Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: qBiveLTd0MrbK0kH5/VHQVU85KRSuGg4t0nl/718G54=
Subject key identifier: 4F:DF:80:28:37:BF:14:C7:0D:2B:C2:D8:16:56:E1:F0:7B:A4:7E:C6
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 01A157AF6F5F033E3028A5FDBFDF3EF255C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1AB4
Signing time: Tue 20 Oct 2026 05:01:17 +0000
Manifest this update: Tue 20 Oct 2026 05:01:17 +0000
Manifest next update: Wed 21 Oct 2026 05:01:17 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: BGSLQSPFOz83E_NblrhG1IAmhqU.asa (hash: asWA1gfumdcyjgh7btrioaYdsJZ8SGpkhyyRndl8L+0=)
3: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: OpKg8mGQI+pS2q+9/c6DBWLZlXR7u46x3J1vHK6fKIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:6f:5f:03:3e:30:28:a5:fd:bf:df:3e:f2:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Oct 20 05:01:17 2026 GMT
Not After : Oct 21 05:01:17 2026 GMT
Subject: CN=4fdf802837bf14c70d2bc2d81656e1f07ba47ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:7e:f1:52:d1:39:3c:12:38:96:a5:71:d1:
b1:f3:3d:42:f4:cd:ac:2a:e2:3f:9e:19:80:d8:b4:
54:b5:80:e4:23:e2:7c:9f:85:5c:a7:05:4d:0d:1e:
84:2a:d4:67:b7:71:82:9e:57:21:4c:a7:3b:c7:d3:
7d:5f:ca:2d:2d:7d:38:a9:07:7b:e7:63:a1:d5:ca:
92:1e:ac:4c:2a:5c:87:d9:0e:8b:93:38:1b:c6:68:
a3:ee:b7:11:91:bd:28:08:e2:81:6b:ed:18:24:90:
5e:08:17:15:fa:c0:0e:f8:a7:73:e0:01:c7:68:d9:
ac:95:20:9a:df:f1:ea:58:bd:86:47:25:0b:bb:90:
3f:fe:4c:c1:3a:b9:8e:44:bb:63:71:a4:3f:ed:e3:
e3:b1:96:9b:5b:52:5f:db:ed:dc:5b:92:e4:17:bc:
73:d0:b4:b7:15:d7:e6:8c:b8:12:d9:09:4a:7f:3f:
2e:d0:99:70:b7:6d:35:72:cb:bf:82:93:6e:ba:fd:
e9:72:aa:b9:4f:58:42:bc:b9:84:8b:a3:6a:c0:bd:
b3:6f:74:62:d0:09:db:23:49:e0:85:e5:e4:b2:23:
18:32:b8:89:5f:e0:0d:14:65:1b:3d:b1:da:35:14:
b6:db:b2:03:e0:b8:b3:33:a2:98:1d:9a:44:ab:3f:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:80:28:37:BF:14:C7:0D:2B:C2:D8:16:56:E1:F0:7B:A4:7E:C6
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:b0:18:eb:a6:bd:cc:63:6b:f0:ef:c0:b2:83:3d:fd:12:
55:32:1f:0a:70:a6:5b:90:35:40:27:d6:f5:2e:9b:94:35:41:
a8:f4:52:f1:bc:eb:e2:73:7d:77:a6:6a:3e:78:d3:8b:8b:a4:
8d:4e:80:84:90:6d:00:1f:f2:35:a1:5d:b8:9b:91:c0:d3:0b:
42:e2:79:06:af:48:e7:c4:54:75:6c:0f:ad:71:5d:c4:16:7e:
d2:fd:44:30:5f:48:68:f6:b3:f4:c6:1d:31:80:b0:5d:17:0b:
26:73:22:ae:de:8d:be:61:ad:aa:70:69:a6:0d:bc:cb:83:46:
3d:45:9c:61:4f:e7:86:49:09:e0:23:8d:40:d2:28:01:7d:32:
68:6a:2f:1d:f2:62:c9:8d:27:76:6d:52:0e:ea:4d:28:c2:e2:
c7:db:38:5c:9c:65:5d:cc:a9:42:00:5e:eb:78:e7:f8:7b:18:
a3:a9:4b:03:1c:bb:d9:c4:5d:90:03:8d:0a:4e:ff:4e:f2:4d:
da:c6:fe:5b:10:5e:d2:9c:82:ab:fd:2d:56:de:00:53:4d:bb:
ed:bf:69:ee:33:e1:78:13:7f:50:6d:17:d4:dd:f5:d3:56:ce:
16:c2:51:d5:1a:41:17:80:8d:66:f4:8e:dd:74:f7:b8:a4:bc:
e6:43:25:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXr29fAz4wKKX9v98+8lXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2
MDA1MTYwHhcNMjYxMDIwMDUwMTE3WhcNMjYxMDIxMDUwMTE3WjAzMTEwLwYDVQQD
Eyg0ZmRmODAyODM3YmYxNGM3MGQyYmMyZDgxNjU2ZTFmMDdiYTQ3ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6md+8VLROTwSOJalcdGx8z1C9M2s
KuI/nhmA2LRUtYDkI+J8n4VcpwVNDR6EKtRnt3GCnlchTKc7x9N9X8otLX04qQd7
52Oh1cqSHqxMKlyH2Q6Lkzgbxmij7rcRkb0oCOKBa+0YJJBeCBcV+sAO+Kdz4AHH
aNmslSCa3/HqWL2GRyULu5A//kzBOrmORLtjcaQ/7ePjsZabW1Jf2+3cW5LkF7xz
0LS3FdfmjLgS2QlKfz8u0Jlwt201csu/gpNuuv3pcqq5T1hCvLmEi6NqwL2zb3Ri
0AnbI0ngheXksiMYMriJX+ANFGUbPbHaNRS227ID4LizM6KYHZpEqz86DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/fgCg3vxTHDSvC2BZW4fB7pH7GMB8GA1UdIwQY
MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt
OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm
LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT6wGOum
vcxja/DvwLKDPf0SVTIfCnCmW5A1QCfW9S6blDVBqPRS8bzr4nN9d6ZqPnjTi4uk
jU6AhJBtAB/yNaFduJuRwNMLQuJ5Bq9I58RUdWwPrXFdxBZ+0v1EMF9IaPaz9MYd
MYCwXRcLJnMirt6NvmGtqnBppg28y4NGPUWcYU/nhkkJ4CONQNIoAX0yaGovHfJi
yY0ndm1SDupNKMLix9s4XJxlXcypQgBe63jn+HsYo6lLAxy72cRdkAONCk7/TvJN
2sb+WxBe0pyCq/0tVt4AU0277b9p7jPheBN/UG0X1N3101bOFsJR1RpBF4CNZvSO
3XT3uKS85kMlng==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:22:02 2026 by rpki-client