Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: lDYq7dLot58pqWtS4jOLcX9falLAmiEgbO/PCVZImJY=
Subject key identifier: 6D:18:B8:E9:8B:EF:DD:49:0E:15:67:B4:7C:7F:DF:8F:92:40:C9:DB
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 019FFD5B14F3078652F244EFB437096AF894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 09E4
Signing time: Thu 13 Aug 2026 23:00:32 +0000
Manifest this update: Thu 13 Aug 2026 23:00:32 +0000
Manifest next update: Fri 14 Aug 2026 23:00:32 +0000
Files and hashes: 1: O-5YbSnsrHJq6CYXfN6lS0bXHtU.roa (hash: m5fRexPWtu8YYbrVFGnW8/Uexvsppoei1HeT805HRHA=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: UAlxlkCCK83pgocYWs1j6ciLIHOtl0kluVE8QCc5NJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:5b:14:f3:07:86:52:f2:44:ef:b4:37:09:6a:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Aug 13 23:00:32 2026 GMT
Not After : Aug 14 23:00:32 2026 GMT
Subject: CN=6d18b8e98befdd490e1567b47c7fdf8f9240c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:cb:57:e8:77:c2:50:d0:b4:92:fe:be:68:
e7:2c:89:18:d3:d1:8c:7f:57:bf:b3:bb:54:c2:e6:
6f:41:ff:13:3b:bd:cf:df:8b:24:b8:4f:2e:31:b1:
12:92:52:51:a4:9d:39:42:21:ed:d1:3a:a2:fc:78:
74:cb:71:51:10:39:7a:de:9a:e8:d2:29:af:8b:99:
56:17:fa:14:54:61:bf:a9:8b:14:09:90:d2:37:38:
e4:a6:1a:98:a2:14:34:48:57:1f:de:2b:e8:82:a9:
7d:63:b6:91:e9:42:72:99:1c:5f:f4:5a:82:48:eb:
a5:97:3e:85:3e:a5:e7:bd:ac:a6:12:73:77:0f:04:
d8:3e:e2:49:7f:de:e5:fe:c3:c0:16:4f:3d:21:a5:
b7:09:60:ef:89:cc:94:5b:7f:a6:a8:98:a5:52:cf:
96:14:55:84:1d:6f:56:cd:39:39:2f:dd:91:47:b8:
09:18:dc:19:d6:c0:19:e4:c7:7a:17:9e:ee:aa:f4:
82:5c:57:08:7c:f1:e4:8a:7c:21:5a:21:fb:f4:d0:
8d:6e:a2:12:d9:f5:7d:a2:be:d6:bf:c8:ba:9a:41:
e3:09:07:26:88:b4:dd:0c:ef:80:76:89:96:34:9a:
80:80:47:34:ed:7c:27:ef:a7:66:92:91:45:1b:6c:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:B8:E9:8B:EF:DD:49:0E:15:67:B4:7C:7F:DF:8F:92:40:C9:DB
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:a7:8b:89:f8:98:32:81:c7:8e:2b:a1:de:13:47:a5:2e:
e2:54:37:70:4e:a4:d0:39:c5:c0:58:ff:fb:25:5a:32:85:08:
77:41:49:40:f7:79:d6:22:27:f8:07:6d:46:9a:ce:0d:db:21:
8a:c0:89:55:56:f2:2d:99:71:38:48:e5:1a:8d:b3:06:2a:10:
4f:d0:66:d1:64:4c:f1:55:ce:c8:27:1c:02:f4:1e:bd:e0:80:
9a:1f:f6:61:08:85:03:5e:da:cb:c6:b2:2f:97:89:1f:b6:b3:
41:10:a5:60:c4:29:7b:64:f9:d2:67:37:14:39:c3:3e:53:3d:
9c:62:fb:46:68:b2:a5:2f:a2:fa:3f:d2:0b:fb:24:f9:5f:bd:
34:85:92:25:16:49:d4:57:2f:3b:68:81:22:59:99:24:83:4e:
14:75:16:56:5c:c8:10:ff:14:8a:c1:53:bd:aa:46:75:d2:0e:
c8:22:bf:ef:21:46:82:02:54:09:f8:6d:ef:28:ae:07:12:fc:
f5:cf:a0:7c:cc:9a:a1:61:d0:15:83:a1:0c:e7:f8:50:51:79:
b9:9f:3a:75:3d:3e:73:ae:65:58:55:40:a0:52:61:e8:71:8f:
a0:47:33:c3:7e:2d:76:ae:ed:50:9f:cc:fd:ab:1e:1a:e2:9f:
08:08:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:17:04 2026 by rpki-client