Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: KxbjJsn21HbjrTnRW+qheSo/TOdMPApQRD30kZzn0wY=
Subject key identifier: B5:1D:10:28:30:6F:AB:C5:94:5F:E9:0B:78:1F:25:BD:7E:DF:80:05
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019D299717CA24A5C94BD256A1A435D5A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 1196
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: VisWz3xlz6RDGU9fO5kvkXSGs4lnbdXQbqeGsCZTCZI=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:17:ca:24:a5:c9:4b:d2:56:a1:a4:35:d5:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=b51d1028306fabc5945fe90b781f25bd7edf8005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:60:56:4d:1e:61:df:e7:ee:03:6d:45:73:
ee:f0:90:73:2d:c9:80:60:2b:05:7d:8d:f2:4c:c6:
2c:74:40:61:cf:dd:55:e2:86:a1:ad:c4:5f:69:0d:
dd:62:b3:a2:f7:b8:03:d5:9a:27:e0:6f:87:b6:a0:
9b:63:32:39:28:59:da:79:3a:d1:52:30:1b:95:b7:
06:c8:74:75:c1:9a:e4:c1:9b:6f:c6:70:54:95:a0:
bb:0a:66:38:d1:3d:fa:8a:1c:f5:6c:6b:6b:7a:b2:
8d:33:08:b9:83:bd:16:3e:ee:5c:c5:af:81:43:e3:
26:38:13:ff:21:e3:e6:ad:c2:a6:5a:3e:b5:0d:2f:
0d:d7:e9:85:3d:fa:2c:af:d0:4b:7f:df:44:76:5c:
96:29:9c:20:36:44:8c:84:77:05:24:60:00:b8:d8:
af:23:b1:10:a1:42:98:d6:c1:3a:84:10:e9:e9:ff:
0e:39:cf:43:18:b9:7b:81:39:dc:fa:ce:61:73:a6:
8f:96:bd:1e:2d:0b:cb:b3:46:50:e7:9f:2e:73:8e:
1c:75:31:94:d5:45:48:87:91:66:20:a0:07:2b:99:
30:11:05:22:de:97:49:e4:9d:1b:ab:e4:2f:25:1a:
4f:61:46:2a:e5:b3:50:3b:2d:6d:8b:d0:9a:94:8e:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:10:28:30:6F:AB:C5:94:5F:E9:0B:78:1F:25:BD:7E:DF:80:05
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:85:51:fd:2a:95:80:6c:d2:eb:68:ce:55:1f:7f:29:5b:
e0:2f:2a:79:ba:3e:8d:2a:14:36:aa:88:17:2f:52:d8:a1:b6:
a7:3d:85:8a:02:e6:0a:c5:ec:8a:6c:7f:c7:43:05:df:20:de:
43:3e:d7:24:e1:bc:a9:c3:28:ee:f6:d3:b8:2c:a8:0c:9a:fa:
c5:f6:c8:c5:c2:e3:36:eb:17:a9:0d:91:bc:bc:3a:f1:eb:a6:
2f:58:73:ea:45:75:46:a6:42:3c:7c:fe:70:49:bb:69:52:1c:
9c:36:e7:b9:5a:37:fd:0a:c1:2b:13:a7:ea:07:8a:20:a0:8e:
ce:fc:3f:05:01:8c:cc:e3:f6:6a:db:0d:d3:a1:0a:48:94:f1:
be:45:98:33:cc:c6:5e:71:65:51:03:2d:42:ba:75:6c:ab:93:
e3:39:c7:16:a6:d5:5a:a7:a9:81:f8:cc:b3:48:39:fc:6e:4b:
d4:4f:0c:96:67:c5:1f:92:7d:b0:be:fe:19:7b:6c:78:28:18:
20:f9:12:03:1e:7d:ea:88:99:0b:24:a6:52:9e:9b:87:f4:23:
7f:a1:37:67:cc:06:8e:12:78:7f:2f:ed:c5:6b:fa:fd:7f:aa:
e8:fc:4c:13:7f:91:18:d7:5c:cb:76:fe:eb:2c:24:94:c0:4d:
95:1f:3f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxfKJKXJS9JWoaQ11ab+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYwMzI2MTAwMTAwWhcNMjYwMzI3MTAwMTAwWjAzMTEwLwYDVQQD
EyhiNTFkMTAyODMwNmZhYmM1OTQ1ZmU5MGI3ODFmMjViZDdlZGY4MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQVgVk0eYd/n7gNtRXPu8JBzLcmA
YCsFfY3yTMYsdEBhz91V4oahrcRfaQ3dYrOi97gD1Zon4G+HtqCbYzI5KFnaeTrR
UjAblbcGyHR1wZrkwZtvxnBUlaC7CmY40T36ihz1bGtrerKNMwi5g70WPu5cxa+B
Q+MmOBP/IePmrcKmWj61DS8N1+mFPfosr9BLf99EdlyWKZwgNkSMhHcFJGAAuNiv
I7EQoUKY1sE6hBDp6f8OOc9DGLl7gTnc+s5hc6aPlr0eLQvLs0ZQ558uc44cdTGU
1UVIh5FmIKAHK5kwEQUi3pdJ5J0bq+QvJRpPYUYq5bNQOy1ti9CalI7ipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUdECgwb6vFlF/pC3gfJb1+34AFMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTqFUf0q
lYBs0utozlUffylb4C8qebo+jSoUNqqIFy9S2KG2pz2FigLmCsXsimx/x0MF3yDe
Qz7XJOG8qcMo7vbTuCyoDJr6xfbIxcLjNusXqQ2RvLw68eumL1hz6kV1RqZCPHz+
cEm7aVIcnDbnuVo3/QrBKxOn6geKIKCOzvw/BQGMzOP2atsN06EKSJTxvkWYM8zG
XnFlUQMtQrp1bKuT4znHFqbVWqepgfjMs0g5/G5L1E8MlmfFH5J9sL7+GXtseCgY
IPkSAx596oiZCySmUp6bh/Qjf6E3Z8wGjhJ4fy/txWv6/X+q6PxME3+RGNdcy3b+
6ywklMBNlR8/+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:38 2026 by rpki-client