Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: TICP3sKOgqkjvMl+1LDErxC/7NYPihQwIP+MiI5ED4A=
Subject key identifier: 8E:09:C4:3F:38:FA:11:20:6D:B0:B7:11:70:A6:1E:E7:78:67:B8:D0
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019FA9E324DAC0073F1C52600086D6D3D72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 18:01:03 +0000
Manifest this update: Tue 28 Jul 2026 18:01:03 +0000
Manifest next update: Wed 29 Jul 2026 18:01:03 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: UfyK7pid6rTs67yM7KgibpS320OFm7tSlp4zqM1GNvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:24:da:c0:07:3f:1c:52:60:00:86:d6:d3:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jul 28 18:01:03 2026 GMT
Not After : Jul 29 18:01:03 2026 GMT
Subject: CN=8e09c43f38fa11206db0b71170a61ee77867b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:96:7a:4b:dc:c8:cf:cf:0c:72:a5:64:5b:
11:81:16:a2:98:50:d0:7a:b8:b7:8c:f7:e6:e1:df:
91:74:51:da:03:cb:b3:64:99:70:01:87:c8:06:39:
85:32:8f:a2:80:33:26:2a:66:86:ca:18:92:91:65:
bc:a8:9c:c3:72:2d:9e:fe:81:13:5f:0d:4d:19:3d:
ae:5e:dd:c7:32:f9:77:2a:9d:9a:81:b8:4e:0e:49:
9d:22:79:15:bc:a7:11:d4:37:90:b8:57:ed:41:6e:
f0:35:5c:6d:4d:79:00:07:db:3d:e7:33:b5:df:e8:
2b:3a:1c:45:08:c2:40:25:52:27:2d:4a:53:86:83:
4e:a1:a3:e7:35:49:a4:fe:b0:c8:80:65:ae:f9:04:
79:d6:da:ad:bf:a3:98:8d:53:48:e1:cc:04:4d:6e:
76:c8:e4:33:b0:fb:3a:a9:7e:bd:38:fc:e9:82:3f:
4d:be:31:56:c8:34:b0:5b:d4:c1:e8:3b:43:19:1e:
59:22:00:d7:7e:61:e7:84:4e:2c:ca:fd:f1:51:0e:
98:16:f7:69:c4:cf:84:46:cd:52:fd:e8:de:30:30:
c9:de:a1:06:88:2c:06:59:10:9b:ff:2e:6f:55:b7:
4c:83:07:21:b1:9f:fc:68:9d:a7:95:f9:ff:d0:fa:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:C4:3F:38:FA:11:20:6D:B0:B7:11:70:A6:1E:E7:78:67:B8:D0
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:ea:7d:53:3f:0d:86:1a:1a:a5:d6:16:c6:6a:a3:df:40:
69:2b:f1:14:d3:e2:72:60:51:7a:dc:cc:e3:9e:eb:d6:48:2d:
86:d0:4b:5c:c7:69:51:40:16:0c:d9:44:9f:78:c4:85:61:50:
0c:88:67:eb:d8:f7:ad:e1:ba:61:92:b8:95:4e:23:71:96:f9:
7f:b1:38:30:84:9c:04:83:8d:55:0e:cd:3c:cf:0c:1a:b8:6a:
58:6e:e8:cf:de:e9:94:f2:8d:fc:77:f9:96:dd:ff:e8:b2:7b:
16:ec:d2:10:90:5e:92:d4:37:1e:f9:35:5b:e7:b2:ad:16:30:
87:5b:65:aa:a5:6b:97:01:c2:77:1a:72:02:70:ab:4d:ef:f4:
c1:df:30:b7:d8:61:5b:57:32:b9:70:9f:1a:73:3c:16:1f:55:
0e:90:f5:4e:95:ce:8a:9f:81:f5:85:18:2a:d0:df:e3:e5:45:
ba:a2:70:1e:37:fe:7d:36:bb:8b:42:30:ff:85:16:fa:71:f4:
5d:d2:4e:6e:c4:2c:38:70:4a:27:67:84:60:b3:c1:eb:4b:1d:
9f:6b:5c:5f:ff:93:33:1d:b8:4f:a7:6f:ee:c3:f5:5a:27:5f:
f9:b2:e3:c3:11:2c:5b:ad:69:0e:5b:c2:d0:86:01:bd:97:e2:
13:eb:91:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4yTawAc/HFJgAIbW09crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjYwNzI4MTgwMTAzWhcNMjYwNzI5MTgwMTAzWjAzMTEwLwYDVQQD
Eyg4ZTA5YzQzZjM4ZmExMTIwNmRiMGI3MTE3MGE2MWVlNzc4NjdiOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutOWekvcyM/PDHKlZFsRgRaimFDQ
eri3jPfm4d+RdFHaA8uzZJlwAYfIBjmFMo+igDMmKmaGyhiSkWW8qJzDci2e/oET
Xw1NGT2uXt3HMvl3Kp2agbhODkmdInkVvKcR1DeQuFftQW7wNVxtTXkAB9s95zO1
3+grOhxFCMJAJVInLUpThoNOoaPnNUmk/rDIgGWu+QR51tqtv6OYjVNI4cwETW52
yOQzsPs6qX69OPzpgj9NvjFWyDSwW9TB6DtDGR5ZIgDXfmHnhE4syv3xUQ6YFvdp
xM+ERs1S/ejeMDDJ3qEGiCwGWRCb/y5vVbdMgwchsZ/8aJ2nlfn/0PqEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4JxD84+hEgbbC3EXCmHud4Z7jQMB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgbqfVM/
DYYaGqXWFsZqo99AaSvxFNPicmBRetzM457r1kgthtBLXMdpUUAWDNlEn3jEhWFQ
DIhn69j3reG6YZK4lU4jcZb5f7E4MIScBIONVQ7NPM8MGrhqWG7oz97plPKN/Hf5
lt3/6LJ7FuzSEJBektQ3Hvk1W+eyrRYwh1tlqqVrlwHCdxpyAnCrTe/0wd8wt9hh
W1cyuXCfGnM8Fh9VDpD1TpXOip+B9YUYKtDf4+VFuqJwHjf+fTa7i0Iw/4UW+nH0
XdJObsQsOHBKJ2eEYLPB60sdn2tcX/+TMx24T6dv7sP1Widf+bLjwxEsW61pDlvC
0IYBvZfiE+uRLg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:10 2026 by rpki-client