Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: zo1ewj9jlMEammH+d9P9rjVsAlsVmw4zjgFPDG5RNu8=
Subject key identifier: 5C:B7:1E:25:91:DF:C7:92:F9:98:28:39:C9:52:46:1F:BA:89:CF:4E
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019D26CD6FFDD39BC3665E6EA8A5575BCB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: uvDfZVgghQEPPBmiY8Z9wzTwcZmA5Ons+TA5FWHM8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6f:fd:d3:9b:c3:66:5e:6e:a8:a5:57:5b:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=5cb71e2591dfc792f9982839c952461fba89cf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:aa:02:b7:59:92:a6:55:55:d1:48:b3:19:
5a:5c:f5:8b:97:83:c7:f6:ea:58:01:0d:bf:3e:1d:
2b:95:13:9a:dd:fc:c4:98:db:b1:b4:20:2a:33:c6:
9f:16:ee:e7:86:1c:7f:bc:97:35:d5:eb:fb:5f:5d:
a4:c6:56:c5:66:b6:76:36:c5:50:d0:9e:26:63:ef:
12:c3:18:dc:81:e8:13:eb:4e:f6:f2:84:6d:a1:19:
a0:46:2b:b0:be:fe:2c:96:b3:2c:b8:37:1c:d0:21:
31:47:c5:7a:af:f8:21:63:bd:c1:d9:cc:aa:43:1b:
1a:3c:5a:89:9c:a3:a9:6c:55:1c:fe:e7:30:b1:06:
4e:9a:fa:21:ba:26:9c:86:46:7e:4c:a1:3d:11:4c:
02:05:fb:88:0b:2e:65:b0:5b:1e:57:98:43:11:56:
09:dc:30:ab:db:bd:4d:f1:c4:23:13:0a:de:62:e4:
c9:26:20:6b:e7:aa:0b:02:a5:8c:38:39:d0:1a:72:
e2:39:bb:66:23:e3:1e:6a:28:b4:a4:80:1a:23:cd:
e9:aa:fa:79:5a:6c:41:71:fb:f6:89:d2:b8:a5:4f:
48:97:53:a9:d3:44:66:69:68:9d:fe:a1:16:3b:fa:
92:39:8d:30:be:4f:64:0e:39:9c:57:c2:b8:f6:69:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:1E:25:91:DF:C7:92:F9:98:28:39:C9:52:46:1F:BA:89:CF:4E
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:19:c8:51:1d:2d:88:8b:74:58:a9:9e:67:ac:ac:04:9b:25:
b3:89:b2:8b:74:f5:5f:d8:f3:3f:24:90:8f:f2:90:8c:f7:3f:
de:a6:e8:46:4c:21:f6:97:b5:65:25:82:fa:ff:41:4b:c4:51:
49:fe:db:c2:21:2a:aa:92:fe:60:64:1d:87:07:ee:31:d5:8b:
9d:68:67:30:34:75:af:07:bb:58:1a:18:68:c3:5c:f4:09:88:
79:6a:29:80:a6:bc:c0:f3:51:a9:4a:ab:69:39:20:b1:c8:e1:
8c:a9:c3:21:bb:df:1d:8e:b3:23:8b:cf:75:45:34:8b:54:3a:
ac:06:71:ca:59:6b:70:21:93:9f:f6:0c:cd:91:58:4c:a1:59:
15:b5:18:43:01:52:f0:6d:88:dc:58:04:9e:15:7e:76:48:f8:
55:a6:5a:df:ac:51:84:6b:d0:c7:44:17:e7:ef:fb:34:54:23:
44:44:a9:94:fa:c3:22:c1:43:ca:cf:68:f8:1b:b5:6c:d0:f7:
a7:2a:68:fb:65:c4:e0:61:83:60:d7:8f:a9:64:64:b3:dd:6f:
6c:93:b0:a3:1c:e0:f8:31:58:ca:db:b4:82:0e:9f:e6:ff:3d:
ca:d8:13:79:24:5e:11:08:09:04:32:3a:6c:0d:ae:88:b3:7b:
9a:d5:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:53 2026 by rpki-client