Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: sduwltsdjsf/EeWSI3ZO7NMB5oDQjGATtr9AHMUnDM4=
Subject key identifier: 3B:05:4A:A4:75:2F:EE:AC:3D:4D:E0:E3:70:E8:B0:7B:FA:55:49:18
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01A17401ACBC36ACE0F9DB5CBF7C708FA234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0DFC
Signing time: Sun 25 Oct 2026 17:00:29 +0000
Manifest this update: Sun 25 Oct 2026 17:00:29 +0000
Manifest next update: Mon 26 Oct 2026 17:00:29 +0000
Files and hashes: 1: GIITrKzGntTLHQKcl8J669Q3jKo.roa (hash: 4RTNyg+YmXXFt0WsrzCk4n28p9RyBVBVZLoCQ5ZnGjw=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: xGOOBTJGtnfQFqLRzHO/MZYcY3jd6OrboX8h2guaTNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:01:ac:bc:36:ac:e0:f9:db:5c:bf:7c:70:8f:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Oct 25 17:00:29 2026 GMT
Not After : Oct 26 17:00:29 2026 GMT
Subject: CN=3b054aa4752feeac3d4de0e370e8b07bfa554918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:27:0d:82:21:e1:38:85:ca:f5:d6:c5:b3:
c3:f1:14:6f:64:ef:b4:8c:f9:54:d2:a6:38:c7:8f:
5f:11:df:71:08:33:0e:3e:5b:6b:e0:54:37:71:8f:
11:e8:07:c3:6a:38:af:b7:1a:cb:7d:a4:ef:5c:58:
ea:46:01:4e:2a:c6:a8:7c:a8:cb:a8:03:f4:0e:ce:
af:cc:3d:34:4b:da:09:03:dd:af:4d:be:c9:98:f2:
79:30:7d:ec:d7:87:41:b1:ff:36:89:13:92:a9:55:
99:ea:3a:46:fa:14:c0:6e:61:d5:f5:bb:07:0c:31:
e3:cc:be:92:1f:a7:13:bd:08:45:e6:e5:f7:d9:5f:
a3:e1:b1:a9:28:8a:27:eb:33:d6:9f:f0:17:d3:68:
77:15:60:8a:9e:67:15:f5:79:cf:2a:e7:f9:ca:7f:
71:d1:bc:d3:a8:3c:73:5c:76:4e:5d:11:29:f5:89:
ca:70:d4:47:de:af:68:54:78:0e:e3:81:c7:44:18:
41:3a:b9:7e:48:1b:85:aa:b2:1a:55:65:b5:fb:09:
af:b8:2b:1a:64:bb:f7:8e:70:38:79:be:14:0a:ce:
c0:b3:55:0e:f8:c0:18:4d:14:9f:e3:98:b4:7a:bd:
d1:8e:54:42:1d:25:61:c2:67:63:7f:9c:87:47:cc:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:4A:A4:75:2F:EE:AC:3D:4D:E0:E3:70:E8:B0:7B:FA:55:49:18
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:67:55:b4:9b:3c:18:72:bc:b7:3e:6a:7c:7f:27:0e:6a:
f2:35:fa:c8:a6:b2:df:d3:db:d7:41:6e:49:a8:2e:bf:6e:31:
76:ac:67:e2:1e:68:ef:14:a0:b7:33:de:5f:09:33:d4:37:86:
18:d2:60:59:27:d4:f5:17:13:91:5a:a0:77:34:5c:21:ac:44:
67:c4:e4:7d:f9:48:f1:fa:37:01:a7:ea:eb:3d:31:79:71:84:
9d:f9:04:3e:57:eb:14:56:83:db:e9:c3:1d:8a:ef:2f:0a:34:
a4:a2:d2:25:96:14:71:13:6f:cf:45:05:41:54:d6:e3:48:c8:
07:2f:ec:b0:21:2a:07:c6:79:67:d4:e2:0c:ae:b3:11:b0:e7:
2c:58:3a:ae:7c:bd:3d:76:b9:23:cb:fa:7c:a5:15:4b:3b:b4:
c2:69:06:f9:e8:df:c5:02:78:dc:e4:cb:02:44:e1:36:fd:68:
f8:9f:a0:bc:61:d4:69:69:20:22:00:50:80:01:bf:96:3a:7f:
d5:04:10:b9:a9:26:bd:8d:1f:30:ed:79:a2:97:dc:ad:fe:b4:
e9:6b:0f:5c:69:a4:06:52:6d:e0:a7:cc:d6:e4:f8:0f:9f:a5:
f8:0c:92:c2:63:d5:4d:69:57:fe:00:d4:86:99:04:5d:d6:a3:
6b:5c:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:50:05 2026 by rpki-client