Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: 4rswwDkDkHOL3fsnlBSSL3QPg15BtZbuWjfxb0MIKTE=
Subject key identifier: F6:A5:7A:6F:D2:61:FA:4F:19:60:49:0E:28:32:A1:94:19:01:C8:DB
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019F9391F49E83257C90E929162480D30BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 12D6
Signing time: Fri 24 Jul 2026 10:00:43 +0000
Manifest this update: Fri 24 Jul 2026 10:00:43 +0000
Manifest next update: Sat 25 Jul 2026 10:00:43 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: +fbxY3p/VXq4Au4JSDQKCjHH6RdMWiEP7zUU2aYjTko=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f4:9e:83:25:7c:90:e9:29:16:24:80:d3:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jul 24 10:00:43 2026 GMT
Not After : Jul 25 10:00:43 2026 GMT
Subject: CN=f6a57a6fd261fa4f1960490e2832a1941901c8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:85:22:32:46:e2:a1:f8:e3:b3:57:fc:af:
e7:20:c2:2d:1d:52:c4:e5:a5:4b:58:36:df:ca:7f:
ba:d7:6b:26:36:48:13:f9:45:0e:87:26:23:7d:cf:
e9:13:15:aa:40:54:88:85:eb:e5:7d:c0:e8:96:8f:
78:1a:80:a7:f7:36:f6:11:f1:be:9d:8b:bd:df:cf:
9b:b0:e3:57:3f:84:9d:f8:eb:67:a4:69:34:54:a0:
79:63:4d:ce:21:42:c9:86:b0:e3:d5:a1:db:c7:4f:
8d:65:0a:f2:f4:4d:5d:2a:a6:a4:9c:50:37:32:17:
0f:07:72:66:c8:bd:35:2e:41:01:a6:22:6e:13:c6:
df:dc:fa:2e:44:7f:a0:a9:17:8a:a7:84:4e:0d:3f:
9c:5c:4e:be:f1:7c:82:93:83:bf:64:58:3a:65:cf:
1a:dc:ac:e0:e3:2c:0e:a6:ae:d7:13:fb:65:3c:79:
ad:44:ae:dc:5c:43:65:5f:b9:cd:25:26:6d:00:60:
7b:ba:1f:34:4e:aa:de:0d:54:85:55:a0:6e:e8:1f:
fe:2c:9e:f9:c4:c3:87:e3:4d:7c:2b:72:24:fa:7c:
0a:20:22:f8:45:0a:e8:47:4a:10:e4:fc:47:6f:9f:
7b:2b:4e:76:7d:60:7b:d5:04:43:ff:21:98:30:4a:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:7A:6F:D2:61:FA:4F:19:60:49:0E:28:32:A1:94:19:01:C8:DB
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0a:69:08:b8:7b:01:4f:3c:a0:67:5d:51:08:f0:fd:21:78:
19:37:90:cf:00:f1:8c:7a:13:64:23:34:ae:49:7c:70:33:0b:
0d:7e:6f:35:07:ac:c1:6c:01:40:72:3c:ea:cb:9b:9b:7d:bf:
b5:65:9b:f0:c2:1d:07:23:c9:9a:33:b8:76:18:71:1d:c9:12:
55:b0:4a:c3:6e:e3:6b:ec:34:8b:34:c6:79:c0:f7:d0:7a:10:
0b:4a:80:ee:3a:52:e2:a6:87:3a:61:f7:78:d4:96:13:8e:a2:
02:46:34:e5:09:ff:22:39:c1:99:1b:fb:c9:60:53:d7:7f:88:
90:14:e0:7a:df:32:d5:bd:a9:64:44:0e:52:e6:a2:e9:9e:43:
ed:cd:c5:36:19:d0:ec:1d:1d:7d:1b:40:c9:e5:7e:23:4c:ec:
84:ef:6d:70:58:f3:a4:a9:7b:cb:42:e9:1f:41:3c:9b:a8:44:
07:f3:59:a2:0e:f6:a4:e7:71:92:b8:0e:2b:d3:ca:6c:8b:b1:
96:34:5a:e0:d3:62:27:e6:85:44:56:75:82:88:42:a6:46:c6:
89:8c:cf:8b:a0:90:c7:a0:c9:88:72:6a:92:31:3b:3b:4a:30:
59:50:34:6e:cc:c9:d9:e4:90:ff:7e:77:a5:f0:3d:c7:72:3a:
ea:bf:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:11 2026 by rpki-client