Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: 41fYsZ+k89kp/gS7Je/M8R50hfpqCKMqgrDpB1sfgRA=
Subject key identifier: 03:46:45:6F:F8:70:42:7A:19:01:7B:C5:B7:2B:B5:8F:1F:65:C0:FF
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01A0CD7F07728EE3EE59EBBB192E65B6F361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 09:00:49 +0000
Manifest this update: Wed 23 Sep 2026 09:00:49 +0000
Manifest next update: Thu 24 Sep 2026 09:00:49 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: zx6RJRugEmyznF3I+ZMeKMEKKdhJhDj1YYw4GER6trU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:07:72:8e:e3:ee:59:eb:bb:19:2e:65:b6:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Sep 23 09:00:49 2026 GMT
Not After : Sep 24 09:00:49 2026 GMT
Subject: CN=0346456ff870427a19017bc5b72bb58f1f65c0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:b3:59:29:1c:b1:06:ec:f9:5d:82:f1:33:
f4:aa:f9:ad:30:03:8e:aa:b8:1b:00:4c:9b:43:f9:
a3:79:bd:95:cf:b5:29:2c:17:6b:8e:90:d9:85:90:
63:e7:b7:ec:69:87:f7:b3:07:61:3e:88:35:85:cd:
b6:cf:ef:c0:c4:3b:5e:8a:e9:2b:88:a6:9f:b5:1d:
e7:b1:29:e8:39:93:b1:7f:c4:8a:b4:d0:d7:d5:a2:
de:00:fe:22:bc:fd:14:f4:61:7f:2c:f6:f1:8f:cc:
f7:78:59:ba:2d:c0:e2:80:f3:d0:88:f4:ad:5f:28:
42:76:43:4a:dd:61:ff:35:ad:6a:7f:1f:7b:22:f5:
98:df:53:a7:ca:55:18:2d:ed:a9:b3:42:79:60:f9:
0a:c2:fc:9b:70:10:ac:9b:11:bd:8f:30:b4:92:f3:
63:74:b3:c9:d8:90:4c:66:b1:11:ca:54:04:f5:56:
33:51:47:65:c5:c3:05:f1:2e:a1:f5:27:6f:1f:9f:
ed:9d:a7:52:c8:71:83:78:2c:f1:f2:b3:cb:8f:10:
31:85:71:1f:0e:fd:aa:0c:85:d6:98:b9:fc:d6:27:
5d:d0:6f:0c:63:9a:a9:87:f0:f8:fe:fd:b7:86:c3:
a7:29:2c:c4:51:ca:44:4b:11:fe:e0:75:be:21:8d:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:45:6F:F8:70:42:7A:19:01:7B:C5:B7:2B:B5:8F:1F:65:C0:FF
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:aa:ce:60:bd:54:88:fb:ef:41:09:7e:21:5b:ef:50:22:1f:
28:2b:8e:21:dd:cf:74:9f:af:96:45:b0:26:48:df:66:d8:d3:
d7:4a:cc:71:87:e4:6c:11:33:bf:e7:82:e3:14:a3:f3:9e:1f:
07:46:64:4e:23:6e:8b:24:f7:fe:48:7a:8d:cc:28:73:da:fc:
0f:05:99:80:38:47:35:fa:a7:14:7f:28:17:80:56:98:14:43:
14:4f:90:a9:90:f3:0a:f6:cb:93:f6:32:d1:6e:a0:c0:e8:a0:
15:c2:90:d8:c3:5a:43:f1:6e:ed:28:40:d6:7c:64:d9:bc:36:
37:32:e6:eb:8b:b4:70:69:3a:b9:eb:10:d9:13:54:ec:b9:dd:
70:a4:1a:e3:f0:b4:fd:1f:ed:48:9b:46:88:3f:6f:7a:e7:51:
95:99:50:e6:7b:fb:da:10:09:b2:9c:32:97:0d:ec:2f:c0:ee:
05:68:87:d9:df:10:d6:78:18:1c:0c:13:a2:81:87:62:d0:a4:
4b:fe:ec:62:e4:46:2a:8b:01:77:d4:d5:63:1f:c0:e3:58:42:
22:13:8f:cd:31:13:d1:c7:b5:89:fe:13:45:39:d1:10:7a:16:
9b:03:60:da:3d:40:15:26:60:9a:0e:df:fa:f1:8e:3f:87:f9:
28:7d:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:21 2026 by rpki-client