Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: Cuw4yplh5NWJqDuIuJj9pJZ+q+uR+sECk069ZNDO+So=
Subject key identifier: AA:DC:66:1E:43:C8:9E:23:9B:D8:D4:63:8F:D3:8C:01:F9:FB:0B:DB
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019CC9AC77B16DB9116E70A12CF1FBF11D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0B90
Signing time: Sat 07 Mar 2026 19:00:49 +0000
Manifest this update: Sat 07 Mar 2026 19:00:49 +0000
Manifest next update: Sun 08 Mar 2026 19:00:49 +0000
Files and hashes: 1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: VUd0/ZEEyprEflywiSsbkq2sUj4fyjIRWC342QG0m5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:77:b1:6d:b9:11:6e:70:a1:2c:f1:fb:f1:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Mar 7 19:00:49 2026 GMT
Not After : Mar 8 19:00:49 2026 GMT
Subject: CN=aadc661e43c89e239bd8d4638fd38c01f9fb0bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:1f:d9:f5:73:75:d2:62:96:e4:8d:48:f5:
00:55:6e:76:6b:8b:0b:c9:6e:a1:07:95:f8:c7:c4:
ab:f4:42:2f:db:0b:8c:3e:fe:ce:de:e5:a5:c1:51:
62:ee:3a:26:8e:69:27:76:d8:3c:98:2e:28:97:26:
48:17:0f:04:18:4d:a7:66:50:73:f6:43:c3:c6:79:
09:03:bd:3b:64:d6:04:99:bb:4f:98:dd:6e:33:ce:
41:55:95:7e:f9:f4:9f:06:91:66:3c:20:c1:a8:d1:
fb:e7:30:a1:fe:d2:5d:63:02:48:89:88:cb:04:e5:
a6:0f:3d:21:b0:31:c4:40:7e:5d:31:c1:0f:70:4f:
a4:94:79:2f:bf:07:8b:33:02:98:76:2c:7f:5e:eb:
04:d7:d9:81:fa:73:97:8c:87:5a:78:fa:11:14:52:
cc:f9:bb:a7:bc:64:c5:40:cd:5c:37:27:3a:db:b7:
81:95:67:6a:2e:d8:51:75:07:44:63:2b:60:51:af:
e4:6b:b6:61:29:44:91:20:02:dc:72:20:db:aa:62:
76:26:33:31:44:10:42:2a:ab:39:ac:6f:0c:35:d8:
e7:21:96:31:f9:07:1c:ad:d5:d5:6b:80:0b:e6:0e:
c1:81:ef:ec:25:06:40:a2:14:a7:3e:48:ea:c2:87:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:66:1E:43:C8:9E:23:9B:D8:D4:63:8F:D3:8C:01:F9:FB:0B:DB
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:02:91:86:08:d1:30:09:23:4c:0c:50:42:35:cd:86:d6:
ed:f0:0b:8e:6e:49:5d:04:2d:01:93:fe:f3:9e:22:f4:7c:7a:
c8:8a:f2:43:2a:89:b5:26:45:1b:c8:c4:4c:73:01:4c:aa:0e:
79:9b:6c:2b:08:09:42:2b:2e:50:b9:2c:4e:13:96:13:7f:76:
25:c8:4c:4c:06:7f:15:df:4d:a6:b3:bb:81:1a:cc:dc:9d:5d:
e5:58:7d:a0:03:90:00:7b:2a:cc:24:1c:b4:82:d3:5f:1d:01:
4e:83:6a:94:bc:4b:03:c6:46:fb:2a:f3:d5:10:58:18:9e:9f:
d1:b8:f7:7f:dd:b8:90:2c:7f:d7:e8:48:fc:b7:16:9a:05:94:
26:50:e8:28:82:42:f7:d4:70:95:41:ea:23:e5:18:5b:7c:06:
aa:6d:e3:d9:81:ea:d3:0d:61:26:90:1c:f9:12:a8:28:46:60:
b5:3b:ba:c2:d1:9d:f8:74:7f:80:ce:d7:6c:20:e7:ef:44:d4:
66:94:12:79:87:a3:8f:a0:23:fe:1f:01:73:3b:44:8a:4c:d4:
44:4b:b8:af:9b:80:6d:88:dc:b1:4b:8a:ab:96:8d:dd:23:eb:
ef:32:1b:97:d8:ed:f1:c0:f4:bb:ef:35:f0:18:33:61:6a:b5:
86:f3:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:31:36 2026 by rpki-client