Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: NSP8CvfotMcT2mTh/rdMYWcnKTv9IIZM+rFhwJ9S8Fg=
Subject key identifier: FF:00:61:5D:AF:F0:E0:85:27:4A:81:73:FC:56:88:E8:7B:D0:86:99
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01A0E39912473C32ADF91E12C17EA3E0F30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 1384
Signing time: Sun 27 Sep 2026 16:00:54 +0000
Manifest this update: Sun 27 Sep 2026 16:00:54 +0000
Manifest next update: Mon 28 Sep 2026 16:00:54 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: PSY0Q6eSfE55W6c9SnqD9wv9kbbgrbh/iu1+zpReHP4=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:12:47:3c:32:ad:f9:1e:12:c1:7e:a3:e0:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Sep 27 16:00:54 2026 GMT
Not After : Sep 28 16:00:54 2026 GMT
Subject: CN=ff00615daff0e085274a8173fc5688e87bd08699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:3a:20:20:50:df:7c:d2:20:1f:b3:98:34:
b5:ad:9f:5e:6d:00:43:12:d4:fe:a2:35:7a:3a:e0:
c6:38:57:7b:ab:22:20:6f:7a:35:a8:89:ce:86:25:
e7:a5:1c:8d:e6:d6:a5:9d:b5:9b:d8:5d:39:ff:b9:
3b:a7:dd:07:fe:c5:0c:52:58:a2:ca:65:33:56:d5:
66:9a:88:18:d5:69:99:71:33:3c:18:01:54:c3:76:
53:ff:7b:89:be:5a:c0:aa:36:7f:89:95:7d:6c:4d:
92:3b:53:86:e9:ed:70:d7:cb:08:51:12:74:9b:02:
7b:0a:ec:84:6b:5f:84:51:42:0a:ea:e3:9d:87:41:
d3:a0:cc:17:06:16:ef:f0:57:82:6c:0d:ed:e7:f5:
51:f2:bb:ec:38:bb:f6:6a:e3:1c:78:6e:00:e3:d2:
29:0c:6a:f2:46:4f:0e:f9:c5:5f:d0:c5:08:6c:98:
f7:72:ed:03:df:c0:ac:01:94:d9:00:11:72:ec:b3:
0d:89:30:e6:43:b7:d8:9d:05:a7:1e:b2:22:6a:aa:
30:ed:e5:62:d0:cd:ec:3c:d8:f4:9b:5c:03:7d:33:
ba:79:3c:1d:9a:c9:2a:1b:fc:c3:d6:d1:dc:a9:92:
8f:88:45:57:1a:c3:e6:ce:89:66:64:67:0c:dc:7b:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:61:5D:AF:F0:E0:85:27:4A:81:73:FC:56:88:E8:7B:D0:86:99
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c0:1c:e3:aa:40:54:1a:6b:16:2e:2a:74:20:6e:c8:a5:d2:
e8:9b:7d:f8:a4:97:be:04:fe:4f:75:98:59:60:25:15:b4:db:
ce:a8:8f:56:d5:8b:5e:8e:fd:78:67:64:e0:72:8b:b6:75:98:
d4:c3:38:8e:74:aa:36:6b:ce:b9:ab:53:2a:80:9c:ea:8f:b2:
3c:de:63:02:ed:15:b3:eb:85:c3:07:a7:d6:b2:7c:b1:5a:7e:
27:50:e5:a5:a6:4a:8e:62:2b:b2:92:6a:21:80:42:86:67:e0:
da:4c:98:d1:84:82:8e:08:48:22:4f:c7:2c:a9:7f:1e:ee:60:
6a:69:7c:9e:32:a1:d8:b2:73:e7:c2:ef:f3:58:e7:ae:9b:7e:
00:d2:34:45:1d:16:e2:bc:5e:c9:91:cb:b4:4f:9e:08:3f:21:
b7:cd:42:54:b1:bf:85:49:ea:0e:85:06:f3:5e:67:20:1c:be:
b4:e9:0a:d1:98:f0:a2:96:31:d4:da:84:6a:c7:46:64:52:c9:
8a:72:91:78:53:68:56:d0:6f:ce:24:89:23:26:f1:82:8f:93:
f1:b9:c7:f9:1f:46:9a:9b:bb:4d:3e:56:d6:12:bd:61:c9:18:
5f:bf:c2:68:87:8e:34:02:7b:a0:96:80:a0:11:8c:f4:2d:7d:
dc:8c:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:23:51 2026 by rpki-client