Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: wgJAmdEXBrQO8POUwcO7V41p957JQ/ZcGBIJAlOlAbc=
Subject key identifier: 28:07:8E:AB:85:57:07:EA:DD:CC:E6:21:BF:5F:EB:87:23:55:BB:D9
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019E1D9083381266CF94039007EED9939E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0C40
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: +XcIF4XPuw7i2YOZEqJpqAGhd9toX6+So/3Xt03+RSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:83:38:12:66:cf:94:03:90:07:ee:d9:93:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=28078eab855707eaddcce621bf5feb872355bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:66:82:2e:fc:ad:53:c7:6d:7c:a5:25:60:
35:a3:99:26:80:62:47:29:8e:20:81:6d:25:cb:67:
54:6c:77:18:f5:c7:3c:31:ac:b4:32:3d:f4:bd:a3:
0d:83:8c:34:e9:cb:cb:b8:da:66:fa:3e:d9:7c:e9:
e0:c3:72:ed:6b:b6:06:3e:58:8a:06:d1:df:f9:60:
f0:5d:3c:b2:e0:1e:8c:cb:32:af:ac:bf:95:9e:1a:
6c:f6:09:26:bf:73:13:e0:a6:10:80:e7:e0:3c:ad:
db:75:8f:99:bb:54:cc:84:47:13:bf:23:3a:a9:d0:
92:9c:e1:d6:8d:8f:e5:49:cd:4c:0a:2b:2c:85:69:
5c:4e:e2:93:3a:f0:c5:79:f2:cc:53:57:56:b5:32:
3e:8a:a2:37:06:7d:08:9e:bf:4b:41:d8:c2:9f:c1:
c4:b5:23:d6:5b:39:af:23:c1:ad:0d:6b:15:1b:9f:
23:02:3d:a2:14:59:e9:63:23:45:a5:77:1b:93:7e:
7c:23:04:85:85:33:e6:3b:ce:5e:9c:54:de:73:7f:
6f:28:06:7b:05:ec:ac:1d:a4:26:e8:d8:e3:a1:f6:
d0:0f:55:53:01:69:0a:bc:ed:8d:8c:70:1c:fa:6d:
9b:06:4d:6b:b2:30:0b:0b:fc:ca:3a:83:de:38:6b:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:8E:AB:85:57:07:EA:DD:CC:E6:21:BF:5F:EB:87:23:55:BB:D9
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ed:d3:12:71:6e:b1:ea:a5:b2:38:9b:a3:ea:c5:ec:65:b1:
d3:93:36:75:29:86:b7:4d:01:39:46:c2:76:e2:4a:30:95:64:
3b:ea:48:cf:23:12:6c:04:65:00:09:e7:24:98:07:92:9a:9a:
f3:fd:c0:da:4c:aa:d1:99:4e:c4:c9:c0:59:ec:b9:de:fb:96:
b7:ad:de:8c:89:85:61:d7:a9:57:41:76:ad:fa:45:0f:ab:42:
a0:ea:50:fb:1b:69:76:a1:34:9a:ff:85:d5:90:f9:0b:8a:53:
e5:c0:60:1e:34:59:f0:cc:7b:28:9c:a8:b8:1c:59:61:c7:76:
de:2e:22:d5:39:19:cb:91:3c:65:cd:49:fd:ea:55:32:cd:76:
25:e8:de:75:4a:50:1f:44:07:62:fc:21:78:2c:30:3b:c7:40:
eb:b3:0d:c9:d6:94:71:f8:12:0f:54:4f:e1:ec:4f:ed:c6:6a:
aa:c4:3a:a4:e4:93:f2:7d:c9:e5:8b:b6:f0:15:55:ea:6d:e0:
bc:bd:db:01:27:f3:d0:4b:ef:38:1e:3e:d1:f2:d2:6d:0c:4d:
ce:e9:f0:db:e8:f7:0d:54:0a:3b:bb:d4:55:fd:fd:09:2f:42:
e8:81:a5:dc:30:0a:23:75:76:34:25:86:9f:c5:9b:5c:a9:20:
b1:70:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:59 2026 by rpki-client