Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: QHLDwAVAK+3mqyfnW5b4j1EdJHs1lke+ucdg/DDCnS4=
Subject key identifier: 60:02:11:78:6E:D1:38:6B:70:90:B4:81:DC:41:6F:AD:71:9A:46:97
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019D9A3F098E22F06791C395BA4AAEDD3E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0BFC
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: Rac5N2rZioRZLcMoypc4cIKhHLEKTmjNRvZrlfUsTq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:09:8e:22:f0:67:91:c3:95:ba:4a:ae:dd:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=600211786ed1386b7090b481dc416fad719a4697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:43:bc:0a:6d:22:8a:8e:d2:da:b9:4e:ac:
6a:9a:3f:b9:fe:26:24:66:b8:5c:b3:a9:47:f2:39:
84:95:bb:ad:8b:d9:c5:6a:c1:42:4f:8e:84:cf:aa:
e2:02:ca:a4:e7:c3:44:79:06:b8:3b:f5:bb:73:e1:
40:5a:5d:96:53:8d:60:5c:d0:7a:0e:a3:82:a1:df:
85:88:a6:c1:e3:73:63:09:98:52:6f:e7:6f:0d:22:
23:1e:97:90:57:12:66:d0:03:2e:e5:82:2e:67:b0:
9c:e5:54:3a:34:b0:42:a8:b2:47:20:3d:48:93:f9:
e0:10:84:c7:7a:46:05:24:4b:80:1f:eb:5e:d8:24:
50:ee:dd:f7:21:64:e3:6d:ee:eb:8c:2d:29:a5:91:
f2:03:2d:f2:72:5a:c5:e4:e0:d5:7d:fa:3a:d1:15:
3f:c9:61:cd:6c:b1:d3:fa:d2:da:e7:9f:98:19:cb:
f6:b0:eb:40:ca:c1:68:6b:fa:e4:90:8c:9b:5a:51:
29:c8:6c:9c:47:4e:db:41:80:ae:fb:6d:85:92:fd:
17:0a:de:ae:aa:4c:b9:36:7c:e3:0b:6f:14:76:67:
bc:4c:ae:a1:3f:f3:c2:50:66:f9:2e:b7:5b:b2:fa:
93:69:45:eb:38:f2:a5:4c:18:64:e8:8e:f6:ac:09:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:11:78:6E:D1:38:6B:70:90:B4:81:DC:41:6F:AD:71:9A:46:97
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:c9:a6:d6:e6:65:86:cb:6f:f7:7c:f4:94:db:1f:70:df:
c1:ee:34:f7:aa:f0:93:15:bb:f2:e9:20:05:58:d4:a0:48:32:
4b:30:d7:f8:c6:e6:0e:8c:d2:a1:19:b3:25:dd:08:9e:58:ce:
48:71:ce:cf:2f:a9:72:17:03:0a:e0:6c:be:b3:70:b4:6f:d9:
73:5b:a2:0a:5a:e1:3e:43:86:6a:d6:3f:a3:de:0e:33:0d:0b:
3b:93:97:7b:36:e4:d4:d0:3f:d5:41:3a:1e:bd:93:3d:7f:81:
27:22:38:d7:76:4f:a6:75:29:0e:33:c3:57:95:f2:2f:a4:47:
5c:4c:db:d6:06:68:57:55:2a:e0:a4:ae:e0:99:28:c6:42:77:
a4:a9:94:ac:c8:3e:69:08:0d:fd:00:61:af:df:c8:61:d2:15:
bd:91:c8:84:98:f9:c1:91:47:29:81:28:ef:8e:a7:40:d7:92:
8d:27:74:92:e8:0f:1a:b6:b4:df:06:cd:cb:22:bc:fb:eb:cf:
31:39:c2:66:a8:af:2b:3c:b4:f7:0a:d7:af:0b:03:d9:f2:02:
c1:6a:fc:84:1b:0b:4b:dc:3d:f0:9c:11:36:36:b0:66:93:80:
11:57:80:7b:44:01:63:f6:b8:03:1d:00:6e:c1:81:5b:8c:22:
bc:0b:c7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPwmOIvBnkcOVukqu3T4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjYwNDE3MDcwMTU1WhcNMjYwNDE4MDcwMTU1WjAzMTEwLwYDVQQD
Eyg2MDAyMTE3ODZlZDEzODZiNzA5MGI0ODFkYzQxNmZhZDcxOWE0Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ldDvAptIoqO0tq5Tqxqmj+5/iYk
Zrhcs6lH8jmElbuti9nFasFCT46Ez6riAsqk58NEeQa4O/W7c+FAWl2WU41gXNB6
DqOCod+FiKbB43NjCZhSb+dvDSIjHpeQVxJm0AMu5YIuZ7Cc5VQ6NLBCqLJHID1I
k/ngEITHekYFJEuAH+te2CRQ7t33IWTjbe7rjC0ppZHyAy3yclrF5ODVffo60RU/
yWHNbLHT+tLa55+YGcv2sOtAysFoa/rkkIybWlEpyGycR07bQYCu+22Fkv0XCt6u
qky5NnzjC28Udme8TK6hP/PCUGb5LrdbsvqTaUXrOPKlTBhk6I72rAnNiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGACEXhu0ThrcJC0gdxBb61xmkaXMB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjN/Jptbm
ZYbLb/d89JTbH3Dfwe4096rwkxW78ukgBVjUoEgySzDX+MbmDozSoRmzJd0InljO
SHHOzy+pchcDCuBsvrNwtG/Zc1uiClrhPkOGatY/o94OMw0LO5OXezbk1NA/1UE6
Hr2TPX+BJyI413ZPpnUpDjPDV5XyL6RHXEzb1gZoV1Uq4KSu4JkoxkJ3pKmUrMg+
aQgN/QBhr9/IYdIVvZHIhJj5wZFHKYEo746nQNeSjSd0kugPGra03wbNyyK8++vP
MTnCZqivKzy09wrXrwsD2fICwWr8hBsLS9w98JwRNjawZpOAEVeAe0QBY/a4Ax0A
bsGBW4wivAvHKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:30 2026 by rpki-client