Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: LOedip1xnPAQG6FJDyEbyEa1tVLstqrEpED4fC4b9wI=
Subject key identifier: C7:9F:0F:49:CA:95:55:51:29:1B:11:B1:A0:84:AB:A8:8B:2B:0A:7F
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 01A0D983A8BCF21718C3FE7C32AA90E193FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 17:01:19 +0000
Manifest this update: Fri 25 Sep 2026 17:01:19 +0000
Manifest next update: Sat 26 Sep 2026 17:01:19 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: trJFhupifqwXJxP7wZgeaTnpTLj4oFXLiLoZOOEYb8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:a8:bc:f2:17:18:c3:fe:7c:32:aa:90:e1:93:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Sep 25 17:01:19 2026 GMT
Not After : Sep 26 17:01:19 2026 GMT
Subject: CN=c79f0f49ca955551291b11b1a084aba88b2b0a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:4f:9c:56:1d:8f:17:ed:e3:a7:60:ce:db:
f3:3a:ef:7a:3a:0e:85:f6:de:97:82:37:95:13:52:
31:d1:a5:2d:56:75:cf:cd:a6:c7:ba:2a:9f:c2:31:
1f:7e:3f:87:ea:88:6d:c3:23:9a:97:df:f3:0b:34:
42:e2:3f:d3:b4:09:af:79:a8:97:a6:3d:aa:cf:23:
fa:4b:e9:79:9e:03:ce:6d:a0:1f:3e:ac:b1:df:99:
a3:8a:05:c3:8f:bc:34:84:de:4b:67:8b:aa:5c:1d:
07:17:c7:17:f2:a5:ee:3f:3a:f8:92:65:52:17:39:
f9:a3:a3:7e:be:47:fe:00:06:20:78:d0:a9:88:0d:
27:c0:e2:0f:57:aa:74:5a:48:a6:d4:93:30:49:77:
d1:8d:3a:22:fd:a4:c9:fe:b6:2a:fd:ee:35:8f:bd:
c4:c9:5a:5f:52:94:f0:c6:88:b4:9d:4b:c7:23:c4:
89:93:87:4d:a5:39:e9:da:11:1d:53:4f:8c:b3:96:
e6:1f:e4:bd:86:a1:10:37:2f:20:84:3a:d5:9c:49:
3b:4a:8e:2b:c4:23:c9:e3:fd:47:87:a9:af:71:d2:
9c:3a:3f:6c:29:8d:a0:f9:6e:1f:e9:61:4c:d0:48:
69:67:30:f4:1d:17:15:42:7e:0b:65:52:e7:2f:8d:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:0F:49:CA:95:55:51:29:1B:11:B1:A0:84:AB:A8:8B:2B:0A:7F
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:72:fe:34:d8:76:58:ff:a3:f7:00:34:9c:0c:a6:03:65:0e:
cd:36:48:c3:59:63:87:7e:cb:ba:fb:f8:de:2f:98:0c:37:0f:
47:b2:6b:f2:87:f1:8a:8c:56:73:51:9d:80:41:09:af:0f:fd:
b3:67:f9:53:04:d7:d9:07:44:5f:d7:17:59:d5:85:6e:3c:ae:
36:64:67:f5:13:b0:92:42:9b:d0:52:cf:c4:a1:66:a3:4a:ad:
66:35:73:bd:c9:48:f9:bb:ff:ad:21:0d:88:4b:e5:72:c3:93:
4b:94:08:8a:99:8b:b8:f8:32:fd:f2:3e:68:06:d4:f1:0a:20:
1d:73:87:75:cd:47:92:4d:69:64:bd:75:aa:2f:72:14:2d:98:
09:3a:da:37:fe:9e:f6:58:4f:2c:aa:de:f4:35:74:20:77:dd:
ff:8b:5b:9a:4d:0c:05:5b:d7:00:6f:80:34:4a:b7:d8:36:e6:
b1:14:63:db:5c:5d:96:b9:78:2e:6f:c9:bd:9e:aa:a3:02:fd:
9f:af:e4:07:86:0f:8e:84:b3:65:9d:e6:7d:8d:7a:e4:2b:2e:
e4:fa:af:d8:a9:5e:5a:5e:b0:2c:00:7c:b4:5c:f5:59:71:16:
5e:71:62:05:6d:cb:d6:e8:95:be:35:0e:69:3c:0c:62:b3:98:
08:b8:3a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg6i88hcYw/58MqqQ4ZP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjYwOTI1MTcwMTE5WhcNMjYwOTI2MTcwMTE5WjAzMTEwLwYDVQQD
EyhjNzlmMGY0OWNhOTU1NTUxMjkxYjExYjFhMDg0YWJhODhiMmIwYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBPnFYdjxft46dgztvzOu96Og6F
9t6XgjeVE1Ix0aUtVnXPzabHuiqfwjEffj+H6ohtwyOal9/zCzRC4j/TtAmveaiX
pj2qzyP6S+l5ngPObaAfPqyx35mjigXDj7w0hN5LZ4uqXB0HF8cX8qXuPzr4kmVS
Fzn5o6N+vkf+AAYgeNCpiA0nwOIPV6p0Wkim1JMwSXfRjToi/aTJ/rYq/e41j73E
yVpfUpTwxoi0nUvHI8SJk4dNpTnp2hEdU0+Ms5bmH+S9hqEQNy8ghDrVnEk7So4r
xCPJ4/1Hh6mvcdKcOj9sKY2g+W4f6WFM0EhpZzD0HRcVQn4LZVLnL43J1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMefD0nKlVVRKRsRsaCEq6iLKwp/MB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenL+NNh2
WP+j9wA0nAymA2UOzTZIw1ljh37Luvv43i+YDDcPR7Jr8ofxioxWc1GdgEEJrw/9
s2f5UwTX2QdEX9cXWdWFbjyuNmRn9ROwkkKb0FLPxKFmo0qtZjVzvclI+bv/rSEN
iEvlcsOTS5QIipmLuPgy/fI+aAbU8QogHXOHdc1Hkk1pZL11qi9yFC2YCTraN/6e
9lhPLKre9DV0IHfd/4tbmk0MBVvXAG+ANEq32DbmsRRj21xdlrl4Lm/JvZ6qowL9
n6/kB4YPjoSzZZ3mfY165Csu5Pqv2KleWl6wLAB8tFz1WXEWXnFiBW3L1uiVvjUO
aTwMYrOYCLg6Cw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:09 2026 by rpki-client