Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: 12CDX2ITPCECTtDo+i7PNDKBJlNiMSfzvp9E4V0bdYw=
Subject key identifier: AE:36:F7:10:B8:87:E6:93:68:34:C0:40:D8:FA:C7:D0:75:03:A6:BF
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019CE7123C15E9B6C55B65879933AFEECB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 12:00:57 +0000
Manifest this update: Fri 13 Mar 2026 12:00:57 +0000
Manifest next update: Sat 14 Mar 2026 12:00:57 +0000
Files and hashes: 1: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (hash: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc=)
2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: kisjLL5qdaaNdb02OUPSReUe4KfYRumrqkJ7kxebEdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:3c:15:e9:b6:c5:5b:65:87:99:33:af:ee:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Mar 13 12:00:57 2026 GMT
Not After : Mar 14 12:00:57 2026 GMT
Subject: CN=ae36f710b887e6936834c040d8fac7d07503a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:f8:a8:1a:54:09:2c:a8:06:21:88:f1:79:
5c:ea:f9:87:ae:fa:cd:25:66:78:ed:5f:90:91:c2:
ed:41:f1:0b:dd:e0:e9:00:5e:35:ef:7b:4c:17:4f:
2f:57:69:ff:95:ea:f0:ac:d7:df:1d:6c:e7:1c:2f:
10:b7:d2:1e:eb:e2:67:a1:c3:73:40:6d:61:b2:a8:
99:13:95:f3:27:72:62:35:f0:4b:29:09:0b:42:14:
e3:05:6d:43:eb:1e:76:12:99:a3:08:60:d2:b6:f9:
de:f3:5f:4b:b6:ee:ee:c2:89:2e:69:fb:48:5a:88:
bf:89:05:2f:e6:99:c2:c2:15:21:08:de:17:b6:d7:
02:73:ca:8f:4d:fd:fe:13:6c:c0:59:28:d1:7b:17:
b5:cb:84:a9:f9:a0:9b:2e:51:a3:87:08:df:17:ab:
69:a8:b9:a6:42:e3:fc:09:e2:e1:f7:87:0f:27:92:
18:da:7e:35:cf:4f:13:18:dd:c5:a2:7b:76:00:61:
84:5b:c5:64:b5:e2:3c:a4:73:db:8a:55:82:b4:c6:
2c:63:a3:b6:aa:39:54:69:bd:2f:84:69:c3:b2:35:
c4:27:c4:42:fb:c7:4d:0b:e3:92:e0:2a:2d:6a:0a:
59:e4:71:44:95:aa:25:94:4b:ff:36:fb:f0:84:dc:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:F7:10:B8:87:E6:93:68:34:C0:40:D8:FA:C7:D0:75:03:A6:BF
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:84:e4:13:fa:43:8e:06:1d:40:27:f9:6c:f9:0c:b9:8e:
e4:fc:c7:1d:01:a3:22:3d:44:7f:83:fe:37:8b:79:3c:78:45:
27:73:1a:93:7d:d0:04:56:b5:ea:43:6d:8b:ab:c4:74:3c:e3:
bc:ef:76:ea:12:2c:9f:18:97:7b:ef:d9:59:e4:e9:e2:b8:f9:
45:7d:26:49:5e:bf:c6:a0:64:b6:25:9d:32:9c:09:d7:8e:39:
d7:29:5b:c5:dc:84:5b:bf:b0:aa:a9:b1:6f:37:1d:70:bc:d3:
bc:2f:80:fd:c2:bb:bb:e7:18:2d:cf:67:af:5f:86:3a:e0:eb:
cf:d9:9b:58:8d:4b:37:4c:cf:38:8b:a5:a3:46:39:2e:c5:c4:
b9:91:4d:a9:d6:30:31:5f:7f:94:0f:b3:ca:b5:e8:76:58:24:
6e:b8:3b:1f:0d:74:4e:62:5d:72:e8:bc:7c:8f:af:95:da:ea:
54:4b:38:ad:36:d0:66:41:69:f6:03:1e:c4:07:f3:64:71:9f:
03:af:f4:ff:ee:a0:e6:3f:34:81:81:4a:ea:41:9f:b0:4c:2c:
b6:dd:5d:f0:0f:95:7d:0c:cc:0c:83:45:c0:73:2c:58:bf:60:
73:f1:63:88:cb:fb:e8:a2:3e:55:14:34:4f:74:f4:9f:ae:53:
14:5f:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:22 2026 by rpki-client