Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: 3DNAiGkkkSizOgu8pgMkYpYRHsWuUbPXw/55qKK+FJY=
Subject key identifier: A6:68:C0:FB:8A:F9:18:2F:C8:30:3B:CB:0E:DC:44:3D:FA:EA:44:7A
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01A0D34A8EB374E6F18B744A266BC6F5A8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 12:01:13 +0000
Manifest this update: Thu 24 Sep 2026 12:01:13 +0000
Manifest next update: Fri 25 Sep 2026 12:01:13 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: +tlIuf56eVG4IO+lTFCqGv3Q+7nwGRZ9PZw9ZSPw7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:8e:b3:74:e6:f1:8b:74:4a:26:6b:c6:f5:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Sep 24 12:01:13 2026 GMT
Not After : Sep 25 12:01:13 2026 GMT
Subject: CN=a668c0fb8af9182fc8303bcb0edc443dfaea447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:ca:1b:82:76:f4:b0:51:f9:d0:e2:8b:c9:
13:22:80:0c:17:31:fe:ff:b0:d9:17:e5:0a:e2:0b:
f7:e6:d4:f0:5b:dc:09:d2:65:44:fa:81:74:c7:6a:
67:e0:a4:71:40:83:94:bc:d2:26:6a:17:b5:ba:d9:
89:40:d5:cb:86:d8:e5:0d:eb:f0:9a:e4:4f:1a:42:
b9:c3:00:39:dc:c6:7e:4a:9b:b4:11:39:be:00:b6:
b4:9a:15:eb:b4:97:1e:a4:f4:20:40:f9:3b:59:8a:
8c:8e:61:ee:be:ae:d8:60:0f:7c:0b:15:f7:ee:e0:
90:b8:84:f5:40:cc:2f:c2:08:86:78:53:21:8c:ae:
10:8d:56:3d:a3:8a:17:fd:f0:a5:a5:37:14:50:ec:
4e:0b:de:bd:00:51:21:d5:01:85:c2:50:7c:59:de:
d1:2a:e7:df:cd:17:5b:5a:e8:b5:6b:5d:0d:80:dc:
82:31:ba:ab:58:9d:74:c7:72:a8:05:e8:bc:20:ca:
47:74:27:f4:04:ec:a6:0b:8f:71:a3:e1:af:49:8b:
9f:f7:6d:8d:32:ee:1f:41:01:52:7d:59:7a:f2:5a:
21:1a:83:b3:95:4d:db:2b:86:a9:9f:1a:ce:5d:2d:
f2:47:88:e1:8e:ed:4c:0d:92:be:cc:b9:0d:60:01:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:68:C0:FB:8A:F9:18:2F:C8:30:3B:CB:0E:DC:44:3D:FA:EA:44:7A
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:82:ca:57:d2:6e:e4:2b:07:ed:4a:83:9e:4c:02:8f:29:0e:
e4:f8:c0:5e:56:e5:78:e1:e6:c6:90:ad:d5:96:a6:b3:73:d8:
d5:a8:ee:56:c0:72:ca:b3:80:38:76:dc:28:af:37:7d:44:a5:
d5:0c:ea:2e:6e:3a:a4:dc:3f:84:bb:9b:7d:f9:4b:c1:7f:f2:
10:38:2f:88:fc:c0:cb:84:3e:39:cd:6a:d3:9d:66:a3:7e:aa:
d0:88:fe:b3:33:a5:5c:b3:79:43:97:23:73:42:10:f9:b1:82:
64:f4:3a:fe:99:03:eb:46:55:cb:d7:b9:a2:bb:a3:00:77:35:
71:29:ea:6e:0b:b6:a2:5c:57:98:2d:df:de:c3:b0:de:91:66:
fd:60:94:0a:7a:43:a6:8a:85:f0:6d:0f:78:ba:f3:5e:3a:c9:
45:d9:b2:1c:ce:2b:a2:ac:2c:c3:4f:23:66:88:52:30:88:09:
3e:28:92:f5:9f:e0:63:ff:f6:9f:c6:80:02:1f:55:3a:52:80:
b6:21:b1:34:9a:5c:e6:ac:17:19:93:d2:db:91:91:80:c1:5f:
10:68:f6:63:7d:cf:8a:8a:7a:27:61:f3:bd:ab:d9:c1:04:5a:
e8:69:85:5c:50:ac:e2:4e:b2:d3:35:ab:0b:0d:3b:0e:d3:89:
2a:1c:cc:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSo6zdObxi3RKJmvG9ajSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjYwOTI0MTIwMTEzWhcNMjYwOTI1MTIwMTEzWjAzMTEwLwYDVQQD
EyhhNjY4YzBmYjhhZjkxODJmYzgzMDNiY2IwZWRjNDQzZGZhZWE0NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HrKG4J29LBR+dDii8kTIoAMFzH+
/7DZF+UK4gv35tTwW9wJ0mVE+oF0x2pn4KRxQIOUvNImahe1utmJQNXLhtjlDevw
muRPGkK5wwA53MZ+Spu0ETm+ALa0mhXrtJcepPQgQPk7WYqMjmHuvq7YYA98CxX3
7uCQuIT1QMwvwgiGeFMhjK4QjVY9o4oX/fClpTcUUOxOC969AFEh1QGFwlB8Wd7R
KuffzRdbWui1a10NgNyCMbqrWJ10x3KoBei8IMpHdCf0BOymC49xo+GvSYuf922N
Mu4fQQFSfVl68lohGoOzlU3bK4apnxrOXS3yR4jhju1MDZK+zLkNYAEiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZowPuK+RgvyDA7yw7cRD366kR6MB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA44LKV9Ju
5CsH7UqDnkwCjykO5PjAXlbleOHmxpCt1Zams3PY1ajuVsByyrOAOHbcKK83fUSl
1QzqLm46pNw/hLubfflLwX/yEDgviPzAy4Q+Oc1q051mo36q0Ij+szOlXLN5Q5cj
c0IQ+bGCZPQ6/pkD60ZVy9e5orujAHc1cSnqbgu2olxXmC3f3sOw3pFm/WCUCnpD
poqF8G0PeLrzXjrJRdmyHM4roqwsw08jZohSMIgJPiiS9Z/gY//2n8aAAh9VOlKA
tiGxNJpc5qwXGZPS25GRgMFfEGj2Y33Piop6J2HzvavZwQRa6GmFXFCs4k6y0zWr
Cw07DtOJKhzMAw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:06:12 2026 by rpki-client