Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: 9D8aun7/LGhC6AZOYvPO+ES4Ly1aEe833z9eq4gKwI4=
Subject key identifier: 57:F1:74:C6:02:B1:47:07:22:D0:0B:08:46:35:01:18:DF:8A:9C:9E
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019E9D05ACBA835D959C7770E1AAEFEDF471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0C82
Signing time: Sat 06 Jun 2026 13:00:55 +0000
Manifest this update: Sat 06 Jun 2026 13:00:55 +0000
Manifest next update: Sun 07 Jun 2026 13:00:55 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: nPZb3KNkUQm4hj42cTOvwUZiPEqQ1eBJk4WLfAHWCrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:ac:ba:83:5d:95:9c:77:70:e1:aa:ef:ed:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Jun 6 13:00:55 2026 GMT
Not After : Jun 7 13:00:55 2026 GMT
Subject: CN=57f174c602b1470722d00b0846350118df8a9c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:8c:ee:c8:26:02:12:a5:86:a5:56:80:35:
05:b7:9a:48:50:1d:5c:88:76:ca:2e:88:9a:43:b6:
2a:f6:40:eb:5e:f2:3b:83:3b:ff:13:08:e1:44:7a:
73:1c:93:13:08:da:fe:21:f9:d3:64:71:2e:3a:48:
cc:90:67:59:7a:f5:d0:94:54:9c:e1:91:f6:f3:2f:
38:69:73:34:59:82:b1:1c:dc:19:89:27:67:17:cc:
55:ce:41:de:c0:c9:de:b5:a2:42:7f:4a:df:81:5d:
3e:9a:6e:41:85:06:da:2f:91:cb:95:06:e0:d1:f2:
cc:8d:2e:00:11:64:27:f9:52:da:d4:b8:0a:27:aa:
a5:92:98:d9:a3:58:3e:c8:eb:b1:22:48:75:1f:2f:
7d:0b:49:67:0b:d3:45:4e:73:0d:bd:1d:b6:94:b9:
17:73:3d:54:98:53:1c:15:88:ba:e5:31:89:52:09:
71:b4:f4:e6:ba:e8:e1:8c:cf:f8:2d:72:93:61:a0:
62:35:f3:1a:a1:bb:72:f2:7e:42:05:a5:8d:2f:0a:
1b:c5:cb:33:d8:1a:d1:9c:fd:49:31:a1:3c:01:aa:
09:b7:e0:04:7c:be:5c:b0:b5:ff:0c:36:5d:22:75:
0a:30:11:5c:a9:12:ed:c5:1d:97:81:ac:d3:6a:5c:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:74:C6:02:B1:47:07:22:D0:0B:08:46:35:01:18:DF:8A:9C:9E
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:19:71:cf:e4:ac:72:72:f9:fe:d8:e0:88:33:8f:c0:b4:14:
b7:36:e6:d9:91:8b:be:7c:ab:94:d1:28:03:71:df:dd:a8:72:
7c:d6:48:3b:bd:a5:e0:1b:1c:78:45:47:95:4e:ce:34:cc:d5:
e3:dc:7a:7f:db:dc:fa:8a:cb:4a:4a:c7:c0:99:86:b6:60:2f:
55:a7:51:67:4d:13:57:c6:a6:96:b7:89:e8:b7:b1:48:18:f3:
a9:de:a2:fd:e9:78:aa:a2:83:01:df:56:20:97:02:7c:3d:c5:
f7:59:70:c6:d8:22:69:a6:82:a3:f0:8d:0a:45:5d:4c:ac:51:
c2:e4:11:82:83:52:9b:a5:5b:ed:97:42:fe:0e:08:a1:e9:8f:
e3:19:07:75:4f:9a:ee:cf:bf:bf:7f:71:c2:1a:27:65:64:e8:
7f:73:b5:fd:fd:d6:ac:00:8f:17:db:33:eb:41:88:9d:23:95:
37:aa:59:d6:77:db:8c:27:d1:67:b9:fb:f1:0d:45:22:36:f1:
2f:25:b3:f0:89:8a:0b:d9:db:f9:e7:15:ca:48:c1:7b:8c:ca:
c1:c7:d7:88:b1:2c:c4:84:ca:4b:8a:75:ab:1f:35:30:c5:fd:
8d:c8:b7:46:6b:78:ce:25:fe:43:23:1c:d3:a7:94:88:96:a7:
01:5e:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:08:31 2026 by rpki-client