Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: Ts1ybW6DPh2vOb0UAQrncQ/Og1XXNm+yVRLuwLiQH4M=
Subject key identifier: BD:1C:A8:C7:C5:05:B9:30:FC:AE:94:25:62:5E:5E:65:FD:2C:CE:41
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019D284E749FDDDE96A57E6792B036F57E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0BC1
Signing time: Thu 26 Mar 2026 04:02:03 +0000
Manifest this update: Thu 26 Mar 2026 04:02:03 +0000
Manifest next update: Fri 27 Mar 2026 04:02:03 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: YZ+AHCnX/zbeJ9gouAASmJ7OTPi/6jfB71f0X7YiHts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:74:9f:dd:de:96:a5:7e:67:92:b0:36:f5:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Mar 26 04:02:03 2026 GMT
Not After : Mar 27 04:02:03 2026 GMT
Subject: CN=bd1ca8c7c505b930fcae9425625e5e65fd2cce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:7b:55:76:8f:97:fb:d3:f6:87:44:4a:05:
3f:93:06:84:54:4d:93:27:41:d0:bf:1d:c0:f4:e3:
9e:bc:56:32:e9:82:16:8b:b7:f7:55:0d:68:68:82:
17:68:90:f0:28:32:22:84:8a:e0:16:ae:16:3d:b2:
e3:78:8b:6d:b5:2d:db:93:10:5f:98:e3:d8:6a:99:
4b:74:7a:a9:d6:e5:bd:21:8b:b5:15:c8:d8:77:cb:
dc:07:85:45:30:ea:30:39:d8:7d:ad:fe:54:01:26:
0e:22:41:ec:96:5a:8e:5d:c1:10:87:ee:af:86:a9:
f1:99:2a:ee:66:75:2c:6e:8b:7f:dc:14:f1:43:48:
b5:d0:18:c6:e9:e6:5b:2c:d4:73:9b:58:f8:3f:74:
e2:d6:06:28:8e:f4:bb:8a:3c:62:09:e6:e6:80:45:
52:96:e0:cd:94:1c:6f:ce:86:43:c5:6b:87:3f:65:
e4:f5:be:5f:4e:0a:6a:6f:da:23:50:49:fb:4a:5d:
9b:81:46:6a:a4:e4:43:64:d7:3a:e3:9a:1c:be:cc:
16:b8:11:3b:ab:98:33:96:6b:f9:98:28:02:b9:12:
d7:94:25:8c:28:6d:7e:4a:f5:a5:2e:5b:17:4a:90:
b4:32:01:ea:2f:f1:37:2e:5b:ee:5d:22:7c:b5:bb:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:A8:C7:C5:05:B9:30:FC:AE:94:25:62:5E:5E:65:FD:2C:CE:41
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:3c:19:8d:cd:35:17:76:85:8d:80:59:5e:8e:c1:f6:a4:
28:51:d7:06:19:3a:34:5b:2c:15:91:f1:d9:09:50:8b:04:d6:
f8:00:e2:a9:d7:19:d4:1a:d3:9c:84:96:e8:39:31:80:d8:37:
0f:5c:f6:ee:21:f7:3f:6a:31:a6:34:12:84:aa:b7:61:b7:a0:
6f:6a:42:47:ab:f4:a8:aa:db:b6:f1:f4:95:2d:1a:21:c4:75:
76:ee:70:b6:84:0b:12:43:f4:f0:c1:88:9c:4b:50:82:c8:87:
a1:4c:99:06:e2:ff:73:44:2e:0b:3c:49:d2:5c:7d:ce:f5:ba:
90:6c:c8:e7:7e:5a:87:bc:34:d6:56:82:b9:fb:fd:cd:ba:4a:
e0:2d:af:d7:05:88:b6:b7:d6:6b:80:6a:22:e9:f2:75:0a:72:
86:4e:88:ee:14:00:f2:b4:ac:db:9b:d4:12:76:1f:20:5b:ce:
a7:45:01:69:a2:c7:12:fe:e6:15:ca:a7:d3:bf:28:ca:44:1f:
14:78:ac:5d:e5:38:fa:31:02:3b:90:23:65:a8:a6:6a:70:aa:
3b:8d:f8:52:a1:75:01:b9:85:e3:06:c5:aa:20:2a:ac:33:a1:
9f:be:87:27:c2:19:01:b7:6b:56:8a:6f:a2:23:2f:0b:5c:56:
81:df:69:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTnSf3d6WpX5nkrA29X4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjYwMzI2MDQwMjAzWhcNMjYwMzI3MDQwMjAzWjAzMTEwLwYDVQQD
EyhiZDFjYThjN2M1MDViOTMwZmNhZTk0MjU2MjVlNWU2NWZkMmNjZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwN7VXaPl/vT9odESgU/kwaEVE2T
J0HQvx3A9OOevFYy6YIWi7f3VQ1oaIIXaJDwKDIihIrgFq4WPbLjeItttS3bkxBf
mOPYaplLdHqp1uW9IYu1FcjYd8vcB4VFMOowOdh9rf5UASYOIkHsllqOXcEQh+6v
hqnxmSruZnUsbot/3BTxQ0i10BjG6eZbLNRzm1j4P3Ti1gYojvS7ijxiCebmgEVS
luDNlBxvzoZDxWuHP2Xk9b5fTgpqb9ojUEn7Sl2bgUZqpORDZNc645ocvswWuBE7
q5gzlmv5mCgCuRLXlCWMKG1+SvWlLlsXSpC0MgHqL/E3LlvuXSJ8tbvd9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0cqMfFBbkw/K6UJWJeXmX9LM5BMB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQo8GY3N
NRd2hY2AWV6OwfakKFHXBhk6NFssFZHx2QlQiwTW+ADiqdcZ1BrTnISW6DkxgNg3
D1z27iH3P2oxpjQShKq3Ybegb2pCR6v0qKrbtvH0lS0aIcR1du5wtoQLEkP08MGI
nEtQgsiHoUyZBuL/c0QuCzxJ0lx9zvW6kGzI535ah7w01laCufv9zbpK4C2v1wWI
trfWa4BqIunydQpyhk6I7hQA8rSs25vUEnYfIFvOp0UBaaLHEv7mFcqn078oykQf
FHisXeU4+jECO5AjZaimanCqO434UqF1AbmF4wbFqiAqrDOhn76HJ8IZAbdrVopv
oiMvC1xWgd9pYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:38 2026 by rpki-client