Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: j65PhN+iF6rj+TWPCcFoc2JOwfa8EAbmwKSkIF832Dc=
Subject key identifier: 6B:5F:0D:10:D5:7C:D4:15:59:BA:C7:05:61:8D:13:10:42:8B:8B:21
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019EBDA316D5426894CF51695DD6C718EAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 21:00:42 +0000
Manifest this update: Fri 12 Jun 2026 21:00:42 +0000
Manifest next update: Sat 13 Jun 2026 21:00:42 +0000
Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: T/R/frhxeq3qm3ibqQ1fZYSMo2PUACWz4CC03esgaC8=)
3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:16:d5:42:68:94:cf:51:69:5d:d6:c7:18:ea:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jun 12 21:00:42 2026 GMT
Not After : Jun 13 21:00:42 2026 GMT
Subject: CN=6b5f0d10d57cd41559bac705618d1310428b8b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:dd:02:d7:21:13:82:08:24:ad:ef:40:77:
25:84:bb:1e:ad:1e:ec:9d:e6:f0:de:b5:ae:af:0b:
98:d1:47:a5:a5:d9:c7:a8:69:49:2c:e5:e1:34:b1:
18:20:af:e6:e3:0b:ff:0b:05:26:17:e1:42:c7:99:
13:f3:70:ca:37:04:27:6e:c8:d7:06:9b:56:01:e8:
af:a8:08:d1:e2:b7:9e:46:15:24:03:b1:3c:0b:b4:
f6:89:e7:74:29:26:a0:71:43:e9:8e:95:0a:16:32:
44:e4:26:71:15:4e:84:d3:56:c6:8c:09:5e:91:bc:
8d:60:aa:95:5f:61:82:08:0b:4f:0c:bb:b4:d1:1e:
ef:01:e0:96:37:1f:2f:c8:18:b7:43:7e:7f:12:43:
2f:96:12:28:0a:7d:6f:99:ee:08:05:c2:52:ef:28:
e9:32:9c:94:72:0c:46:29:ca:9f:6b:ea:45:53:5b:
4c:0e:6c:e8:cc:4e:f3:7c:71:20:9f:02:20:8d:39:
cf:0e:bf:d7:14:2f:5a:d9:14:69:d3:31:62:f6:72:
54:02:6e:95:f4:e6:68:7c:51:ef:0b:8e:a1:25:08:
d9:0a:55:79:1f:04:c2:f9:7e:87:87:10:b1:6e:9d:
bc:a6:3b:4e:07:31:be:b0:dd:db:8d:d6:17:c4:4f:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:0D:10:D5:7C:D4:15:59:BA:C7:05:61:8D:13:10:42:8B:8B:21
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:c8:a9:e9:30:b9:b7:dd:63:97:0b:ec:2d:ac:1e:45:94:
c6:c9:60:8a:5e:6d:4f:9d:75:40:4d:30:fb:9f:0c:f8:c7:35:
a5:6f:32:56:5f:56:f8:7e:a6:63:43:65:07:7a:64:0c:27:c2:
b4:86:9a:fe:7e:8d:10:76:6f:b7:5c:1f:07:28:0e:58:e9:c3:
69:b9:79:cf:73:3c:74:5f:ea:10:4c:18:a6:da:82:ad:ac:24:
84:fc:16:11:e0:bb:1d:c6:23:61:2a:58:c1:f8:5b:fa:14:c0:
ed:88:31:bd:3e:9b:c0:b9:67:65:27:e9:f2:43:a0:60:1a:6c:
d6:95:3b:0d:bf:ca:48:00:f0:2e:5e:ca:4c:d4:c8:19:de:5d:
76:a4:da:58:d3:57:f2:6d:d7:2f:f4:d6:d0:ac:d2:85:82:38:
12:79:6a:dc:9e:2c:52:f5:4d:b1:9d:70:df:8d:c5:d6:98:91:
e9:5b:ed:ef:95:13:af:40:f5:8c:0d:b0:41:ca:54:1e:87:90:
cf:dc:a1:09:e2:a6:e8:e9:54:6f:85:78:61:f9:bf:b6:ae:a3:
38:47:56:ea:bb:63:90:cc:47:cf:e4:a3:73:46:cf:50:bd:33:
c0:13:97:9d:c2:4a:8e:ed:fa:a6:fa:d0:56:28:fd:35:5b:a6:
77:f8:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:32 2026 by rpki-client