Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: xxEVdaGPSOtKgViTbMDKYKGTimBIkwdnpNHtWBh4JKM=
Subject key identifier: 11:86:8F:9A:28:F6:20:32:AC:09:D3:92:92:9B:27:C5:EF:FD:23:91
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019E1ED9B993E7C64822C8440052500E03E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 1215
Signing time: Wed 13 May 2026 01:00:45 +0000
Manifest this update: Wed 13 May 2026 01:00:45 +0000
Manifest next update: Thu 14 May 2026 01:00:45 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 8l5XyE/ddgg2xloOOOjT8J8PZePdh2x7VstIXqf4BeI=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b9:93:e7:c6:48:22:c8:44:00:52:50:0e:03:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: May 13 01:00:45 2026 GMT
Not After : May 14 01:00:45 2026 GMT
Subject: CN=11868f9a28f62032ac09d392929b27c5effd2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:4b:42:4d:7e:ea:ec:b3:5e:09:76:0f:c2:
4e:21:a5:b6:dc:9a:c1:ac:9a:31:1e:80:3f:4f:fb:
d6:2b:10:04:32:de:e6:c2:d5:b8:4b:3c:c6:89:68:
d9:36:01:2b:62:c0:19:49:e3:b3:bd:34:6a:aa:f2:
3b:42:eb:21:6f:a8:10:b6:b2:b4:f4:e0:a6:8a:3a:
5c:98:ce:1a:9b:15:e0:be:37:0d:a3:8b:2a:7a:f8:
17:1f:60:5c:13:ec:80:57:30:00:05:95:03:3d:48:
19:cc:cd:96:99:40:4b:09:bc:c3:aa:e8:53:3a:de:
c6:fb:d5:43:b2:0e:33:3a:45:ed:cf:4c:4f:e9:72:
a8:49:56:41:6a:5a:e5:72:9e:0a:6b:57:07:36:f3:
ee:3c:ca:7d:bf:db:48:24:e3:ec:75:65:c3:ce:a2:
c9:1d:15:25:8f:59:2e:be:a9:c2:a1:a2:36:70:9f:
d1:da:33:bc:d2:58:1a:56:d5:eb:83:ec:8a:b5:52:
14:78:13:6a:eb:8a:01:cc:31:e0:5f:16:16:c0:1e:
a4:a4:f5:c2:c7:c5:7b:80:8f:2b:cd:f8:24:5d:82:
9f:b7:48:70:bd:82:d9:02:1e:b1:33:8b:e6:b8:e8:
55:6c:aa:57:ff:bf:8a:99:ef:2a:16:f0:bd:7e:32:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:8F:9A:28:F6:20:32:AC:09:D3:92:92:9B:27:C5:EF:FD:23:91
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:11:57:20:ec:01:f3:c3:a6:22:72:16:1f:42:2c:ad:b9:
a2:96:5e:c5:d2:c1:88:ed:75:c8:16:be:a2:e3:d6:10:87:69:
cb:5d:fa:75:99:83:a2:33:89:1c:1f:4c:d9:b1:7a:89:62:33:
cb:a1:ba:b5:1c:77:68:aa:87:17:0a:d1:05:53:5f:b2:03:93:
21:43:e1:a0:80:f1:b1:d2:66:95:d1:c8:12:e1:e0:d5:0a:8e:
18:64:3b:50:25:47:dc:60:4b:8a:34:64:92:ae:7c:f1:0e:82:
75:39:2d:2e:dc:cd:bf:33:c6:f8:2a:25:93:22:74:98:92:3b:
d0:55:97:97:a6:91:ba:98:44:e0:88:da:67:86:4d:cb:04:ba:
d5:ef:a8:bd:1b:e8:c2:f5:a5:ef:35:68:0a:64:7f:ad:58:c6:
29:86:5b:5a:ae:40:0f:62:45:9c:c1:27:40:6a:27:26:d8:ee:
1a:e2:e7:80:d2:d5:f9:7c:91:33:57:ab:61:67:69:6d:ca:cd:
29:18:fa:bc:3f:e1:4c:88:e3:ac:17:54:41:7b:1d:7f:09:85:
04:39:bb:27:ee:ef:b0:d0:b7:fa:d0:d4:45:c2:36:11:68:a7:
a2:bc:15:81:45:db:0b:cc:c3:b5:71:3e:ee:51:70:e0:5e:c7:
d3:9c:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:04 2026 by rpki-client