Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: xpRWlphgM5PcQZQB5MAkQCUO605sFDKvOaTGzPrAm6M=
Subject key identifier: 0E:5C:33:35:88:12:0A:96:36:F8:A7:EC:76:70:A8:A0:80:EA:B0:F7
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019CA8A12E04162CF5676692302345F99915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 09:01:01 +0000
Manifest this update: Sun 01 Mar 2026 09:01:01 +0000
Manifest next update: Mon 02 Mar 2026 09:01:01 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: 3bc8N6GgiqVra5fwhd8B5cNuGRhifHQrdyji8QsrDQA=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:2e:04:16:2c:f5:67:66:92:30:23:45:f9:99:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Mar 1 09:01:01 2026 GMT
Not After : Mar 2 09:01:01 2026 GMT
Subject: CN=0e5c333588120a9636f8a7ec7670a8a080eab0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:0d:bd:c8:55:08:e6:19:4b:b9:88:a7:a6:
25:c4:af:dd:c4:f4:c1:f1:4b:d1:52:de:c1:c8:2f:
d7:50:a9:8e:e3:e0:d5:01:fb:2b:57:05:8c:c7:1e:
53:2e:c9:a9:66:76:ee:6b:85:51:b3:be:cc:b6:7e:
27:1b:be:36:66:5f:26:48:0b:17:d9:b4:e8:c2:df:
b3:06:8c:0a:b3:d5:62:c6:35:c5:f4:70:87:02:ec:
4a:93:ba:1b:30:e9:ee:f5:54:03:14:9f:c2:4b:7b:
00:8d:b2:68:89:8e:da:6b:7f:2b:8e:b6:12:ad:78:
e3:1c:0c:f7:f4:40:d0:e0:6e:14:66:84:04:55:6c:
7b:d7:ac:25:41:ba:c7:06:5e:ee:ed:49:ac:0e:1d:
85:53:97:75:4d:60:f0:cc:e3:9c:86:05:30:18:41:
95:30:35:f7:d8:d0:42:7a:56:6f:9a:40:05:84:e3:
8a:dc:ee:5c:7b:70:3d:5a:b7:0e:3d:52:3e:b2:81:
20:e9:58:84:ca:9d:6f:a5:cd:2c:1a:a6:70:c9:c6:
c9:4e:0a:ed:76:18:4d:dd:73:24:02:64:e8:38:c8:
5c:65:83:8d:c9:5c:5f:9f:ef:cb:b4:23:a0:cb:ff:
6a:3a:29:e4:3f:16:68:8e:c9:dd:2e:f5:93:48:d3:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:33:35:88:12:0A:96:36:F8:A7:EC:76:70:A8:A0:80:EA:B0:F7
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:04:2d:36:ae:d0:ae:3f:47:5a:53:b8:72:76:fb:8f:bf:cc:
f6:6f:4f:e0:f9:96:e7:82:71:fa:b2:7f:1a:07:9e:db:f1:31:
e2:b8:de:99:a2:88:f8:a4:b5:25:36:a1:8f:75:6c:13:e9:ab:
e4:fd:9f:11:e7:74:c3:44:b6:4b:04:69:13:ff:5c:84:0b:ed:
a1:b3:53:05:41:60:c6:f1:83:76:52:25:d7:58:00:64:de:e5:
cd:45:a2:07:4f:02:b6:65:39:00:66:04:80:91:c2:6d:d3:e3:
b9:86:a1:98:d9:fd:46:72:7c:c7:84:3c:9d:00:17:6f:25:4a:
3b:49:64:d5:b4:bc:13:0d:12:2b:76:8b:17:4e:f4:56:b8:1e:
b9:fe:8e:af:cf:fa:c1:d8:f9:77:52:76:77:9c:90:2f:b8:d1:
d0:76:c7:0c:fc:3f:98:b1:70:49:41:0b:d5:b8:22:1f:71:41:
99:a9:f5:2a:18:55:d9:56:28:e8:95:cf:33:13:76:9b:e7:32:
51:52:ea:63:c2:4b:81:78:f9:07:89:d0:f9:1f:5d:c4:66:dc:
14:bb:0e:b4:7d:e1:a0:1b:94:94:a3:95:de:c5:8b:1d:27:90:
75:41:60:2a:62:ff:45:f1:72:28:24:57:7b:84:17:1b:aa:bb:
e6:71:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:43 2026 by rpki-client