Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: FHn3OAcjJsMDRO+ufobrrkD2vXpVQTRwJU9Ed86s/js=
Subject key identifier: 3A:FB:96:C4:03:C1:92:6B:41:B8:FB:CE:2E:B2:F0:D5:06:C2:D6:07
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019FAABEE10076CE4957231A17EFD691A0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 12E2
Signing time: Tue 28 Jul 2026 22:01:03 +0000
Manifest this update: Tue 28 Jul 2026 22:01:03 +0000
Manifest next update: Wed 29 Jul 2026 22:01:03 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: IjcXVp2JDTkcqi6SAE3GLnp2YjvkAGWC1JftG6d6ufg=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:e1:00:76:ce:49:57:23:1a:17:ef:d6:91:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jul 28 22:01:03 2026 GMT
Not After : Jul 29 22:01:03 2026 GMT
Subject: CN=3afb96c403c1926b41b8fbce2eb2f0d506c2d607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:bc:3f:6f:26:5f:4d:67:7d:42:97:97:3f:
45:eb:13:00:46:92:24:de:99:bb:ec:a2:6d:25:ef:
a5:42:18:58:8c:63:5c:ce:14:8a:e4:ba:19:cb:4e:
6c:a0:4f:2f:55:ff:d0:8b:7f:99:df:f0:07:77:b2:
9e:2d:29:12:2f:cc:25:b0:a3:ef:a1:ba:e1:0e:a9:
15:b2:fa:a3:5a:ad:4a:64:bb:ac:e5:bf:8f:65:1e:
c0:8c:3f:24:8b:dc:d6:a5:07:e8:54:a7:dd:9c:8d:
2a:b0:15:0e:25:b4:40:9f:31:16:8a:ce:c9:18:29:
a4:5e:a2:2d:9c:b5:53:31:12:9d:0b:be:1e:1d:65:
bd:d8:01:03:5f:81:51:e2:f6:65:aa:f2:73:d9:98:
e3:10:07:8c:e6:7e:16:f1:04:4c:bb:fe:04:57:fe:
68:1a:80:15:5a:fe:e0:53:56:a4:b6:cb:14:42:89:
2e:56:e2:ee:0f:07:26:b7:0a:25:c3:78:52:1c:fc:
3b:27:6b:76:f9:92:a4:47:46:f1:8d:29:04:b3:f1:
d4:eb:d8:24:3a:20:a3:ef:ec:35:6e:b0:22:d1:b1:
85:53:a9:fe:06:29:81:79:14:24:eb:45:82:06:b9:
8f:5c:3a:2e:da:38:ff:4b:23:0d:cd:d2:a5:dd:ae:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:96:C4:03:C1:92:6B:41:B8:FB:CE:2E:B2:F0:D5:06:C2:D6:07
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:db:c6:6d:f2:9c:6f:aa:e1:5d:b1:66:c2:03:4a:90:d8:03:
c9:97:92:92:49:a6:db:ab:20:79:34:fa:83:8c:87:8e:d9:e7:
06:7c:ed:bb:9e:ac:fc:6b:26:02:98:06:a1:6b:46:32:f4:a6:
9e:b9:cf:52:a5:c4:65:ba:41:14:94:09:fa:e1:cd:41:2c:20:
1d:8b:0b:9f:f6:4d:96:bc:90:2b:88:a3:cc:e2:42:49:42:ed:
df:b2:f0:8b:eb:de:fb:e2:14:29:ae:3d:c4:23:6a:56:76:92:
27:22:a9:87:43:d2:e0:05:6e:d6:f0:29:55:f6:9b:89:8e:79:
6b:77:f1:b1:89:3d:aa:99:7a:3c:45:6f:f8:d5:86:52:32:2b:
d1:68:93:ac:e8:20:b6:7b:cd:69:f8:29:2c:e8:5f:74:76:4a:
2a:ed:36:db:3f:12:7e:93:4e:f3:5f:1b:a3:64:ab:0a:dc:22:
d8:f3:1e:35:4d:b3:32:38:89:7b:a3:e6:f9:90:85:1b:6f:80:
35:fe:ff:45:7c:d7:3b:3e:89:f1:ea:b5:66:09:f1:80:e5:f5:
db:86:31:dd:5e:18:f9:1f:6a:d0:f4:00:72:08:de:2b:6d:02:
cb:68:43:8c:c6:9f:fc:64:9f:04:47:8d:13:96:10:3e:ef:81:
da:ca:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:20 2026 by rpki-client