Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: zyS19COSQMp72IPtZK9PjA+Gk+9gcUrSRRmRb9c0GC4=
Subject key identifier: 67:79:71:5D:0E:46:B9:53:01:0C:AC:55:A6:D8:66:1F:C1:3A:F1:2A
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019D9BF5C72ED87A8C99C7E9E031E8C2DF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:01:08 +0000
Manifest this update: Fri 17 Apr 2026 15:01:08 +0000
Manifest next update: Sat 18 Apr 2026 15:01:08 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: XOa/I5ZecQUjmcf3fCgsJX9tAi+Ofc5RRWJnjn3MMjU=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:c7:2e:d8:7a:8c:99:c7:e9:e0:31:e8:c2:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Apr 17 15:01:08 2026 GMT
Not After : Apr 18 15:01:08 2026 GMT
Subject: CN=6779715d0e46b953010cac55a6d8661fc13af12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:62:f8:f9:53:5f:b1:43:bc:e1:e4:49:0c:
db:e1:c8:b9:87:9c:94:08:b2:55:80:bc:65:eb:f8:
10:20:c1:fb:78:9a:66:3a:10:d2:42:c4:b6:c9:8b:
98:fd:f3:9e:38:fc:bb:9c:a6:e7:26:6d:31:c1:d8:
2d:25:1b:64:23:2f:bc:f7:f6:e8:eb:f4:3a:3e:df:
d3:ab:be:c3:29:b8:e9:a2:5b:c2:f9:46:50:ab:e2:
f9:87:f9:75:6d:2e:c0:d0:20:11:3f:22:a7:96:ef:
f7:fc:02:92:d8:24:b5:b3:31:11:8a:df:30:1e:8b:
39:65:72:bf:3f:a0:ad:fe:a9:62:85:90:56:23:0b:
5c:ed:6d:49:0a:8a:a2:73:8c:1b:9e:2a:a2:ba:bb:
93:75:b6:86:17:b1:ed:ad:51:a4:61:6c:af:ac:f2:
f8:f8:0e:92:95:f9:72:59:a2:15:55:58:e7:08:87:
d4:f1:62:c2:c1:95:44:f2:68:4b:6e:07:14:78:0f:
db:ce:1a:82:68:83:5b:18:af:f4:e9:d8:eb:51:29:
0c:81:7b:b8:f6:2d:04:99:6b:a1:b8:f4:e3:e6:cb:
d0:27:12:da:ae:6f:b0:e4:7d:37:8f:d9:a5:76:14:
15:75:1a:31:15:27:4b:eb:88:5e:44:b3:a3:92:40:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:71:5D:0E:46:B9:53:01:0C:AC:55:A6:D8:66:1F:C1:3A:F1:2A
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:94:33:a3:cd:2e:e4:ec:50:2f:29:ff:a9:d2:e7:b8:7b:0d:
a5:3f:2e:40:5a:45:18:d8:80:4d:71:77:0e:a2:f0:22:5c:c9:
37:ee:74:b2:65:53:e3:c9:1f:20:61:01:33:ec:5a:03:5e:5f:
68:65:89:fc:cc:b8:ae:ac:c3:0e:8a:b8:8d:2a:ab:c9:af:45:
da:a2:31:c7:67:15:b1:d4:05:bb:dd:4d:50:e8:12:b6:73:f0:
55:8e:5b:23:9e:2c:b9:24:f4:ee:fb:98:7f:c7:40:28:04:b6:
51:f7:12:6f:7d:ed:0f:be:b6:5a:c5:bb:ad:36:4e:2d:43:f2:
64:74:64:89:0d:53:97:5e:b3:7d:20:dd:ac:c2:55:15:bd:a6:
01:9e:9d:35:c4:97:fe:b1:eb:c7:e1:83:ca:10:20:eb:a4:fe:
f8:b1:78:99:29:6a:17:c7:33:4f:8c:9f:77:70:f9:4f:4b:16:
99:17:3d:6e:11:77:de:80:8e:9f:47:b6:7e:db:02:d3:78:42:
95:48:1f:8c:34:fe:d4:e8:a2:e5:37:f4:b1:89:e2:1f:b5:06:
75:7d:7d:29:a9:25:6e:20:8e:01:97:69:96:c1:aa:f1:28:d1:
45:44:1e:2e:dc:e4:a0:f0:2d:2f:cb:c9:67:42:05:5c:f8:f0:
bd:c7:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:12 2026 by rpki-client