Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: bipucOTxP1NREaWGesZOzdVnF3ojBs1VDDfLuTFa8P8=
Subject key identifier: F3:F7:C7:74:8E:BC:FA:FF:1F:9E:D7:50:1D:38:76:50:D0:B8:30:02
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019E1E6C8983253832ACADC7CDA0507C62C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:29 +0000
Manifest this update: Tue 12 May 2026 23:01:29 +0000
Manifest next update: Wed 13 May 2026 23:01:29 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: H9c4DJ7tPvhmruE+0dGvFW5qv7NDujBJOC1Y/uga2ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:89:83:25:38:32:ac:ad:c7:cd:a0:50:7c:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: May 12 23:01:29 2026 GMT
Not After : May 13 23:01:29 2026 GMT
Subject: CN=f3f7c7748ebcfaff1f9ed7501d387650d0b83002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:34:f8:52:e6:4b:cd:79:01:50:c9:4c:99:
a5:38:bd:dd:38:d7:00:dc:7f:74:5f:e1:70:61:8b:
d5:2d:a8:3f:6e:c7:8b:32:51:2f:6e:4e:a0:1f:ab:
5b:14:be:62:36:b0:7d:8c:2d:e1:21:fe:52:2b:63:
27:70:68:53:4c:f4:40:69:f8:2a:e6:03:b6:a8:3a:
11:16:1b:9e:de:d1:60:42:69:bb:9c:65:07:9f:63:
75:32:1c:50:64:a6:4f:a4:41:04:4d:42:df:38:9c:
c0:c9:6a:02:ba:4a:4a:56:0a:bd:15:c4:a3:ef:5e:
a6:72:c7:e2:4e:0d:fe:67:d6:29:0a:33:74:de:1b:
8a:83:46:41:bb:4f:6d:9c:2b:9a:e3:3c:53:70:b2:
73:e6:2c:81:7c:ad:bc:af:f7:00:10:00:b8:25:14:
fa:29:2d:3d:73:af:aa:c9:69:75:b5:87:e5:42:cc:
e3:a2:c5:f2:45:6f:d8:3d:59:f2:72:d5:91:3e:c2:
16:88:5d:45:3c:80:dc:28:39:f7:71:2f:d2:63:18:
f3:82:22:8e:d7:3d:ef:24:f2:3a:5b:67:fd:25:7e:
57:43:b8:c3:04:35:55:96:32:b1:6e:1f:48:fc:b4:
90:df:8d:5c:4f:27:ef:92:b0:ec:dd:c3:bf:5b:ec:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:C7:74:8E:BC:FA:FF:1F:9E:D7:50:1D:38:76:50:D0:B8:30:02
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6e:ea:bd:38:1b:99:35:a1:c1:f9:ed:9e:da:31:4e:c9:9a:
26:77:41:33:9c:14:aa:d7:e9:5e:fe:f7:b3:75:c8:78:e7:56:
b7:20:fb:85:4b:2a:d1:05:4a:3e:1a:63:29:12:37:06:29:49:
56:0c:82:0d:2a:b3:2f:92:46:54:86:07:db:35:7f:a2:15:ab:
56:45:dd:7c:dd:9c:db:56:37:39:c3:8d:76:3d:e4:c4:de:52:
f3:23:20:96:6d:56:a9:bd:19:91:b6:cc:db:c5:98:d2:f0:a6:
95:2f:46:3b:88:fe:79:c9:08:2e:60:a4:c9:fd:ae:17:60:2e:
18:48:3d:2c:e6:09:7c:52:23:da:8e:f7:51:0c:d4:a3:fc:8f:
de:12:bc:a0:d1:bc:b5:51:2d:f5:42:ce:5b:a7:f6:56:c2:85:
d2:d1:52:30:99:29:4f:01:52:4e:77:12:6d:91:e2:2b:4d:db:
f1:aa:44:49:04:a3:02:d9:da:9f:42:d6:23:f4:ae:f3:e5:38:
81:f2:95:29:28:15:e1:f8:00:19:a0:bb:c1:39:14:31:fa:1d:
97:fc:4b:e3:58:ce:f5:41:4b:46:8e:4b:0c:77:ba:ca:c9:91:
d6:f4:e8:cd:cd:c5:ea:a9:ef:f7:5d:96:84:5d:87:4e:fc:0e:
ca:6f:75:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebImDJTgyrK3HzaBQfGLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjYwNTEyMjMwMTI5WhcNMjYwNTEzMjMwMTI5WjAzMTEwLwYDVQQD
EyhmM2Y3Yzc3NDhlYmNmYWZmMWY5ZWQ3NTAxZDM4NzY1MGQwYjgzMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwk0+FLmS815AVDJTJmlOL3dONcA
3H90X+FwYYvVLag/bseLMlEvbk6gH6tbFL5iNrB9jC3hIf5SK2MncGhTTPRAafgq
5gO2qDoRFhue3tFgQmm7nGUHn2N1MhxQZKZPpEEETULfOJzAyWoCukpKVgq9FcSj
716mcsfiTg3+Z9YpCjN03huKg0ZBu09tnCua4zxTcLJz5iyBfK28r/cAEAC4JRT6
KS09c6+qyWl1tYflQszjosXyRW/YPVnyctWRPsIWiF1FPIDcKDn3cS/SYxjzgiKO
1z3vJPI6W2f9JX5XQ7jDBDVVljKxbh9I/LSQ341cTyfvkrDs3cO/W+x0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP3x3SOvPr/H57XUB04dlDQuDACMB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW7qvTgb
mTWhwfntntoxTsmaJndBM5wUqtfpXv73s3XIeOdWtyD7hUsq0QVKPhpjKRI3BilJ
VgyCDSqzL5JGVIYH2zV/ohWrVkXdfN2c21Y3OcONdj3kxN5S8yMglm1Wqb0ZkbbM
28WY0vCmlS9GO4j+eckILmCkyf2uF2AuGEg9LOYJfFIj2o73UQzUo/yP3hK8oNG8
tVEt9ULOW6f2VsKF0tFSMJkpTwFSTncSbZHiK03b8apESQSjAtnan0LWI/Su8+U4
gfKVKSgV4fgAGaC7wTkUMfodl/xL41jO9UFLRo5LDHe6ysmR1vTozc3F6qnv912W
hF2HTvwOym91sQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:26 2026 by rpki-client