Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: usbHqS4wz883sBc+cX+f9/0Od1XsS90IrHJZAYK4VUU=
Subject key identifier: 4D:79:B4:41:B0:7A:76:F8:7E:A6:6A:26:E3:0A:2A:69:D1:03:77:16
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01A0F6E93A6A89F43A240CFDEB891F4CF781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 138E
Signing time: Thu 01 Oct 2026 10:01:14 +0000
Manifest this update: Thu 01 Oct 2026 10:01:14 +0000
Manifest next update: Fri 02 Oct 2026 10:01:14 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: lPL7Rl9IAo2QpcPRIyopaOg8yU5hheXmkEjmCGcgPMA=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:3a:6a:89:f4:3a:24:0c:fd:eb:89:1f:4c:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Oct 1 10:01:14 2026 GMT
Not After : Oct 2 10:01:14 2026 GMT
Subject: CN=4d79b441b07a76f87ea66a26e30a2a69d1037716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:37:8c:5c:75:4a:e6:cf:cf:06:5a:01:13:
e7:44:c2:b8:cb:26:25:a6:a0:1f:60:8c:45:6e:0a:
75:12:ed:bb:1c:ae:74:36:b1:ab:3c:24:a7:ae:bc:
93:73:08:9f:01:99:d0:73:eb:6c:ea:da:d9:36:f4:
61:b0:c8:7d:fa:ba:1b:30:3a:95:dc:9a:5d:1d:a8:
c1:4e:20:e1:3e:f2:81:61:89:2a:17:b7:f6:98:9b:
d3:34:07:88:30:17:dd:f8:39:9e:34:5d:bb:ab:c6:
46:dc:3c:1f:9a:4b:90:0e:1a:9b:b9:7b:d0:9d:87:
03:85:59:c0:6f:90:b9:35:84:76:d0:cb:04:26:5e:
26:d9:63:ab:3f:15:f1:30:69:df:ef:c5:b3:be:e7:
46:55:03:d7:90:7c:10:33:02:31:62:dc:6f:10:83:
6a:4c:07:8a:02:6d:dd:c8:1f:69:a7:8c:4b:ea:e8:
da:49:ad:e8:73:09:4c:53:b6:28:f1:39:ba:3e:16:
32:f5:57:ed:99:55:79:5d:be:75:19:4c:e1:1f:1f:
80:96:30:9d:a7:6f:0d:21:81:f1:fe:d5:3e:80:25:
c2:99:d8:8c:bc:34:1b:4f:0f:e6:a7:b1:0e:14:d0:
e8:e8:f4:e8:cb:03:24:2d:44:96:ea:6f:1b:c4:59:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:B4:41:B0:7A:76:F8:7E:A6:6A:26:E3:0A:2A:69:D1:03:77:16
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:46:0d:e2:2a:e3:d4:f1:75:bd:f1:f3:4d:23:29:bb:72:
05:a8:96:e2:85:a7:ca:5c:99:9b:27:43:5c:9f:b3:ff:1e:85:
4d:43:21:ff:ff:8b:9c:4a:ff:c8:da:70:bd:58:ed:a4:e4:ed:
40:08:0e:5a:51:60:93:5f:7f:1f:7d:7f:d7:05:ee:21:6e:6e:
af:cd:9b:9b:0f:a5:fd:5e:11:6b:97:dd:87:49:ec:5a:ff:8d:
49:e5:98:99:30:d2:95:a9:13:95:f5:0f:82:dc:e0:78:ee:0e:
35:ca:a6:8d:13:b2:5f:ce:80:ce:84:df:e3:35:46:5d:37:4b:
46:c9:bc:6c:58:bc:b2:68:0f:da:04:58:42:10:c1:55:70:e3:
7b:e8:8c:76:70:e4:01:7f:fc:4b:01:93:57:f3:51:2c:fe:14:
78:d3:c7:c1:6f:d6:49:98:9b:4f:1c:9e:95:88:f6:a1:5e:d7:
ff:71:90:d7:09:26:9c:59:75:db:1d:2b:8a:b9:9b:8a:73:4e:
0f:80:fc:9e:dd:52:ba:6d:d2:0c:7f:d3:d4:ba:8e:10:23:76:
95:e6:49:dc:a4:25:dc:e3:11:c1:be:88:37:dd:af:ec:70:fd:
f2:02:f6:74:77:a5:f0:fd:35:2b:bc:46:fc:2c:68:7b:8c:fd:
a6:da:ca:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26TpqifQ6JAz964kfTPeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYxMDAxMTAwMTE0WhcNMjYxMDAyMTAwMTE0WjAzMTEwLwYDVQQD
Eyg0ZDc5YjQ0MWIwN2E3NmY4N2VhNjZhMjZlMzBhMmE2OWQxMDM3NzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVg3jFx1SubPzwZaARPnRMK4yyYl
pqAfYIxFbgp1Eu27HK50NrGrPCSnrryTcwifAZnQc+ts6trZNvRhsMh9+robMDqV
3JpdHajBTiDhPvKBYYkqF7f2mJvTNAeIMBfd+DmeNF27q8ZG3DwfmkuQDhqbuXvQ
nYcDhVnAb5C5NYR20MsEJl4m2WOrPxXxMGnf78WzvudGVQPXkHwQMwIxYtxvEINq
TAeKAm3dyB9pp4xL6ujaSa3ocwlMU7Yo8Tm6PhYy9VftmVV5Xb51GUzhHx+AljCd
p28NIYHx/tU+gCXCmdiMvDQbTw/mp7EOFNDo6PToywMkLUSW6m8bxFnOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE15tEGwenb4fqZqJuMKKmnRA3cWMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLZGDeIq
49Txdb3x800jKbtyBaiW4oWnylyZmydDXJ+z/x6FTUMh//+LnEr/yNpwvVjtpOTt
QAgOWlFgk19/H31/1wXuIW5ur82bmw+l/V4Ra5fdh0nsWv+NSeWYmTDSlakTlfUP
gtzgeO4ONcqmjROyX86AzoTf4zVGXTdLRsm8bFi8smgP2gRYQhDBVXDje+iMdnDk
AX/8SwGTV/NRLP4UeNPHwW/WSZibTxyelYj2oV7X/3GQ1wkmnFl12x0rirmbinNO
D4D8nt1Sum3SDH/T1LqOECN2leZJ3KQl3OMRwb6IN92v7HD98gL2dHel8P01K7xG
/Cxoe4z9ptrKBw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:36:28 2026 by rpki-client