Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: NCpVGLkjMUNxfQ0EbklY2r9svqNxH9K7pblkUCUkUwQ=
Subject key identifier: 5D:D9:0C:29:8E:20:CB:A8:C4:71:49:25:D1:39:78:AF:14:0C:51:4B
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019CAAC5FBB17C164BCF27BEB27512B4FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0B80
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: djY2z/B/3E9GTKOoZMb+RtFjXFB4o4qeB4jrKPEdBr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fb:b1:7c:16:4b:cf:27:be:b2:75:12:b4:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=5dd90c298e20cba8c4714925d13978af140c514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:65:67:f5:98:35:52:7b:5e:c3:d4:0d:fd:
2a:fc:33:a0:74:3e:8a:6a:db:d2:da:8e:fe:8b:6b:
25:4f:16:c6:01:7a:fe:74:43:b0:72:a8:9f:15:72:
01:64:91:e6:ab:0d:99:9b:aa:ae:96:30:f2:cc:bf:
59:63:03:2f:06:db:6d:c6:46:f2:40:ae:13:38:58:
4b:95:c2:42:95:40:f3:8a:cd:69:41:6d:f6:09:21:
61:5a:b8:1f:5c:c0:12:67:26:9f:07:0b:d1:b3:94:
4a:e3:2f:c4:72:e2:d9:b8:0c:f2:0a:19:49:b0:68:
b5:2c:a9:03:9b:6b:fd:75:36:be:fb:4d:e7:9c:80:
d3:ff:d3:8f:d5:fe:03:a2:1f:8f:fb:29:01:fe:f3:
43:9d:22:4b:ac:97:ba:28:7e:b3:f1:a1:3a:84:02:
15:f0:55:7d:d1:f8:eb:44:d5:f8:dd:24:72:37:02:
38:ac:97:27:38:bb:aa:65:f0:6b:3d:4b:31:54:f2:
82:4d:d8:05:6d:05:b7:b6:0b:b8:54:33:55:0b:dc:
aa:ae:76:c9:6f:cf:77:e9:a0:eb:eb:cc:a8:8a:33:
cf:0e:2b:23:47:f5:e9:95:26:86:97:40:15:fb:aa:
92:bd:56:f0:a2:a5:f8:b2:46:d8:f5:96:0e:dc:9f:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:0C:29:8E:20:CB:A8:C4:71:49:25:D1:39:78:AF:14:0C:51:4B
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:d2:5a:6c:64:48:48:5b:6b:37:0a:d4:6c:9e:44:47:2f:
22:75:77:d3:54:d1:fe:e3:76:48:79:38:08:0b:81:b4:7e:db:
b8:5b:e0:0d:dc:64:dc:8f:d5:ca:35:57:9f:47:0d:5c:16:2e:
c5:6f:07:dd:5c:b3:d9:28:52:fe:b8:1d:a6:32:49:5a:4a:e0:
72:60:8d:a1:7f:f6:77:00:7a:67:ce:31:f9:85:76:49:9e:57:
8e:fe:d2:8d:f7:3f:2f:ba:db:0c:9e:0b:71:6c:7b:03:c0:9f:
42:9c:06:a3:80:58:3f:3e:87:84:7e:94:3e:d8:c0:4d:80:d6:
d4:68:53:28:06:18:df:99:7d:8c:95:be:33:9b:e7:4d:19:f6:
4e:90:4d:5c:30:a8:a0:22:df:72:03:53:ad:de:98:35:b9:a2:
19:2e:50:44:3c:2e:7a:c3:f9:75:36:1c:c5:3c:f1:e8:72:bd:
a0:21:d4:36:4d:da:38:6b:5c:7d:ec:87:e0:79:d0:bf:56:15:
9e:b6:2d:80:46:3d:cf:16:f9:c4:1c:17:98:58:23:6d:d6:cb:
cb:f1:b1:39:b3:31:c6:6a:17:be:c3:cd:70:42:b0:13:bd:a4:
54:94:a3:44:eb:fe:f6:6e:e0:4a:8e:ba:2e:e1:99:e5:48:12:
8e:73:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:46 2026 by rpki-client