Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: KQM14D2SiBiOxjQTXMVFa7kae26pv6WGoNTqbyzxLwA=
Subject key identifier: C5:7A:B9:45:77:F4:3F:00:03:64:AC:DC:FC:75:BD:E5:88:97:14:53
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019CAC104554A3BA96A859360EF4377AE3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 1155
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: fc0wqe0nvJgTwz69svLZTZBGZli9Q/ykOQDhGKvEFPE=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:45:54:a3:ba:96:a8:59:36:0e:f4:37:7a:e3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=c57ab94577f43f000364acdcfc75bde588971453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:06:02:70:72:14:96:a1:41:e2:25:2a:79:
39:f2:05:8c:85:3d:8f:03:94:76:2d:f3:a5:12:5d:
43:ff:ed:01:ea:d7:47:b2:99:7c:ba:ec:55:a5:fe:
8a:f9:06:0d:00:1d:97:20:53:34:1c:8c:79:ac:f0:
ad:f7:83:b2:9b:f7:a1:ad:15:61:15:a0:70:70:c1:
b2:f0:55:9a:28:dc:53:c6:4a:a1:dc:7a:b6:46:5b:
fb:36:d6:0e:fe:e3:0c:b5:21:d2:df:2c:bf:bc:0a:
73:d1:1c:b5:dc:6e:c2:e5:0d:36:05:2f:a5:dc:35:
c9:8a:3f:bd:95:73:22:29:b6:ea:81:09:2e:40:0e:
33:b1:08:24:d2:98:51:64:54:67:1d:f9:2e:48:ac:
89:d2:d5:80:8c:15:8d:59:26:c9:de:73:a6:b1:c3:
d9:7b:37:6e:8b:88:5c:04:58:d6:ac:db:d2:08:d5:
8d:59:7a:a9:ba:71:87:1d:a5:be:e2:59:22:60:13:
a1:af:cf:6c:17:c1:06:f9:d3:bc:5e:91:d7:0b:0d:
06:1b:3d:2a:19:4a:a0:95:6d:4b:e1:93:18:80:e5:
24:1f:d6:b3:26:25:86:0d:91:d3:8f:69:31:ad:57:
ed:c7:8b:f0:8e:15:de:f1:3d:5f:81:f8:d7:fb:3f:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:B9:45:77:F4:3F:00:03:64:AC:DC:FC:75:BD:E5:88:97:14:53
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d9:3d:44:61:f6:67:c9:aa:e6:c0:97:90:87:69:2a:aa:67:
4d:90:33:97:64:58:85:c8:2f:14:d1:76:38:5a:49:4f:24:8d:
21:de:28:ea:ac:da:22:b2:28:6f:c8:e2:b3:83:bb:a8:82:75:
1b:ff:f4:82:4e:01:27:64:c2:fa:39:87:12:e8:02:c7:1c:7c:
d2:42:82:ce:5b:71:1f:c0:0b:f1:5e:f3:01:c1:f6:f2:78:b4:
f0:01:fe:72:d3:2f:68:42:6c:e0:48:a8:8d:dc:6c:69:24:ba:
9d:c7:bd:3f:28:d1:0d:7d:e6:5e:61:e5:b5:e9:83:07:3b:35:
bc:df:11:39:08:bd:49:d7:40:3e:1d:c0:8a:83:4f:cd:49:91:
4a:5a:3a:84:06:c9:97:84:8d:8a:88:01:6b:b9:fe:31:85:f7:
ad:cc:02:9b:41:43:98:23:09:0b:26:fe:74:1f:3d:20:99:db:
32:e1:3b:5b:ce:58:d9:33:7f:44:33:9a:18:ea:ee:98:3c:7b:
b3:ed:80:30:35:18:08:4a:e2:01:7a:51:80:0b:fe:71:e3:b3:
3b:15:35:e6:b4:ce:f5:87:a4:a4:5f:d3:b0:a9:ee:90:3d:dc:
c4:1c:0d:7f:2c:52:2c:d2:71:d8:7f:f4:71:b2:91:11:69:d1:
f8:ad:62:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEEVUo7qWqFk2DvQ3euPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYwMzAyMDEwMTEzWhcNMjYwMzAzMDEwMTEzWjAzMTEwLwYDVQQD
EyhjNTdhYjk0NTc3ZjQzZjAwMDM2NGFjZGNmYzc1YmRlNTg4OTcxNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0egGAnByFJahQeIlKnk58gWMhT2P
A5R2LfOlEl1D/+0B6tdHspl8uuxVpf6K+QYNAB2XIFM0HIx5rPCt94Oym/ehrRVh
FaBwcMGy8FWaKNxTxkqh3Hq2Rlv7NtYO/uMMtSHS3yy/vApz0Ry13G7C5Q02BS+l
3DXJij+9lXMiKbbqgQkuQA4zsQgk0phRZFRnHfkuSKyJ0tWAjBWNWSbJ3nOmscPZ
ezdui4hcBFjWrNvSCNWNWXqpunGHHaW+4lkiYBOhr89sF8EG+dO8XpHXCw0GGz0q
GUqglW1L4ZMYgOUkH9azJiWGDZHTj2kxrVftx4vwjhXe8T1fgfjX+z9H5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV6uUV39D8AA2Ss3Px1veWIlxRTMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNk9RGH2
Z8mq5sCXkIdpKqpnTZAzl2RYhcgvFNF2OFpJTySNId4o6qzaIrIob8jis4O7qIJ1
G//0gk4BJ2TC+jmHEugCxxx80kKCzltxH8AL8V7zAcH28ni08AH+ctMvaEJs4Eio
jdxsaSS6nce9PyjRDX3mXmHltemDBzs1vN8ROQi9SddAPh3AioNPzUmRSlo6hAbJ
l4SNiogBa7n+MYX3rcwCm0FDmCMJCyb+dB89IJnbMuE7W85Y2TN/RDOaGOrumDx7
s+2AMDUYCEriAXpRgAv+ceOzOxU15rTO9YekpF/TsKnukD3cxBwNfyxSLNJx2H/0
cbKREWnR+K1i1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:56 2026 by rpki-client