Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: SB70MVZIH2m16GBzmiU9GfMkvAO7nmtnWZcVNmhWEcM=
Subject key identifier: FA:95:8E:AA:CF:4F:AA:02:1B:8D:B6:ED:C2:AD:96:83:2F:9D:CA:66
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019DB359D39CE2294FA8668EABABFB3BFF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0C09
Signing time: Wed 22 Apr 2026 04:01:41 +0000
Manifest this update: Wed 22 Apr 2026 04:01:41 +0000
Manifest next update: Thu 23 Apr 2026 04:01:41 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: Op42RrmCDnnwqB4YXMnAZv/qCurF1by7R9EnzTEmF0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:59:d3:9c:e2:29:4f:a8:66:8e:ab:ab:fb:3b:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Apr 22 04:01:41 2026 GMT
Not After : Apr 23 04:01:41 2026 GMT
Subject: CN=fa958eaacf4faa021b8db6edc2ad96832f9dca66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:50:c5:82:87:af:08:9d:69:ff:24:76:ae:
1a:93:cd:85:4f:3b:a6:72:d0:93:fc:54:2d:a5:ed:
d8:18:ee:3c:b1:86:0f:bf:79:b3:23:7d:7c:5c:63:
33:81:2f:63:8a:9f:fb:7b:56:11:19:ca:be:96:c8:
d3:1f:95:0e:68:ad:95:a7:46:8b:8b:59:8f:08:98:
3c:67:7e:67:8b:d9:51:61:bf:c8:e0:23:9e:25:b3:
de:5a:c7:fe:bc:a0:00:b6:7d:6c:7a:24:6c:30:e2:
2b:56:be:64:05:7b:bf:8b:67:61:19:24:76:9a:97:
7f:8c:f9:51:30:3d:95:e1:c3:10:fb:5e:48:2e:61:
a5:a2:9a:27:d9:bf:ff:42:3d:7b:e4:3c:b1:22:f4:
c5:69:b5:bc:ef:db:a3:dd:ba:bb:f0:2e:a7:79:d1:
33:35:59:51:21:50:5f:5e:b8:2f:a3:ee:f1:42:14:
42:0f:36:8c:c2:cd:ae:bc:d6:d6:58:90:3f:ac:d5:
46:a6:ee:7f:8f:0a:d0:b1:b8:77:39:a9:d5:df:8c:
62:4c:a2:38:66:0e:e0:77:0b:00:b1:a3:8a:07:1f:
79:81:2a:33:71:5b:24:00:4a:ef:f4:70:cd:ff:f7:
3b:8f:84:38:30:06:d2:fb:cd:d1:bd:bc:b9:9e:e5:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:8E:AA:CF:4F:AA:02:1B:8D:B6:ED:C2:AD:96:83:2F:9D:CA:66
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:53:18:19:17:7c:d4:37:3f:06:ba:af:92:95:0b:a7:34:30:
41:18:34:22:22:58:17:b1:f4:c0:28:45:17:d5:b4:ee:2f:44:
41:9a:67:ed:e3:3e:83:f1:e5:d0:e4:40:e7:9f:26:65:05:03:
24:8f:0a:53:4d:2b:40:09:25:ee:5b:92:00:e2:4a:3c:b3:58:
43:d5:7d:c3:89:cf:95:7d:dd:3d:49:a1:0b:33:bb:4f:6f:47:
f9:85:73:35:a8:04:14:d2:17:38:4f:e5:9d:ec:fc:82:e1:a2:
69:50:74:b5:cc:1d:b5:f7:bf:31:4b:5c:14:3d:e1:da:82:62:
65:8b:18:f6:30:43:a9:2e:bc:1f:f7:c6:4a:69:45:3d:72:e8:
7f:f2:fe:8c:0e:9d:ba:a7:cc:96:d0:1c:ee:bd:19:c3:48:d6:
5f:2b:4b:cd:72:9e:d0:be:f2:70:5f:2b:9b:5b:87:66:3a:6e:
84:3a:06:38:71:33:fc:14:87:45:73:77:d0:d4:58:77:33:cf:
00:4f:1c:1f:b4:7a:4a:1f:39:1d:7a:c0:de:03:15:04:16:fa:
c1:1b:03:21:40:c5:73:13:32:1b:9a:aa:d3:b1:66:21:b0:94:
93:ef:58:6c:a1:ff:0f:d0:5c:8d:25:bb:81:bc:f1:37:1a:c7:
7f:1c:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:06:48 2026 by rpki-client