Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: ARlRK79TNsLmuf/78lzXs8qcYi2R8UAulxrXzhz4cfY=
Subject key identifier: 7B:61:09:D6:DC:E5:EE:A6:90:A4:47:03:70:FA:96:76:D6:73:21:FF
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019DA453D70C153187AA6F2A1B774D39048A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1859
Signing time: Sun 19 Apr 2026 06:00:51 +0000
Manifest this update: Sun 19 Apr 2026 06:00:51 +0000
Manifest next update: Mon 20 Apr 2026 06:00:51 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: qI70N8bpTSEb2LDqjQdeGsUnYbcXqE094wUWBoWgUkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:d7:0c:15:31:87:aa:6f:2a:1b:77:4d:39:04:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Apr 19 06:00:51 2026 GMT
Not After : Apr 20 06:00:51 2026 GMT
Subject: CN=7b6109d6dce5eea690a4470370fa9676d67321ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:80:df:99:dc:1f:3a:40:a4:6b:04:c6:03:
dd:13:0a:3b:a7:50:54:75:c5:03:03:28:41:e8:49:
c2:5d:12:00:e4:52:4d:b1:68:7f:67:e6:fe:a5:b9:
eb:98:45:65:f3:20:d3:3e:5d:63:29:b8:6a:4f:69:
f4:68:72:0f:87:6b:bf:e1:34:cb:0a:14:4e:1e:86:
cb:95:a8:cb:b7:e2:94:ef:1c:06:a0:f5:59:13:4c:
e2:e3:30:1c:23:75:86:f2:2f:9a:01:92:f6:02:55:
a1:21:83:39:cc:03:30:1c:f1:25:07:8f:28:42:c3:
06:d6:3e:e9:0b:64:39:0d:fc:69:96:20:53:7e:a7:
e7:81:67:24:58:af:73:de:70:13:59:bc:69:f4:c4:
df:8b:17:68:94:19:f0:52:b5:bc:8e:f3:37:b6:32:
b9:31:ab:5f:36:b5:3d:a1:3a:3a:4f:b7:d8:18:fc:
cf:93:3d:83:12:b8:94:6d:da:bf:59:21:e3:82:f9:
29:2a:b0:fd:3b:a9:64:86:a9:f8:28:c4:56:f1:0e:
ad:c4:c0:e9:b0:fe:de:fc:9d:d4:58:39:87:0d:6c:
d1:f9:f7:a2:73:b3:ea:ef:04:94:64:53:af:06:5d:
cd:dc:d6:0a:50:da:df:ed:bf:b0:83:96:5e:68:0e:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:09:D6:DC:E5:EE:A6:90:A4:47:03:70:FA:96:76:D6:73:21:FF
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:eb:6e:59:e9:7a:30:70:ec:9f:83:b3:b9:00:f8:bd:dc:
3d:ab:07:ab:6e:d5:74:c9:0e:2a:c1:ba:ce:82:cf:13:07:6b:
77:c1:ba:52:b0:09:92:2b:70:ca:40:fe:ac:c1:0a:42:5b:a6:
4b:c3:46:3d:dc:55:32:0a:b8:dd:96:34:96:e0:95:21:69:24:
7e:a9:4b:33:3b:90:b1:ae:fb:82:c4:d3:2a:f7:38:58:4e:f9:
a5:59:fb:9e:7d:15:9a:17:80:b1:f2:32:e7:51:f5:b1:9c:e5:
05:ee:f5:2b:f0:39:a9:5b:3a:46:8d:e7:eb:86:ce:2f:db:8f:
2e:4d:3e:8d:42:64:b3:2b:10:b4:7c:a2:6d:f6:75:9e:b2:5e:
62:09:cd:58:5f:ba:a8:d1:12:31:c1:e7:30:2d:eb:4b:53:da:
95:63:1c:a8:fc:1f:66:32:08:dc:06:34:f7:72:5d:a7:65:60:
8f:93:ab:29:68:d9:e3:0e:f1:4c:a9:00:5c:b1:27:ac:77:f5:
3e:8d:c1:55:dc:23:a5:0e:df:ce:8c:f7:a0:c1:a4:1e:35:cf:
41:a9:6c:31:fc:45:2c:d4:0b:78:ab:a3:6f:c8:ce:81:84:94:
1d:14:7c:ab:8e:ff:d6:d1:af:2e:ef:ae:c4:3a:cc:b9:9b:23:
20:57:6d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU9cMFTGHqm8qG3dNOQSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjYwNDE5MDYwMDUxWhcNMjYwNDIwMDYwMDUxWjAzMTEwLwYDVQQD
Eyg3YjYxMDlkNmRjZTVlZWE2OTBhNDQ3MDM3MGZhOTY3NmQ2NzMyMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42KA35ncHzpApGsExgPdEwo7p1BU
dcUDAyhB6EnCXRIA5FJNsWh/Z+b+pbnrmEVl8yDTPl1jKbhqT2n0aHIPh2u/4TTL
ChROHobLlajLt+KU7xwGoPVZE0zi4zAcI3WG8i+aAZL2AlWhIYM5zAMwHPElB48o
QsMG1j7pC2Q5DfxpliBTfqfngWckWK9z3nATWbxp9MTfixdolBnwUrW8jvM3tjK5
MatfNrU9oTo6T7fYGPzPkz2DEriUbdq/WSHjgvkpKrD9O6lkhqn4KMRW8Q6txMDp
sP7e/J3UWDmHDWzR+feic7Pq7wSUZFOvBl3N3NYKUNrf7b+wg5ZeaA52nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHthCdbc5e6mkKRHA3D6lnbWcyH/MB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5/rblnp
ejBw7J+Ds7kA+L3cPasHq27VdMkOKsG6zoLPEwdrd8G6UrAJkitwykD+rMEKQlum
S8NGPdxVMgq43ZY0luCVIWkkfqlLMzuQsa77gsTTKvc4WE75pVn7nn0VmheAsfIy
51H1sZzlBe71K/A5qVs6Ro3n64bOL9uPLk0+jUJksysQtHyibfZ1nrJeYgnNWF+6
qNESMcHnMC3rS1PalWMcqPwfZjII3AY093Jdp2Vgj5OrKWjZ4w7xTKkAXLEnrHf1
Po3BVdwjpQ7fzoz3oMGkHjXPQalsMfxFLNQLeKujb8jOgYSUHRR8q47/1tGvLu+u
xDrMuZsjIFdtiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:26 2026 by rpki-client