Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: 1nsQge+2SyVFKMh2VafLR4rCnJUHbGTPzSDu4MJALMI=
Subject key identifier: 8E:1F:2D:8E:80:81:49:1C:4D:C7:6E:8B:09:66:79:49:90:72:1E:C8
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 01A0EAE5231BAF5631229B5D23827175957E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 0A5F
Signing time: Tue 29 Sep 2026 02:01:20 +0000
Manifest this update: Tue 29 Sep 2026 02:01:20 +0000
Manifest next update: Wed 30 Sep 2026 02:01:20 +0000
Files and hashes: 1: O-5YbSnsrHJq6CYXfN6lS0bXHtU.roa (hash: m5fRexPWtu8YYbrVFGnW8/Uexvsppoei1HeT805HRHA=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: dgIZpxHmouaONFMJf3P/NkUrn7eum3y40l16B8UIOBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:23:1b:af:56:31:22:9b:5d:23:82:71:75:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Sep 29 02:01:20 2026 GMT
Not After : Sep 30 02:01:20 2026 GMT
Subject: CN=8e1f2d8e8081491c4dc76e8b0966794990721ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:46:6a:79:bb:71:e4:bd:93:fd:cd:41:21:
cb:ce:38:dc:dc:6a:2f:bf:21:34:f5:6a:a7:46:70:
31:74:d4:d4:8c:7c:d0:15:cf:36:fc:a0:b5:b6:42:
4f:80:1a:a2:85:d8:19:c5:02:85:05:a7:fb:0b:2c:
49:1b:df:e3:6e:1a:75:b4:91:54:bc:ee:2a:04:39:
b3:a7:8c:9a:01:6a:1e:93:e3:f6:3e:91:7d:0f:f1:
5c:cf:a6:8e:79:33:32:cc:49:9f:e8:71:9a:de:60:
47:84:ae:c3:6e:68:8e:c8:88:e1:b8:8c:06:53:46:
d7:9b:1d:78:19:f4:d5:80:3c:51:f9:30:1b:99:06:
a3:18:1b:2f:54:5e:b5:65:38:d3:70:5d:fd:21:1d:
e2:21:f1:5a:8f:de:48:6d:a7:08:4e:7d:13:66:e5:
10:16:af:1a:d8:eb:8f:10:e3:1c:11:97:c6:ae:b9:
ec:15:db:a5:26:5d:62:ae:66:6c:b5:78:5a:d4:db:
c6:4c:2e:3b:b9:22:6c:3d:af:43:8e:90:61:98:f8:
44:1c:0f:57:ad:21:9c:17:99:77:8f:a4:07:55:59:
97:9b:f1:97:be:a8:e7:ce:ec:18:69:c4:55:40:64:
b0:dc:36:b9:20:69:2d:9c:9f:ea:2d:f9:44:b8:2f:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:2D:8E:80:81:49:1C:4D:C7:6E:8B:09:66:79:49:90:72:1E:C8
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fb:a1:d2:7e:bc:1c:71:68:c3:5b:17:a8:da:8a:ef:0e:c1:
ad:dc:7d:ac:76:63:2d:f8:1a:e1:ed:09:f8:46:5a:4c:be:fd:
be:ac:e7:af:7a:b0:01:18:e8:90:88:dd:67:90:5b:cf:23:75:
ec:3d:26:f3:1a:f4:35:82:4a:51:67:5d:52:71:f9:34:4e:7f:
fc:e3:49:f4:24:e8:c5:0e:8b:07:90:c9:96:83:ca:1b:b4:83:
4b:e0:88:6e:48:f0:e9:bd:b2:6c:a6:25:9f:0b:66:4a:c1:75:
bd:62:75:ec:d1:e4:fb:66:a2:a4:eb:1c:29:fa:0b:c7:18:39:
54:14:75:64:7b:6f:e7:79:c2:fc:fb:57:51:f5:5f:9e:3b:a7:
96:48:8c:72:7d:d8:ba:bb:58:bf:b2:71:7c:dc:e6:6b:f4:bc:
06:9d:89:0e:18:dd:07:0f:cd:48:cf:81:34:f1:02:75:2c:97:
12:16:9a:00:8b:ec:ca:30:fc:fb:d1:99:01:de:58:fd:2b:34:
bd:ee:4f:80:da:f8:ad:00:81:1b:d3:ff:7f:68:17:46:8f:2f:
11:f1:0e:40:c3:ce:be:8d:35:06:e9:48:dc:20:6c:bd:69:02:
f6:a6:b9:d2:84:b8:6b:91:84:54:71:21:a6:4e:b9:22:15:d4:
29:e9:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:26 2026 by rpki-client