Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: zv39X//q/9BYp7QEX83RWqSzk7DCuLjyGmzL8XIFW6A=
Subject key identifier: A4:6C:F1:57:CC:6F:97:B6:16:1B:FE:E6:C1:63:C3:64:33:A1:C3:EB
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019EC36E46A1BD68F161A4A37DE7E9FA1E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 195E
Signing time: Sun 14 Jun 2026 00:00:44 +0000
Manifest this update: Sun 14 Jun 2026 00:00:44 +0000
Manifest next update: Mon 15 Jun 2026 00:00:44 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: zmuuF3t0iB0YTy2OelhjqfAI748vCuZ4TeEH+VNOn68=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:46:a1:bd:68:f1:61:a4:a3:7d:e7:e9:fa:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jun 14 00:00:44 2026 GMT
Not After : Jun 15 00:00:44 2026 GMT
Subject: CN=a46cf157cc6f97b6161bfee6c163c36433a1c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:ef:04:17:94:cf:d5:e7:a5:a2:60:6b:f9:
4c:ef:97:19:11:ab:2c:7f:5d:ee:59:85:ff:74:b5:
a4:02:9b:de:87:0a:f4:10:5c:76:dd:b0:10:a4:2a:
ab:47:0d:01:2e:7c:37:07:55:0e:af:1a:cc:96:2b:
d6:0e:98:b1:46:12:aa:b7:84:15:fd:f4:47:0c:c2:
ca:9b:db:6b:f7:91:98:b0:18:e4:84:26:13:da:fc:
dd:a1:24:a4:42:40:fc:84:70:be:20:44:ef:fd:b3:
87:ce:a4:06:56:26:3b:d7:6a:44:08:e5:9d:de:a1:
13:b7:9a:95:40:5d:09:61:73:d0:3b:f3:da:19:90:
3f:23:7c:e5:eb:67:e6:a2:cd:5a:6a:a9:0b:8d:ef:
e2:68:93:9b:7a:11:50:26:0e:d9:f6:83:f6:7c:a2:
99:63:c4:9a:1d:dc:9c:ae:12:d6:24:d0:9d:7f:fb:
11:7c:f9:31:f4:29:02:8a:4c:6b:66:0e:6e:2a:57:
d2:dc:c2:f4:1d:16:5b:ce:ed:b4:05:10:be:1d:e7:
2d:91:c7:80:12:47:c3:c5:2f:7b:c4:80:d3:b8:16:
2c:a5:de:a4:0e:54:35:f0:4f:e4:f7:dd:2d:33:b7:
e6:3e:20:dc:f0:7e:ca:75:2e:4f:f3:eb:59:9a:29:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:F1:57:CC:6F:97:B6:16:1B:FE:E6:C1:63:C3:64:33:A1:C3:EB
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:ea:e4:39:27:ff:2f:34:95:e9:19:72:6d:55:d6:bf:2f:
66:8e:c6:bb:94:4d:48:f5:21:74:c1:82:0a:ca:39:2c:a0:85:
03:cf:1f:f7:ae:0a:47:d1:ec:b2:c4:bd:ac:50:d3:7e:7b:fe:
c6:58:7b:a7:e1:16:7f:cd:05:7d:05:f9:59:15:5b:37:c3:f2:
07:39:0d:55:fc:95:25:d0:31:1b:75:9f:61:97:48:24:10:fa:
e1:78:58:5b:b0:e6:be:bc:de:00:88:6a:8c:55:1a:2c:3c:cc:
3b:26:86:eb:47:57:a4:a3:51:21:a9:6a:06:05:40:64:ce:3c:
79:e0:e4:64:24:ec:ac:6d:a3:6a:b9:93:e5:8b:c5:57:e1:80:
13:04:5a:b4:7e:c8:2a:6b:c7:04:fe:97:f7:5f:9e:c7:21:33:
38:1a:40:f6:db:93:0f:6e:43:a4:91:81:26:00:98:9c:83:12:
0e:4a:4b:e5:32:da:6a:f2:43:76:1f:0c:98:b5:de:20:96:65:
b1:6a:55:33:a2:c5:15:df:af:29:aa:62:14:77:49:4a:ef:8b:
14:97:86:19:9d:ba:b1:da:10:02:93:fb:cf:dd:7e:a4:a0:bd:
90:d9:83:1b:d5:20:7b:a1:46:b1:90:38:65:de:be:17:35:65:
a7:b0:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:49 2026 by rpki-client