Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: +GolwGB0WJ7aCYntIE8PuICdhN6G73SaNgOL5p0EynI=
Subject key identifier: AB:32:2E:F9:D9:B0:8A:9B:87:7C:DA:79:34:EB:DA:56:D1:4D:BC:B3
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01A0C1E842228C5F6A0C4123E3D67DCDF869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 19F6
Signing time: Mon 21 Sep 2026 03:00:18 +0000
Manifest this update: Mon 21 Sep 2026 03:00:18 +0000
Manifest next update: Tue 22 Sep 2026 03:00:18 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: 5SbulyafuAD95o6BpuqlB2u/Bb8QMn6Ez/1h4Djn1sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:42:22:8c:5f:6a:0c:41:23:e3:d6:7d:cd:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Sep 21 03:00:18 2026 GMT
Not After : Sep 22 03:00:18 2026 GMT
Subject: CN=ab322ef9d9b08a9b877cda7934ebda56d14dbcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:f4:09:80:75:d2:93:04:7f:61:90:8c:b7:
42:d7:d4:ae:c5:93:bf:b9:8e:12:1b:e1:48:b1:06:
64:00:b0:32:e8:ef:bf:44:33:84:8e:6e:96:2e:56:
1d:14:47:ce:ad:26:dc:53:2c:ce:16:16:e6:09:48:
c4:5f:04:a7:2c:43:66:ca:42:d6:a4:9c:35:1a:85:
49:bc:20:42:ab:2d:ce:ca:9d:2e:de:75:7a:f6:7a:
bb:52:55:9c:67:2c:f0:ce:8e:c7:20:0c:64:90:ca:
4e:3f:80:80:1f:57:1e:98:a8:db:c3:5c:62:e5:77:
ab:d0:59:fe:0a:d7:90:b0:61:1a:65:21:75:6c:2f:
99:3c:da:2f:49:ac:ed:18:a3:12:05:32:b0:c9:01:
f1:69:b3:5f:1d:6b:04:bf:48:10:75:67:a5:2e:b5:
47:85:5c:f1:05:ae:a1:a3:ed:44:7d:23:fa:06:70:
32:27:a0:e2:93:28:8b:16:7b:96:58:41:02:9e:b4:
b0:6a:02:e7:18:3d:f9:29:5d:f0:5a:0d:a5:16:35:
ef:96:79:54:ef:1a:0b:2d:94:92:6b:e0:49:ce:15:
23:54:69:2d:cb:b2:15:95:29:6f:91:94:2d:7c:51:
94:96:52:dc:41:0d:1f:84:6c:5c:2c:81:bd:6e:0c:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:2E:F9:D9:B0:8A:9B:87:7C:DA:79:34:EB:DA:56:D1:4D:BC:B3
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:70:89:c6:d4:90:4a:40:b4:65:ea:00:77:98:7e:e5:1d:
30:32:4a:3f:9b:74:6b:ce:dd:33:6b:8a:af:25:35:6f:22:4f:
82:e6:b4:c5:7f:07:56:3e:0c:9d:74:30:db:d5:01:bf:08:a7:
32:0c:82:b8:cb:01:df:7d:6a:61:73:74:71:16:a6:a4:72:5d:
f9:f3:4b:b3:f2:41:3f:1e:64:bf:12:bf:4a:44:46:17:94:79:
19:11:b8:21:67:d9:58:4d:0c:98:42:38:6f:88:60:1e:5c:1b:
81:40:22:84:bb:91:1f:6b:d2:01:4e:4b:df:48:22:e0:3f:a6:
21:f5:50:62:88:c9:31:e1:d7:68:6c:e4:4b:90:5e:58:18:aa:
50:50:cb:15:bc:86:18:a7:26:06:e0:7d:cb:85:f2:85:3b:9b:
3d:ec:4f:42:f8:6e:a0:d6:b8:af:cf:9c:0c:34:f2:07:17:43:
48:6e:d2:99:a2:2c:20:2c:3b:2b:6e:6a:33:e9:8a:54:55:7f:
57:eb:09:36:79:df:ec:a5:9a:91:d1:d0:b8:0c:0f:4b:ce:41:
9c:ae:2e:84:c2:1d:96:63:b4:55:5b:9e:1f:c2:8e:5f:a2:20:
9a:62:cf:13:0d:97:a1:da:38:ee:93:e6:1f:33:a7:df:95:1e:
1f:9e:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:16:07 2026 by rpki-client