Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: 9tx5d+A8IMy7w84WODqaU83RhaplbSlLdvJHy99M1Cg=
Subject key identifier: 09:C8:BF:0E:93:94:B2:70:73:14:E1:0C:55:C5:BC:A3:F7:81:71:3E
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01A08BD60964D48DEF071DB8AA23848EEBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 15:00:54 +0000
Manifest this update: Thu 10 Sep 2026 15:00:54 +0000
Manifest next update: Fri 11 Sep 2026 15:00:54 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: /qKzYVIbAqpBku3/0jYngjlGwhQRJkPhaq4lpoujr+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:09:64:d4:8d:ef:07:1d:b8:aa:23:84:8e:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Sep 10 15:00:54 2026 GMT
Not After : Sep 11 15:00:54 2026 GMT
Subject: CN=09c8bf0e9394b2707314e10c55c5bca3f781713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:98:1f:75:4c:5d:1a:e4:73:b9:01:c9:ba:
4c:54:44:35:68:77:e3:9b:e8:2a:2b:1e:e8:b1:e6:
c7:3b:8c:fa:1d:09:87:df:2d:3f:e4:0e:26:06:62:
2f:2f:85:94:8e:d5:7f:d6:ae:7e:89:72:b6:b7:3e:
e0:ad:2a:f8:6b:e8:fa:0f:2f:61:79:42:28:08:14:
08:de:32:36:a4:ef:5d:d5:64:0e:ec:80:43:38:f5:
8f:cf:94:b9:a7:a7:a4:91:09:d8:27:92:21:03:98:
9f:2a:07:6a:dd:be:29:09:d4:15:27:0d:6f:5c:a8:
18:08:d7:4e:25:f2:ee:cf:f2:7b:d8:86:41:1a:00:
20:ba:50:7b:6e:0f:e2:4f:c7:45:b7:72:11:01:36:
90:a9:26:62:2a:7e:45:62:1a:b9:36:ab:d2:ac:02:
52:a9:25:2b:e0:3f:a2:9e:6b:26:02:2d:55:09:d5:
bf:0b:9a:41:b9:70:c4:c1:3f:76:48:85:99:10:af:
2b:03:b4:1a:92:92:57:d4:d7:1c:8a:30:5f:81:0b:
0f:10:48:c7:52:4e:18:77:8d:31:19:dd:bc:3d:a9:
e2:d5:2d:c5:a7:13:5d:dc:c2:99:f7:1a:51:af:9f:
2e:4e:9a:df:8c:b0:db:22:ce:71:35:85:bf:53:7a:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:BF:0E:93:94:B2:70:73:14:E1:0C:55:C5:BC:A3:F7:81:71:3E
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cb:19:af:dd:f7:d6:09:94:1b:18:49:55:99:6a:40:00:49:
05:31:1f:d5:c9:41:ab:19:28:8b:fa:3f:fb:63:13:78:b7:0b:
9b:f3:31:45:73:6b:95:9a:96:23:1a:aa:8c:82:4d:1a:d6:75:
97:2e:af:04:c4:9d:85:c1:5d:af:7f:5b:4f:a0:cc:a2:57:ba:
41:5d:f6:2f:59:f1:d8:3b:8b:8e:3d:5f:36:41:8d:24:bf:34:
7c:91:e0:e1:4d:64:da:26:83:3b:d9:5a:a4:0b:df:7b:1e:c4:
99:69:36:8d:b0:9e:15:e8:b4:68:c7:83:89:60:c9:a1:0b:bd:
a4:26:30:9b:6a:1f:df:9d:c1:45:74:ba:74:e5:d8:86:fb:00:
79:02:62:31:8f:b1:5a:8e:63:95:99:14:bd:b5:10:9b:e9:c2:
ab:91:68:65:29:5c:57:e5:5a:d5:4d:6f:60:a2:87:e2:60:02:
4c:c8:96:da:97:85:84:3b:3a:ca:ee:3c:c8:97:e7:bb:d6:b1:
4b:fb:be:35:a5:6c:51:7d:7d:97:c1:f6:fc:14:db:af:bf:99:
44:7c:d7:34:a3:b4:1e:47:51:81:6d:6e:4d:16:76:d2:19:b9:
b0:aa:4b:1a:0a:97:60:a8:82:ab:9c:dd:2e:c1:bf:f6:88:c3:
ba:62:7c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1glk1I3vBx24qiOEjuveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjYwOTEwMTUwMDU0WhcNMjYwOTExMTUwMDU0WjAzMTEwLwYDVQQD
EygwOWM4YmYwZTkzOTRiMjcwNzMxNGUxMGM1NWM1YmNhM2Y3ODE3MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8uYH3VMXRrkc7kBybpMVEQ1aHfj
m+gqKx7osebHO4z6HQmH3y0/5A4mBmIvL4WUjtV/1q5+iXK2tz7grSr4a+j6Dy9h
eUIoCBQI3jI2pO9d1WQO7IBDOPWPz5S5p6ekkQnYJ5IhA5ifKgdq3b4pCdQVJw1v
XKgYCNdOJfLuz/J72IZBGgAgulB7bg/iT8dFt3IRATaQqSZiKn5FYhq5NqvSrAJS
qSUr4D+inmsmAi1VCdW/C5pBuXDEwT92SIWZEK8rA7QakpJX1NccijBfgQsPEEjH
Uk4Yd40xGd28Pani1S3FpxNd3MKZ9xpRr58uTprfjLDbIs5xNYW/U3qoIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnIvw6TlLJwcxThDFXFvKP3gXE+MB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMsZr933
1gmUGxhJVZlqQABJBTEf1clBqxkoi/o/+2MTeLcLm/MxRXNrlZqWIxqqjIJNGtZ1
ly6vBMSdhcFdr39bT6DMole6QV32L1nx2DuLjj1fNkGNJL80fJHg4U1k2iaDO9la
pAvfex7EmWk2jbCeFei0aMeDiWDJoQu9pCYwm2of353BRXS6dOXYhvsAeQJiMY+x
Wo5jlZkUvbUQm+nCq5FoZSlcV+Va1U1vYKKH4mACTMiW2peFhDs6yu48yJfnu9ax
S/u+NaVsUX19l8H2/BTbr7+ZRHzXNKO0HkdRgW1uTRZ20hm5sKpLGgqXYKiCq5zd
LsG/9ojDumJ8Aw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:57 2026 by rpki-client