Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: CF3EGN5rY7hXv4KV0641r5hb/NGbP3aCbceSQjTR1eg=
Subject key identifier: 15:35:22:50:4C:A4:4D:4E:CB:F3:98:CC:5B:C0:34:22:43:AC:64:36
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01A05A7BB103F79B7BD7DD678FDD18F57702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 133D
Signing time: Tue 01 Sep 2026 01:00:50 +0000
Manifest this update: Tue 01 Sep 2026 01:00:50 +0000
Manifest next update: Wed 02 Sep 2026 01:00:50 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 6tOzzebbLnqDck/J0qXedVGa9zYQge0oAF77d3L9XR0=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:b1:03:f7:9b:7b:d7:dd:67:8f:dd:18:f5:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Sep 1 01:00:50 2026 GMT
Not After : Sep 2 01:00:50 2026 GMT
Subject: CN=153522504ca44d4ecbf398cc5bc0342243ac6436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:cc:94:2b:92:f6:65:9a:05:4e:62:e4:e1:39:
1a:97:de:47:d5:ad:92:8b:8a:75:e1:c1:67:5d:a3:
7e:62:37:c4:65:89:7b:dd:b5:8b:e4:69:a2:ad:57:
74:ab:9b:4b:8e:a1:e0:8e:ca:18:06:d8:ff:20:19:
a8:91:e5:5d:31:eb:8f:45:29:42:ac:b0:b9:76:80:
8c:f8:23:0c:f8:04:0f:6a:90:1f:7b:53:56:de:28:
e4:15:f0:d7:f8:b2:cc:af:66:1a:fa:91:06:7a:10:
24:89:f6:1f:0f:18:ee:91:05:68:b7:7e:a2:9f:a8:
3a:60:2c:10:43:e3:ce:7a:d3:9d:32:fc:7b:2d:e6:
cf:06:2e:df:ba:f0:e0:a1:f2:9a:fa:14:49:86:1b:
2c:ee:9d:d1:53:26:19:c5:c9:27:b1:ea:59:61:5b:
3a:c2:fc:11:e0:40:9a:51:e5:82:6b:45:2b:41:ee:
fb:08:6b:9b:31:f2:2b:70:d2:d8:8b:28:88:df:3e:
01:73:49:36:ce:80:d1:b3:a4:43:d1:98:39:a4:74:
fa:af:95:70:b1:6c:b3:f6:66:1a:b3:26:69:1e:53:
70:a2:8f:85:fe:36:90:c5:22:d8:60:6e:e2:ed:a8:
99:d8:11:08:de:77:40:07:33:63:5b:f2:83:e8:7b:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:22:50:4C:A4:4D:4E:CB:F3:98:CC:5B:C0:34:22:43:AC:64:36
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:b9:e3:af:fa:2c:e4:47:fe:48:8e:dd:67:e3:0d:4f:38:
1b:a3:58:8c:50:7c:ac:29:c6:30:9a:dd:50:62:33:48:54:b9:
17:09:87:b0:f8:81:2d:45:98:c7:da:3d:07:eb:69:eb:35:e4:
4a:6f:96:b6:3a:7a:dc:e3:7a:2c:cc:43:ef:df:08:8c:f7:ee:
44:27:39:e1:18:b7:be:84:c5:7f:4b:b4:dc:78:ce:ad:26:93:
93:61:af:f0:25:1c:a4:7f:52:fa:1e:f4:c0:70:28:0a:c5:30:
5a:64:aa:60:54:72:9f:1e:da:ad:e6:18:48:34:95:ab:3e:b7:
84:e5:93:0c:a9:8c:1e:de:47:ab:22:9d:53:90:72:1f:e7:92:
cd:d9:08:2c:d2:16:c1:29:32:38:df:a5:c3:54:36:32:ce:4c:
25:5e:df:05:94:ba:66:aa:64:f8:90:e8:8d:b4:10:70:db:c3:
67:5a:7f:b3:48:d4:57:af:7c:77:76:f8:c9:36:f6:0a:99:7a:
8b:61:88:f8:5b:3e:f7:a7:db:78:e8:11:28:1e:4b:59:20:b3:
86:73:cd:2e:a4:48:92:45:d1:ea:c8:05:97:94:8d:c3:ff:28:
65:dd:3e:27:aa:2b:69:7e:b3:14:a9:57:54:da:64:92:ad:f6:
4e:af:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:09:48 2026 by rpki-client