Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: YLNwIXFrSKj+Yo30fwM86jY9PP/fBmQ+hQBFh69c2ZY=
Subject key identifier: 3E:07:D4:C3:4E:F6:B1:E6:40:CB:A1:CD:ED:36:22:BE:48:29:44:9E
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019F9135F2B63993B09E08F71C6A81F73053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:59 +0000
Manifest this update: Thu 23 Jul 2026 23:00:59 +0000
Manifest next update: Fri 24 Jul 2026 23:00:59 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: OiTnSGw2S1Y8wh2uEP+mkGyLQOd7yd9HDp3D69caRiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f2:b6:39:93:b0:9e:08:f7:1c:6a:81:f7:30:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jul 23 23:00:59 2026 GMT
Not After : Jul 24 23:00:59 2026 GMT
Subject: CN=3e07d4c34ef6b1e640cba1cded3622be4829449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:53:e5:af:e2:6b:2c:2a:da:12:f2:32:ad:
7d:e4:01:f9:6c:43:38:41:23:12:84:9e:d9:1a:5c:
f9:53:c1:f5:96:aa:d8:67:d2:db:83:7d:48:0d:4d:
a9:2f:52:6e:f3:a3:3b:b8:d6:2a:c1:76:84:2c:71:
80:02:f3:66:7a:f0:45:63:c3:77:59:d1:c5:5d:f3:
19:3d:3e:b7:c9:b1:91:55:b7:9d:37:c3:6a:ab:dd:
98:3d:84:90:0c:d3:8d:93:08:17:41:1f:b6:3a:ab:
cb:de:f0:93:a2:03:bc:ff:d6:13:32:b7:f3:80:b4:
2d:b7:6d:cb:ee:16:21:3a:bd:c8:16:85:12:58:de:
4d:fb:ef:42:a8:80:d0:d0:85:57:06:92:75:2b:5b:
c8:c9:17:cb:de:79:67:3e:f8:89:57:69:b8:bd:d0:
f6:78:22:42:df:9b:41:78:f5:cf:89:5d:2c:4e:b4:
98:cb:fe:c6:69:18:fe:7d:0e:65:96:2e:88:20:40:
05:b8:3d:76:65:7e:98:46:08:54:46:ba:8d:45:9b:
84:d8:84:45:a4:a7:d1:05:8f:6e:7d:2c:54:4d:6a:
fa:ef:da:b5:5e:a1:c8:80:13:44:b0:4d:d3:25:d6:
35:10:14:0b:35:0b:a0:64:aa:7c:5f:fe:2e:eb:87:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:D4:C3:4E:F6:B1:E6:40:CB:A1:CD:ED:36:22:BE:48:29:44:9E
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:6f:dc:70:f3:aa:a2:a7:b7:c3:f1:8d:59:5c:44:14:be:
39:b8:47:1e:9b:4a:9f:61:f8:22:cd:2e:1a:d7:7d:44:3c:24:
e0:58:72:ed:0b:3c:bf:d5:a7:1c:14:b8:4b:05:6e:34:f0:ef:
2d:18:fa:72:21:a1:78:87:ef:66:1c:0f:0b:38:a0:39:05:ee:
8e:26:a3:14:53:54:b0:72:44:ef:3d:3f:8b:0e:26:49:b7:7f:
d8:ed:53:11:da:0f:15:c8:89:bc:c0:74:61:7e:46:bb:21:cf:
a8:8f:66:9c:6f:47:22:7c:d9:38:00:9b:99:35:be:7f:cb:1c:
c9:4d:7a:ea:df:17:69:91:74:27:4f:33:6c:fb:20:b4:80:4a:
ab:94:b9:72:5d:a6:0e:52:e3:77:6c:0c:2a:aa:77:9e:84:fd:
84:b7:2a:e8:4d:a3:26:48:9a:4e:ec:6e:04:ed:b9:13:8f:e8:
a0:aa:47:21:57:12:41:f1:08:33:bf:40:f8:de:1d:8c:e0:77:
33:c9:4a:68:59:49:b4:ce:46:74:54:f9:99:b6:b7:b0:65:a7:
4d:66:a3:de:7d:5e:01:a9:21:fb:f7:0f:96:93:35:dd:8a:0a:
a4:b0:bd:7f:91:21:0e:e7:8c:77:e8:31:26:91:24:6e:b5:09:
6e:e6:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:25 2026 by rpki-client