Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: 65Gwt9ni/v5dn3s9RHz44UnsA1rV73oVYp1NrA8Xtik=
Subject key identifier: 2A:BE:2F:36:20:34:ED:CE:B8:1D:FB:82:66:E2:D8:EC:E4:9D:CC:F3
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01A1DDCBA986F2491C553BBD353816911368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 06:01:14 +0000
Manifest this update: Sun 15 Nov 2026 06:01:14 +0000
Manifest next update: Mon 16 Nov 2026 06:01:14 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: akq1JEcOusxTMYZKjNjsPHbz6tj4sh+wc4D1kvEDNTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:a9:86:f2:49:1c:55:3b:bd:35:38:16:91:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Nov 15 06:01:14 2026 GMT
Not After : Nov 16 06:01:14 2026 GMT
Subject: CN=2abe2f362034edceb81dfb8266e2d8ece49dccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:40:c8:ed:b2:ca:63:48:f9:cc:92:07:71:
28:88:9b:2c:5d:92:0d:8c:a7:69:38:f9:62:d0:20:
b7:e9:40:ed:5b:db:68:92:d9:d4:d9:2a:b5:37:b1:
81:5a:38:75:ca:e8:52:b7:a7:b7:92:cb:10:ec:56:
51:0e:33:19:d5:39:1b:04:e2:f4:d4:d0:8a:1a:ed:
bd:f1:1c:ff:df:1c:92:33:e5:87:06:06:6f:97:bc:
85:0e:71:f4:65:21:10:67:69:e4:cb:bc:39:96:00:
28:79:06:e3:eb:12:32:a8:ad:95:98:2f:43:17:8d:
0c:54:6d:0f:d4:2f:82:b1:65:47:24:df:c0:b5:1c:
b1:ee:93:15:64:fd:96:0c:5f:38:2b:f6:51:5b:41:
1b:eb:24:59:5a:22:6b:53:40:0a:3e:54:c4:d6:35:
c8:65:56:ea:de:c8:70:04:5d:49:47:41:c8:1b:d2:
ac:62:09:a9:78:1d:cb:1d:eb:88:48:e0:62:8c:ac:
83:38:1e:8b:92:30:48:ec:1b:03:f1:7b:18:ee:ca:
86:65:09:f5:f5:17:56:11:12:e8:be:f5:76:dd:7d:
11:fd:27:dd:d1:38:d9:48:21:51:02:32:23:f8:46:
ed:14:73:fb:9a:db:2e:5b:02:30:f4:af:1e:36:c3:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:2F:36:20:34:ED:CE:B8:1D:FB:82:66:E2:D8:EC:E4:9D:CC:F3
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:17:3e:0b:54:75:98:86:5b:a7:2a:be:f2:3d:a5:bb:06:73:
d9:2e:c7:f9:32:f8:35:2a:3d:47:b2:7d:e1:47:90:d9:17:bb:
67:8d:5f:16:75:fc:5b:83:7a:5b:c2:aa:d4:0e:88:68:67:7d:
42:15:03:05:c0:f4:19:79:46:6c:c4:2d:f3:3c:98:51:2c:ba:
d6:c2:f7:1c:8f:31:92:5a:74:f9:ba:8f:d1:d5:e0:36:c6:5a:
72:fb:47:e6:c1:ed:c7:64:31:69:5c:f0:0b:60:01:45:e0:3e:
c5:76:54:17:9a:8a:4a:8c:d1:e4:9a:3d:b6:ef:bd:07:51:54:
ef:e2:22:94:bf:0f:c2:9e:b9:3b:20:63:54:cd:74:34:05:cb:
91:ca:56:b9:0a:8e:3e:05:13:3f:13:8c:4f:dc:d8:86:25:d6:
d3:1a:25:6c:d4:1f:c0:69:41:e3:3f:30:12:fc:a5:df:f3:97:
0a:05:f2:e2:13:21:b3:7e:fb:22:82:2e:cc:23:78:91:81:f8:
ae:4e:1b:bd:77:57:0b:b8:06:96:04:1b:0c:89:af:47:4f:59:
1e:54:69:de:b8:0f:62:82:72:2f:a6:79:9c:fd:b8:1a:4e:6f:
db:58:8b:71:2a:1e:25:59:e7:71:80:98:4b:d0:ea:a3:63:e1:
b8:2f:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:45 2026 by rpki-client