Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: HEGZqyQm2CM77Lg05HDP3SJd/QKUbTqt67MJCQ2kocM=
Subject key identifier: 23:7B:4F:5E:17:89:12:E6:DD:4A:8F:71:AF:41:4D:64:12:7F:76:A8
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 01A109CB250974A57C95CCDD47DEEDAC7183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 0A6F
Signing time: Mon 05 Oct 2026 02:01:10 +0000
Manifest this update: Mon 05 Oct 2026 02:01:10 +0000
Manifest next update: Tue 06 Oct 2026 02:01:10 +0000
Files and hashes: 1: O-5YbSnsrHJq6CYXfN6lS0bXHtU.roa (hash: m5fRexPWtu8YYbrVFGnW8/Uexvsppoei1HeT805HRHA=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: 96jqix/Ds8MtJx+EZ/LgqQH/2qWaFCvQF/Ltq4eqtVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:cb:25:09:74:a5:7c:95:cc:dd:47:de:ed:ac:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Oct 5 02:01:10 2026 GMT
Not After : Oct 6 02:01:10 2026 GMT
Subject: CN=237b4f5e178912e6dd4a8f71af414d64127f76a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:98:4c:c3:1c:eb:71:75:85:3f:a8:fd:71:
2d:a8:1d:3d:67:0d:f7:c2:79:1f:35:d1:1d:69:6a:
3d:0e:af:73:5d:74:21:04:66:22:8c:af:0a:5a:16:
cf:45:5e:82:df:2b:3f:3b:de:a3:0f:c7:4c:fe:bf:
b6:eb:31:4c:8a:75:03:de:69:c7:22:9d:bb:9d:e1:
13:2e:2f:b2:f0:5f:09:cd:21:d4:79:dd:85:2b:4e:
7f:74:0a:ac:8a:c8:c2:d8:35:2c:8a:25:8a:d4:f5:
57:1e:81:8e:f4:83:92:72:d5:a3:da:ab:ac:d0:67:
13:86:f2:18:15:a3:99:75:0d:b2:ba:7d:4c:23:a8:
ef:88:d1:c0:ec:d1:10:45:ed:c6:b0:67:4c:1f:03:
63:a1:c3:a7:73:6e:5d:30:91:e6:7e:ef:be:b5:d7:
aa:79:11:b2:49:11:22:65:eb:08:ed:de:4d:33:30:
81:11:05:ea:5d:3d:5e:06:d7:af:96:0a:0a:85:3d:
f2:1b:e2:ec:9a:34:2b:b7:d4:56:03:c4:d1:4d:0a:
39:6a:6f:4e:8f:33:94:8f:bf:00:44:64:b8:2d:e7:
aa:fe:73:84:bb:c9:b7:ae:b1:5c:c1:23:da:43:22:
d8:53:96:79:d4:dc:24:b2:ba:0a:dd:04:9d:1d:1b:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:4F:5E:17:89:12:E6:DD:4A:8F:71:AF:41:4D:64:12:7F:76:A8
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:49:ec:4f:7a:42:2a:01:cd:0e:ce:1d:f0:01:fe:4b:dc:
17:a7:0d:5a:7c:45:c9:cd:5d:fd:a6:a1:14:40:a5:46:f4:38:
d4:d1:ec:52:c6:00:0c:d3:48:ee:c5:86:41:3a:5d:d3:46:b3:
d8:ff:13:7a:d5:f3:5b:67:e8:d8:28:1a:a9:13:71:cb:a7:0d:
73:2d:05:52:1c:34:e0:61:68:f1:9d:e3:91:d6:f5:fd:c3:78:
1e:74:22:bd:bb:b5:ac:3b:f4:0c:31:96:e8:69:d6:b2:4e:50:
9a:f9:63:ee:55:e0:62:c5:a8:38:3e:a9:1b:8a:5e:1d:10:3a:
22:89:93:e2:ef:0e:37:fa:4f:00:dd:2e:b3:d9:f7:a9:98:22:
c4:fe:03:11:af:27:28:a4:81:05:82:e5:3a:73:0e:15:c2:07:
ab:30:1a:10:4d:08:81:85:12:8e:f1:58:fa:21:a7:8f:61:60:
32:c9:7c:b6:18:f3:49:ae:33:2d:4a:5f:8e:55:3d:3d:3b:54:
57:b7:5e:c5:75:4b:b7:87:1d:45:d7:ce:cf:6e:f5:de:06:4b:
aa:b1:b2:6b:68:68:90:d6:f8:57:dd:0d:cd:68:de:07:5b:ae:
c7:b2:e4:33:fc:f9:a8:c7:b9:7c:a4:18:9d:c0:d3:95:54:c3:
a9:4c:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:56:06 2026 by rpki-client