Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: TApcPP3PzGk5dlbqhdx6QURFCH1SI1PfP7xdGNozDBE=
Subject key identifier: 57:9D:7D:C0:AC:36:7E:D5:F8:D7:D9:D9:84:FF:E1:56:84:49:EC:3D
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01A0CC35730F66B418CC570ED6E856266D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0DA5
Signing time: Wed 23 Sep 2026 03:00:49 +0000
Manifest this update: Wed 23 Sep 2026 03:00:49 +0000
Manifest next update: Thu 24 Sep 2026 03:00:49 +0000
Files and hashes: 1: BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa (hash: huXifm9uXVrOkPph8092Brb0t470qTrJHwbgPqd8z4w=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: /VdyX9XzTHRo06UZ4DQDD80I4Vo8gOtlLXpTNt1XHbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:73:0f:66:b4:18:cc:57:0e:d6:e8:56:26:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Sep 23 03:00:49 2026 GMT
Not After : Sep 24 03:00:49 2026 GMT
Subject: CN=579d7dc0ac367ed5f8d7d9d984ffe1568449ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:87:8f:77:92:77:fe:da:1e:ee:10:1e:6a:
42:67:61:7b:79:e4:49:0b:ee:3c:99:b0:4a:57:66:
79:6d:cc:3a:f3:07:56:a3:0f:ee:b9:0e:77:48:0e:
a7:7f:c2:64:1d:ef:c3:b0:33:de:5f:1c:76:91:5c:
b3:71:01:25:9a:3d:8b:a8:34:2a:e2:55:79:b4:1b:
4e:35:3d:61:a3:4d:5b:b2:08:c6:be:c1:28:f9:38:
cb:4c:94:80:2d:4b:79:9c:64:48:49:9b:f7:df:d7:
ca:db:bf:52:68:f0:d3:d6:29:0f:5c:f2:d2:2c:c1:
99:e9:25:bb:7a:54:64:59:d6:75:88:44:26:d2:63:
7e:24:f3:b3:c5:cc:e2:3d:73:36:4f:c3:29:f7:cd:
b3:58:4f:2e:7e:ca:30:fc:e4:0c:3a:ee:75:9f:0f:
e3:90:34:3d:93:87:4b:07:01:7a:f7:2b:04:5d:49:
93:e1:67:34:f1:e0:3c:22:f0:a1:77:cb:17:2b:e0:
c5:14:c6:b0:6b:32:83:db:a3:0c:2f:a5:33:df:7e:
d4:6c:f9:80:cf:e8:ea:4c:ec:e2:c7:a2:bd:eb:c2:
43:63:70:c2:de:6a:8d:04:64:ba:7a:1c:76:05:4b:
ba:b7:e9:1b:8e:7e:fa:6c:82:21:6a:1c:b5:6e:7f:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:7D:C0:AC:36:7E:D5:F8:D7:D9:D9:84:FF:E1:56:84:49:EC:3D
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a1:41:fd:81:f5:f8:40:ef:87:bf:a1:93:85:4b:64:dd:76:
9a:74:6a:6e:bf:28:20:d1:7e:aa:93:d3:48:4c:d8:84:74:1d:
45:5e:fe:5e:eb:82:eb:55:9d:e1:37:fe:22:c2:89:63:00:07:
98:b6:31:de:c4:f8:88:4f:a6:4a:71:fc:e3:73:00:37:68:33:
4b:6f:90:7a:8b:44:7a:c8:f0:90:24:94:a0:11:4a:9a:4c:9d:
cc:e9:a5:b0:81:f0:be:75:6b:f8:13:c6:59:ea:91:46:28:14:
87:4d:8a:1c:f1:3e:b3:9e:74:6b:6b:3d:e8:63:c9:6e:d5:32:
e8:52:c1:47:c0:da:35:71:39:fd:c3:91:27:f5:51:55:ab:9e:
1d:37:b0:94:de:42:a6:f5:e0:ac:b7:09:11:c7:21:cc:c3:b6:
f6:35:6d:fb:74:30:f1:be:e6:41:24:ea:a3:de:31:22:e6:3c:
e4:a8:8e:d7:cb:54:7b:60:d6:64:ae:ec:4a:b2:cd:ca:8f:2a:
c8:04:22:2c:bd:32:7f:b9:94:72:d3:18:b0:d2:1b:f7:f7:2a:
08:c2:c0:21:dc:4a:22:c7:69:e3:27:d6:ff:70:e3:79:e9:dd:
85:bf:fc:44:c3:2a:cb:a0:18:d7:7e:a7:26:00:2c:d1:70:3d:
63:e5:a8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNXMPZrQYzFcO1uhWJm1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjYwOTIzMDMwMDQ5WhcNMjYwOTI0MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg1NzlkN2RjMGFjMzY3ZWQ1ZjhkN2Q5ZDk4NGZmZTE1Njg0NDllYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVSHj3eSd/7aHu4QHmpCZ2F7eeRJ
C+48mbBKV2Z5bcw68wdWow/uuQ53SA6nf8JkHe/DsDPeXxx2kVyzcQElmj2LqDQq
4lV5tBtONT1ho01bsgjGvsEo+TjLTJSALUt5nGRISZv339fK279SaPDT1ikPXPLS
LMGZ6SW7elRkWdZ1iEQm0mN+JPOzxcziPXM2T8Mp982zWE8ufsow/OQMOu51nw/j
kDQ9k4dLBwF69ysEXUmT4Wc08eA8IvChd8sXK+DFFMawazKD26MML6Uz337UbPmA
z+jqTOzix6K968JDY3DC3mqNBGS6ehx2BUu6t+kbjn76bIIhahy1bn8ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFedfcCsNn7V+NfZ2YT/4VaESew9MB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaFB/YH1
+EDvh7+hk4VLZN12mnRqbr8oINF+qpPTSEzYhHQdRV7+XuuC61Wd4Tf+IsKJYwAH
mLYx3sT4iE+mSnH843MAN2gzS2+QeotEesjwkCSUoBFKmkydzOmlsIHwvnVr+BPG
WeqRRigUh02KHPE+s550a2s96GPJbtUy6FLBR8DaNXE5/cORJ/VRVaueHTewlN5C
pvXgrLcJEcchzMO29jVt+3Qw8b7mQSTqo94xIuY85KiO18tUe2DWZK7sSrLNyo8q
yAQiLL0yf7mUctMYsNIb9/cqCMLAIdxKIsdp4yfW/3Djeendhb/8RMMqy6AY136n
JgAs0XA9Y+WoQw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:06:01 2026 by rpki-client