Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: VIxrfrZ65KTm9Sr4OB+NzUlgbpP1JJodb/2tO4LBHjg=
Subject key identifier: E5:BE:E8:28:B7:DF:5E:F2:9F:59:6D:15:9D:89:3E:6D:05:32:BE:9C
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019F9249094780FD872801D84A2D8EA968DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0D01
Signing time: Fri 24 Jul 2026 04:01:27 +0000
Manifest this update: Fri 24 Jul 2026 04:01:27 +0000
Manifest next update: Sat 25 Jul 2026 04:01:27 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: bzL+KxnAaOnn8j+Gb/XX2O/Ra5P6JNddbit2cRFf2Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:09:47:80:fd:87:28:01:d8:4a:2d:8e:a9:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Jul 24 04:01:27 2026 GMT
Not After : Jul 25 04:01:27 2026 GMT
Subject: CN=e5bee828b7df5ef29f596d159d893e6d0532be9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:b0:3a:11:f3:9e:11:72:fb:2f:9c:1d:d5:
05:d2:cc:a9:15:fc:94:e8:4a:1c:62:de:14:34:6e:
10:e4:af:d4:aa:4b:33:da:48:a0:37:f8:79:60:78:
1b:cf:69:7f:f4:d3:31:11:d5:d8:8f:21:17:28:39:
47:68:0b:54:9f:23:a3:94:aa:83:75:b5:ca:79:11:
12:63:32:82:18:10:d1:9b:53:cc:77:35:eb:a9:d9:
33:b2:59:0c:a5:fa:6c:6a:21:3f:df:86:83:d2:f0:
62:98:a3:6e:24:c7:9f:18:c5:2d:9d:ff:8a:bf:6c:
31:19:79:15:04:99:24:3b:ff:90:48:3b:e3:3b:e6:
7a:ff:e9:32:c0:a7:1f:82:36:9e:86:82:5b:44:4f:
5d:64:e6:5d:6d:29:ba:08:94:99:d3:52:c9:fd:dd:
d4:d3:db:f7:4c:13:c6:7e:e0:1b:31:c2:5c:b9:1b:
c7:a9:de:0d:99:bf:0c:32:0e:87:65:65:f1:eb:12:
18:b0:0c:9b:d9:b3:1f:f3:a1:5b:27:ab:c2:31:a1:
ef:36:99:6d:54:43:4b:35:ff:d3:d4:e0:1d:dd:53:
03:77:c6:e7:0b:04:88:62:41:67:5b:ad:1f:12:b4:
7d:64:00:39:8c:c0:66:7e:73:71:2d:23:f9:f2:fb:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:E8:28:B7:DF:5E:F2:9F:59:6D:15:9D:89:3E:6D:05:32:BE:9C
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b1:32:63:72:e8:3a:0c:f6:d7:67:89:34:ee:08:33:72:10:
e9:98:bb:8f:aa:38:48:a4:ad:d1:62:89:c7:3b:9d:48:8b:2a:
a7:42:b0:86:60:8f:33:72:17:e0:80:39:6c:ff:36:31:e8:45:
cc:a1:90:92:98:b4:be:1d:88:65:d1:fd:69:24:c4:a6:9f:82:
9e:14:7f:4b:4d:fd:f8:11:d5:24:50:af:fe:70:4c:d7:32:4a:
d1:c5:fe:93:e7:b6:e2:a3:d9:93:43:d3:ec:6a:57:c6:3a:98:
93:36:cc:9d:0c:72:5d:31:b4:3d:42:32:95:05:bc:5c:58:d3:
88:d3:0c:57:b3:34:24:d6:7f:3a:3c:87:5f:b3:02:11:ad:f3:
13:b4:70:9e:17:c1:5c:6b:2f:b8:3f:2c:d2:3b:a0:ed:67:dc:
54:22:17:a9:28:95:45:03:31:bf:bd:9a:ff:c5:ce:1c:7b:08:
19:d5:54:37:1d:61:4e:d6:a8:8f:a0:88:17:87:ef:be:6d:12:
63:d5:de:eb:23:f8:3e:73:71:c2:3a:05:c4:21:6c:77:91:33:
ab:03:34:ee:70:62:89:54:b1:56:f6:2e:07:a8:e9:b2:e6:19:
3f:a2:89:62:e4:2f:b6:5f:84:ad:59:41:b5:ec:5b:36:b2:0f:
4a:1f:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:42 2026 by rpki-client