Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: /53mdiQNqphroReI0i/RuURq3MTNUQgZfnAeIOcvoNo=
Subject key identifier: 33:7A:17:BF:AB:0C:AD:F2:E8:58:83:34:C9:D3:F3:75:8D:FB:48:82
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01A15D437B8571548460473D7CABA3652AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 13C3
Signing time: Wed 21 Oct 2026 07:01:05 +0000
Manifest this update: Wed 21 Oct 2026 07:01:05 +0000
Manifest next update: Thu 22 Oct 2026 07:01:05 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: NMM7uilgAj3IVm0P4Uw7+HlfFdi4WvP7eqSN0Ozy9Uk=)
2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:43:7b:85:71:54:84:60:47:3d:7c:ab:a3:65:2a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Oct 21 07:01:05 2026 GMT
Not After : Oct 22 07:01:05 2026 GMT
Subject: CN=337a17bfab0cadf2e8588334c9d3f3758dfb4882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:6c:57:a3:1c:70:0d:22:53:99:a5:ca:6a:
6d:da:d5:86:bc:53:07:16:02:41:ee:b8:c6:11:74:
9f:9b:00:2a:db:09:37:3f:6b:cd:99:6a:7d:bb:dd:
ac:58:58:e7:54:49:f4:02:00:c1:22:0b:e5:ea:29:
87:a2:47:3e:38:48:fc:8c:17:8a:99:49:e3:b0:2f:
ef:1d:07:e3:54:59:12:2c:9a:8a:76:70:01:34:1e:
98:de:74:6d:75:e3:df:7e:90:b2:8c:03:1d:32:d8:
e8:79:c0:86:fc:1f:a2:f8:4c:ac:33:76:33:11:1f:
58:7c:c9:a1:6d:58:80:23:15:20:4c:db:db:6d:fd:
c2:bd:42:ab:77:18:52:21:6b:45:3f:31:af:02:3b:
9c:48:e6:90:bd:a3:25:e6:19:b5:23:d4:de:f6:07:
23:b5:95:5f:1a:72:a2:0f:00:7a:23:a4:b7:c1:47:
7a:f0:13:2b:c6:13:ba:3c:16:38:39:2d:a0:78:ff:
1f:fd:71:f5:96:6d:b7:84:d6:bd:27:42:ad:3e:31:
94:5f:3c:56:e7:d8:34:3d:87:41:e7:b8:ce:e6:dd:
e4:db:b2:f7:b3:b6:e0:b5:7a:a1:fd:31:41:fb:64:
7b:d3:0b:9e:14:c2:a8:a1:76:f1:e2:2f:1a:48:77:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:17:BF:AB:0C:AD:F2:E8:58:83:34:C9:D3:F3:75:8D:FB:48:82
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:c8:50:30:dc:db:af:38:b9:b1:76:a4:a7:00:5b:51:04:
92:c9:a2:c5:e6:82:52:e8:6d:f2:e0:16:e8:fa:9a:b5:b9:0d:
3f:02:e9:cf:62:58:aa:c1:71:e5:4f:85:2c:09:40:6e:c9:93:
e8:77:35:b6:a2:bf:3e:b9:10:e9:fb:f7:60:8d:18:0a:61:d2:
85:d4:a8:98:46:5c:4a:50:18:e8:f1:6e:3f:58:12:9b:a4:f9:
c6:05:9b:8a:a0:8f:9f:b3:7b:de:88:62:40:08:3c:e9:6a:76:
2d:85:31:83:fb:08:2a:91:10:09:88:f6:f7:ae:f8:af:52:42:
0b:49:c1:04:78:da:1e:8a:47:11:fa:ab:e0:0b:c9:47:cf:e9:
7c:1f:b0:af:12:dd:76:e9:92:74:23:00:e6:b9:14:4c:18:0d:
f7:33:d5:4d:5f:af:f3:97:3f:06:16:25:0f:42:89:e4:26:43:
cb:3f:71:df:81:c3:34:e6:0d:9b:42:95:d5:0a:87:c2:7f:63:
d7:11:90:19:6c:10:03:87:a3:e3:a5:0d:ec:ea:9c:9b:9e:63:
c8:6d:2d:17:65:e3:b9:09:4b:35:06:4c:ad:49:f8:75:e4:aa:
5b:95:b9:c4:cd:ea:bb:9b:ce:82:61:5f:84:bc:6c:e5:bc:c6:
30:9d:04:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdQ3uFcVSEYEc9fKujZSqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYxMDIxMDcwMTA1WhcNMjYxMDIyMDcwMTA1WjAzMTEwLwYDVQQD
EygzMzdhMTdiZmFiMGNhZGYyZTg1ODgzMzRjOWQzZjM3NThkZmI0ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaxsV6MccA0iU5mlympt2tWGvFMH
FgJB7rjGEXSfmwAq2wk3P2vNmWp9u92sWFjnVEn0AgDBIgvl6imHokc+OEj8jBeK
mUnjsC/vHQfjVFkSLJqKdnABNB6Y3nRtdePffpCyjAMdMtjoecCG/B+i+EysM3Yz
ER9YfMmhbViAIxUgTNvbbf3CvUKrdxhSIWtFPzGvAjucSOaQvaMl5hm1I9Te9gcj
tZVfGnKiDwB6I6S3wUd68BMrxhO6PBY4OS2geP8f/XH1lm23hNa9J0KtPjGUXzxW
59g0PYdB57jO5t3k27L3s7bgtXqh/TFB+2R70wueFMKooXbx4i8aSHd5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN6F7+rDK3y6FiDNMnT83WN+0iCMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQfIUDDc
2684ubF2pKcAW1EEksmixeaCUuht8uAW6PqatbkNPwLpz2JYqsFx5U+FLAlAbsmT
6Hc1tqK/PrkQ6fv3YI0YCmHShdSomEZcSlAY6PFuP1gSm6T5xgWbiqCPn7N73ohi
QAg86Wp2LYUxg/sIKpEQCYj29674r1JCC0nBBHjaHopHEfqr4AvJR8/pfB+wrxLd
dumSdCMA5rkUTBgN9zPVTV+v85c/BhYlD0KJ5CZDyz9x34HDNOYNm0KV1QqHwn9j
1xGQGWwQA4ej46UN7Oqcm55jyG0tF2XjuQlLNQZMrUn4deSqW5W5xM3qu5vOgmFf
hLxs5bzGMJ0Emw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:20 2026 by rpki-client