTnqwwTG3smzvC77JZxqY6m/+Vj5aU/QVFVb
Fh66wrFZ3umbwqn/srWfU2IAmPEmxNCErzBGpWXOTok55dvIgpHSj8SFy+AQ7VOg
9AUdpwSpyhhoGts69qJNwTrZ71iyDY4APHAjLXNXqE/pQQHZddS9AaWbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEtD0v6tIlt36miM01cLKR5b5NrMB8GA1UdIwQY
MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt
OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm
LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbAcoZA0
xRMj1ABaXs6K+l/lbJkWKKV8hYdwfxevj7kwQ7t1ZOT0TCD9ACqNHYlQxvSjufwR
eMxIpJyjIRejm4dIGUojHJZ/WJaEqtaBjZeiaBvg8YITjp+iE7XS7TWYSMj1mspM
Ino6bsbhQpaQqQJF2CQqSpfRcgbVN6iXcxTRWTkRbiAtaBs7chucWCoOs6+tfiWI
aMeggADi8kxi5SZGntuHV4Y0XtwJ1yil4TP+k8jfnWpY3dlKv2GK1iaoRzyKlqMU
aC71hIQ5j9AGgfsJnXociaaVJ9DPchZYNQgJscHTE1JzqFneUeAQobg0D1sS6COF
/jWLQ8JcBXN9Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:14 2026 by rpki-client