Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: NbL+F/XpuoL4szWaNitKi+iqhPYh9sCvicMrYXu/p7w=
Subject key identifier: 38:B3:16:34:AD:97:FB:A6:60:7A:77:AF:F8:4A:65:D6:43:8D:78:DC
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019D99997BB24F9126D765C6E7299F4752F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 11D0
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: mG6RzIPiizJD/aaTcwHRLQNhuqaB2/Gx9Ia1HWDvmAY=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7b:b2:4f:91:26:d7:65:c6:e7:29:9f:47:52:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=38b31634ad97fba6607a77aff84a65d6438d78dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:b4:32:e8:96:7e:c0:26:1c:3b:93:e5:39:
66:e2:91:d6:bb:03:e8:38:0f:fd:fb:86:d6:da:20:
c4:2d:4a:9a:ed:5d:d0:e4:9c:75:19:00:09:82:39:
e7:8b:0a:79:9e:f8:77:dc:7f:04:ed:88:dd:d4:ed:
e4:43:df:64:01:75:1c:28:cb:74:e3:12:7f:90:05:
d9:36:3b:b3:d4:d8:17:89:1f:eb:97:e8:a1:a2:9e:
3e:53:a5:7d:54:8d:76:3b:83:53:d5:f4:77:57:7d:
0a:89:ed:e8:fa:d6:a7:6f:d6:6d:42:fa:35:59:d5:
64:e5:3d:24:20:a6:b6:a8:a6:24:ec:87:fb:ec:a8:
01:e3:7e:fc:ad:dd:eb:4d:0d:c5:bb:39:8f:7e:eb:
4b:bc:59:fa:61:90:61:0d:14:41:97:10:e1:0e:fc:
3f:78:20:0c:4f:5c:58:63:28:51:14:db:55:4c:5f:
82:90:17:1f:82:ff:b5:77:2f:c5:08:00:18:d6:8b:
9f:18:c5:39:3e:d6:79:8c:96:59:18:78:ee:1b:25:
57:c4:c4:12:f2:21:64:c7:5f:30:aa:43:08:aa:9d:
7f:de:b9:dd:63:de:7c:05:29:d5:d6:0e:f5:ef:c0:
eb:29:79:ad:71:c4:af:3e:58:c7:64:43:3a:5e:9b:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B3:16:34:AD:97:FB:A6:60:7A:77:AF:F8:4A:65:D6:43:8D:78:DC
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:23:a3:fc:33:40:6a:5d:bb:b7:35:ee:9d:ea:51:06:8f:
00:e4:f2:be:ea:58:10:93:38:94:2d:f9:84:23:70:85:8c:2c:
8d:21:f3:f8:48:55:9d:58:53:46:b3:a7:a7:7e:b7:f0:4a:89:
8d:b2:d1:d9:30:e3:59:10:fd:23:12:da:c9:77:df:63:1f:75:
d8:b2:65:65:99:30:6a:02:79:ca:25:bb:52:53:20:3a:71:f0:
59:b3:37:f9:bf:48:0a:39:da:41:19:f3:de:b3:64:f9:52:ac:
bb:ce:fe:9f:64:0f:8e:53:0a:67:23:ec:fa:8b:2e:b1:ab:0a:
40:95:25:11:20:18:d6:a8:10:ed:c8:30:3e:dc:70:3b:68:17:
58:58:03:e5:c8:bc:04:3f:55:3b:11:dd:d8:60:b9:c0:f5:42:
36:ae:c7:d0:02:23:e7:df:e7:99:41:6e:47:a5:f7:cd:ab:7c:
6c:11:45:fc:c5:ea:f0:14:28:ef:b6:46:f4:03:80:c6:39:33:
35:f3:6b:14:2f:82:c9:8f:16:35:bd:63:35:92:cb:fa:7a:29:
e1:50:39:0c:ca:47:7e:ba:29:78:f6:a0:55:f7:e4:55:b6:13:
5a:30:4a:22:d4:c3:ea:f1:88:8b:f0:78:6c:ac:ed:ee:a0:9c:
c3:2f:17:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXuyT5Em12XG5ymfR1L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYwNDE3MDQwMTA1WhcNMjYwNDE4MDQwMTA1WjAzMTEwLwYDVQQD
EygzOGIzMTYzNGFkOTdmYmE2NjA3YTc3YWZmODRhNjVkNjQzOGQ3OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxm0MuiWfsAmHDuT5Tlm4pHWuwPo
OA/9+4bW2iDELUqa7V3Q5Jx1GQAJgjnniwp5nvh33H8E7Yjd1O3kQ99kAXUcKMt0
4xJ/kAXZNjuz1NgXiR/rl+ihop4+U6V9VI12O4NT1fR3V30Kie3o+tanb9ZtQvo1
WdVk5T0kIKa2qKYk7If77KgB4378rd3rTQ3FuzmPfutLvFn6YZBhDRRBlxDhDvw/
eCAMT1xYYyhRFNtVTF+CkBcfgv+1dy/FCAAY1oufGMU5PtZ5jJZZGHjuGyVXxMQS
8iFkx18wqkMIqp1/3rndY958BSnV1g7178DrKXmtccSvPljHZEM6XpvyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDizFjStl/umYHp3r/hKZdZDjXjcMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz4jo/wz
QGpdu7c17p3qUQaPAOTyvupYEJM4lC35hCNwhYwsjSHz+EhVnVhTRrOnp3638EqJ
jbLR2TDjWRD9IxLayXffYx912LJlZZkwagJ5yiW7UlMgOnHwWbM3+b9ICjnaQRnz
3rNk+VKsu87+n2QPjlMKZyPs+osusasKQJUlESAY1qgQ7cgwPtxwO2gXWFgD5ci8
BD9VOxHd2GC5wPVCNq7H0AIj59/nmUFuR6X3zat8bBFF/MXq8BQo77ZG9AOAxjkz
NfNrFC+CyY8WNb1jNZLL+nop4VA5DMpHfropePagVffkVbYTWjBKItTD6vGIi/B4
bKzt7qCcwy8XEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:02 2026 by rpki-client