Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: h3XlpOlqv20r3h/2fcdHG7YquMJ8pzjjvm2fZSali38=
Subject key identifier: 77:69:FD:46:51:D9:32:6A:ED:0C:11:80:3A:F9:69:FD:48:F9:CE:46
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019DCED03B8C20D734ACF3563C637A5F1CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 12:00:46 +0000
Manifest this update: Mon 27 Apr 2026 12:00:46 +0000
Manifest next update: Tue 28 Apr 2026 12:00:46 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: W7N+EvUaqgbP5hGQIYyGn+nHGX+H+x2h1YLYKe1KxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:3b:8c:20:d7:34:ac:f3:56:3c:63:7a:5f:1c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Apr 27 12:00:46 2026 GMT
Not After : Apr 28 12:00:46 2026 GMT
Subject: CN=7769fd4651d9326aed0c11803af969fd48f9ce46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:19:31:12:00:c7:11:c4:82:10:89:d7:5e:
74:5e:7e:e0:46:eb:a7:47:14:55:d7:32:50:c9:69:
dd:18:02:7d:1c:4b:5f:05:c1:d2:40:01:76:5e:35:
fc:56:6b:b9:2e:e8:5f:ec:12:e3:c8:73:13:b9:11:
dd:df:88:62:e2:7c:53:b2:62:1b:88:56:49:66:b7:
b4:61:db:ad:3d:91:bd:cf:8a:26:e9:98:a2:53:11:
00:0a:f6:72:64:85:0a:a9:01:d1:88:48:b4:a9:d3:
50:7d:28:97:fb:a7:b0:87:1e:47:6a:5b:5f:fd:17:
ba:3e:59:3e:f4:ca:0d:b0:c6:27:46:fc:0a:a8:fd:
a0:e3:2f:46:d8:f9:8d:5d:ce:b7:aa:09:45:f0:6b:
98:65:42:c0:37:72:38:8c:57:b3:06:66:87:38:c4:
02:0e:57:18:07:5a:04:a6:08:b4:99:6e:34:8e:88:
d3:e8:12:ed:90:1c:4c:82:e4:0d:b6:00:b0:5b:54:
c4:77:9a:79:42:80:4b:16:a9:15:15:ec:f9:eb:7c:
e4:a8:5d:8c:cf:0e:25:b9:c6:3d:d7:e3:15:5b:b3:
ac:ea:86:8f:cb:04:30:ff:95:c7:d7:6b:45:45:fa:
86:fc:55:ca:1e:fb:39:bb:a0:c8:e8:84:21:df:44:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:FD:46:51:D9:32:6A:ED:0C:11:80:3A:F9:69:FD:48:F9:CE:46
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:95:01:99:a0:07:00:38:3c:a3:8e:16:ec:31:31:3c:10:27:
b6:2a:b0:97:d8:ac:49:91:50:c0:12:dc:c6:d3:99:0a:a6:aa:
f5:cc:d4:8a:b8:7e:f5:cd:9c:59:ca:90:fb:05:e9:76:b7:43:
b6:b3:24:b9:49:58:ca:57:cd:e1:26:fc:42:e7:0d:1a:06:ac:
71:44:8a:9d:59:be:74:49:d6:07:d7:c7:ed:68:33:22:8f:a5:
b6:89:3c:31:43:d8:35:51:cd:33:a0:50:d7:61:1a:3d:e2:2a:
c6:d0:18:8d:6c:88:05:2e:3c:07:e6:84:d2:02:7c:23:72:81:
87:5a:b0:9e:20:7a:87:c0:8e:d1:73:c5:50:9e:39:93:42:16:
38:44:04:0e:44:37:0a:38:19:d3:37:fe:31:94:00:51:2d:9e:
03:b2:7f:a9:73:19:1b:ca:05:24:d3:44:5a:3f:28:ed:8a:c5:
a4:e6:f9:03:27:f3:93:20:3a:25:c7:7c:b2:cd:f7:d9:ee:b4:
e8:32:ef:d5:16:14:1c:b8:3f:cf:cf:61:d1:4d:41:93:87:28:
24:cf:f0:69:e0:e2:1a:a9:fd:1e:99:44:77:92:29:8d:bb:19:
66:6a:9b:c4:74:eb:21:22:3f:2a:15:86:b9:f4:59:24:97:97:
20:87:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:28 2026 by rpki-client