Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: SsbFI0mffYlp2qggimWu7M05sAcdbxeKC8HyHzWem3s=
Subject key identifier: 5E:78:80:5C:40:7D:87:A5:27:42:F7:56:07:FF:F9:F2:A3:1E:91:B1
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01A06D94830A52EE976FC0F5CC59265F7A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0D74
Signing time: Fri 04 Sep 2026 18:00:44 +0000
Manifest this update: Fri 04 Sep 2026 18:00:44 +0000
Manifest next update: Sat 05 Sep 2026 18:00:44 +0000
Files and hashes: 1: BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa (hash: huXifm9uXVrOkPph8092Brb0t470qTrJHwbgPqd8z4w=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: JcrNXdLE1EvOZb/jhDtdRURcjajY6a/xXJU9We4xqIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:83:0a:52:ee:97:6f:c0:f5:cc:59:26:5f:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Sep 4 18:00:44 2026 GMT
Not After : Sep 5 18:00:44 2026 GMT
Subject: CN=5e78805c407d87a52742f75607fff9f2a31e91b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:97:7b:54:b0:d8:1b:4f:83:2b:9e:2c:a3:
74:16:8c:7f:99:b3:7b:58:64:bf:8c:95:cd:6d:ce:
75:6d:3b:56:51:2f:ac:24:5a:e2:e9:0d:9b:9e:c6:
38:cb:87:93:31:e3:a6:2c:1d:8f:05:70:25:e2:31:
65:f2:3c:33:3e:82:84:24:dc:e6:bc:da:2c:14:f3:
a4:8b:7f:5c:f9:1f:90:1e:78:9d:59:b0:19:2f:b3:
20:a0:1f:f8:e3:09:9a:b4:48:29:84:56:7f:e7:a5:
88:10:f0:8b:69:7e:e9:9c:07:5e:60:a6:0f:09:30:
d9:36:d3:a8:2e:bf:89:7a:7f:aa:55:e3:98:2f:5a:
ab:78:81:dd:55:6c:ce:90:5c:34:a5:23:1a:24:36:
c5:d2:99:0a:da:d5:84:90:55:7b:ea:c4:97:91:a6:
26:2f:db:d7:4b:f2:4a:34:79:bf:dd:9d:cf:a3:b6:
29:e1:dc:f4:72:0b:22:30:79:48:79:d3:e5:3c:66:
eb:1b:e3:91:a2:fd:b0:89:b8:fd:e6:79:bc:e0:ac:
0a:72:05:ff:17:64:bd:9a:dd:e5:21:40:84:2b:f5:
fb:f8:38:17:24:ec:0c:ec:15:2c:fd:9b:32:9c:c9:
ce:1b:ad:fe:25:b9:0b:06:c9:26:b8:99:6d:02:c5:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:80:5C:40:7D:87:A5:27:42:F7:56:07:FF:F9:F2:A3:1E:91:B1
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:58:80:6c:2d:47:f0:4a:c7:22:46:4c:f8:5e:1e:b9:99:
a3:e0:ab:80:f5:66:b0:0a:8f:26:5d:a6:09:42:87:b5:3a:c3:
c4:03:5a:0d:10:12:59:e7:6c:d9:74:cc:14:e3:25:4f:e1:97:
48:64:74:f4:86:d0:b5:16:29:b3:7a:20:15:b3:d7:19:04:b5:
83:85:db:87:54:bf:1e:d6:1c:5e:2f:4a:9a:c1:15:a7:32:9a:
84:3d:15:1b:51:51:e5:e4:c1:c7:64:aa:45:c3:69:98:8a:5b:
db:53:b7:5d:8d:e7:00:42:10:43:57:6b:d1:95:dc:b4:ae:a4:
68:e4:9a:cb:15:7c:64:cf:46:54:07:26:55:08:33:94:26:e2:
69:6f:95:2a:f2:7a:d0:f4:69:13:1a:cf:6b:8a:80:e5:9c:88:
7f:58:f7:08:23:7d:02:a4:35:27:f6:89:16:b3:03:79:60:24:
cb:d2:09:d1:c2:31:0f:8c:1c:9f:80:37:82:60:98:6d:ee:56:
24:77:1d:12:87:cb:27:42:1d:8c:1a:32:dd:c6:fe:6a:cb:9d:
99:aa:a6:6c:17:60:f5:3e:c4:4a:55:f5:7f:f7:68:e2:75:bd:
1e:14:54:1b:f7:84:ab:3c:37:28:66:d8:05:70:a6:a1:66:7c:
79:95:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:26 2026 by rpki-client