Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: OoaN+nefp5w6EDFrOVJ+1Zd4p8jD3OAwCfn5CXNv/bA=
Subject key identifier: E8:E2:C1:0D:8D:5D:97:31:56:44:4D:58:1D:4C:78:78:53:99:18:15
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019EBF23EC33FD1376A7E707B1240DDABBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 1268
Signing time: Sat 13 Jun 2026 04:01:02 +0000
Manifest this update: Sat 13 Jun 2026 04:01:02 +0000
Manifest next update: Sun 14 Jun 2026 04:01:02 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: OKP1S3SXA46y3TgMERNo2dr7NiXYWchlB8afBSWmDHs=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:ec:33:fd:13:76:a7:e7:07:b1:24:0d:da:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jun 13 04:01:02 2026 GMT
Not After : Jun 14 04:01:02 2026 GMT
Subject: CN=e8e2c10d8d5d973156444d581d4c787853991815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:ed:16:41:bc:14:26:6c:6c:15:27:63:eb:
54:85:64:6f:35:90:86:71:ed:c9:a6:63:7d:25:a0:
0b:15:59:c3:6c:ad:28:f7:4e:3f:17:10:01:1e:e8:
e7:6d:16:ca:e2:b0:d5:23:55:4b:ff:30:02:fc:ea:
92:1c:77:7b:39:52:6b:dd:8d:b0:80:78:4c:c3:44:
23:5e:17:34:ad:d6:b7:1f:5c:92:cb:90:fe:d7:be:
31:c9:e6:70:4e:12:9c:40:29:64:10:4c:6d:60:85:
3c:12:6b:46:d5:db:31:aa:f2:98:30:fb:c1:d9:0f:
2c:b2:32:07:18:7e:69:8d:08:1e:e7:6b:46:54:37:
d9:a9:d4:9f:12:98:61:38:9e:26:ac:b8:98:33:c3:
ea:f9:29:e7:1b:22:6d:3c:df:ea:13:ef:b0:25:25:
57:6d:a6:2f:01:97:37:34:fb:cd:f5:b7:d9:ec:cd:
60:d5:88:be:fa:2a:b9:c6:11:43:81:d4:74:35:df:
cf:fe:84:3f:6a:be:b6:c1:16:17:0e:56:b0:3c:b5:
99:2e:0e:5d:10:de:cf:12:41:b3:04:35:20:16:83:
96:ac:50:02:00:f5:1c:65:b1:e7:24:e3:f5:b4:7e:
77:53:37:e3:8e:06:bb:ae:d5:73:29:f0:23:10:2f:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:C1:0D:8D:5D:97:31:56:44:4D:58:1D:4C:78:78:53:99:18:15
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c0:b3:5c:ca:aa:c3:55:c0:66:51:9a:1e:1a:d9:87:b2:be:
92:f2:9b:96:58:f4:24:17:24:2c:f4:af:b9:62:f4:66:5c:1a:
84:4e:13:e9:c2:83:bd:80:12:29:82:21:1c:f4:d4:7d:a1:e8:
ab:e1:e3:20:e3:e6:b1:8d:21:d6:ed:f1:8b:e7:aa:14:c0:27:
88:14:b0:7f:45:a1:38:6e:9f:82:96:b5:ef:a6:d0:ef:2c:db:
fa:f1:b8:c8:10:ef:94:0b:e7:5d:37:70:dd:f2:6e:ab:46:c2:
3d:3c:18:51:f3:71:b5:be:f8:1d:26:35:b7:9e:c7:7b:01:de:
50:a8:da:c4:f3:d6:1f:cc:40:64:6c:bc:e7:89:e7:be:cd:37:
98:ef:26:d0:45:4f:12:d3:0a:1f:28:a9:8e:39:10:95:f4:81:
23:8f:29:1f:18:1f:37:40:f0:4e:09:4d:f8:7f:d3:45:47:2b:
a6:1c:02:ea:bb:87:6b:ff:ac:a8:d9:1c:3e:e9:63:57:27:25:
c1:89:44:43:a0:8f:ae:5b:fd:78:8d:6e:df:d8:4f:39:14:d1:
42:f4:24:57:87:58:f6:d6:01:14:f1:cc:21:fe:d7:e6:2c:fd:
b7:de:32:de:27:85:0f:a6:06:0a:92:00:47:a0:9a:f8:b2:dc:
63:ec:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:32 2026 by rpki-client