Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 9SCywgGPXj6cUmuzOnOZ3k0vnc7K7ojGp8BuFzEYyNA=
Subject key identifier: AC:23:2D:29:7F:FD:5D:F7:A2:10:B6:31:E8:F0:21:44:CE:2E:1C:DA
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019D292943753AAFEC505FED8A2BAFE5D399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:03 +0000
Manifest this update: Thu 26 Mar 2026 08:01:03 +0000
Manifest next update: Fri 27 Mar 2026 08:01:03 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: 8qoZy0KaHlVUI2uT+WRGMbiGbNrRbk3PMRQRj/YUJpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:43:75:3a:af:ec:50:5f:ed:8a:2b:af:e5:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Mar 26 08:01:03 2026 GMT
Not After : Mar 27 08:01:03 2026 GMT
Subject: CN=ac232d297ffd5df7a210b631e8f02144ce2e1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:0d:d1:3e:4a:61:aa:f8:2b:c4:24:d8:90:
34:c1:7d:c2:d5:17:29:cd:a0:1b:cb:5d:77:d8:6e:
b1:9f:b9:bd:f2:61:45:fd:03:8a:39:2c:c4:f6:e4:
81:9e:c1:0d:06:ca:e3:8c:6f:3c:7a:b4:7b:51:ba:
fb:72:bb:d3:a8:8b:7d:64:ee:09:91:0f:53:c0:d3:
b1:3e:07:74:9a:7e:0f:48:dd:58:0e:29:3f:e3:75:
b9:a2:73:e2:11:74:0e:54:17:ce:20:3a:e2:55:c7:
0a:ce:3f:49:70:59:6d:11:23:6c:bb:b2:70:80:70:
d6:f9:6a:e6:0c:1c:2e:e5:ea:4a:74:94:74:bf:c7:
86:16:a9:8f:52:11:e5:77:d4:67:91:6b:51:bc:17:
4e:f5:24:34:0a:c9:ab:7c:29:65:5c:77:06:c7:bd:
6a:63:39:31:50:9b:88:9b:d9:36:c6:4e:a9:2a:86:
a8:0b:b6:49:b6:c1:05:75:06:1e:fa:66:cc:7f:a6:
6c:cd:dc:76:9d:e0:32:aa:84:16:02:f3:c8:39:36:
38:f7:7c:3c:31:cc:40:8b:d2:86:4f:98:ce:1b:fd:
83:ff:48:69:ca:fb:8c:44:3a:64:42:5b:04:54:da:
87:2f:17:8d:fc:57:2c:4b:94:40:55:02:93:be:60:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:2D:29:7F:FD:5D:F7:A2:10:B6:31:E8:F0:21:44:CE:2E:1C:DA
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:35:2e:61:f7:f6:cb:42:8b:c5:cc:e5:11:62:0d:a5:8d:65:
8c:d4:6c:83:fe:c9:80:ca:94:c6:cc:46:61:bd:be:a7:7a:8d:
5d:52:56:7a:ac:fe:55:96:d1:cb:31:53:47:a5:93:5c:a7:29:
10:4f:14:b6:2e:0d:dc:da:37:d4:0b:4f:8b:91:35:08:f9:9a:
2e:4d:98:25:55:7b:cc:4e:a2:eb:e3:80:68:3b:ef:03:31:a6:
94:85:25:01:b4:36:d4:6d:38:1d:6c:7b:57:c0:43:36:9b:02:
46:08:31:78:ba:20:41:38:b7:d5:47:d4:cc:c8:92:ad:ba:35:
86:b1:29:12:f7:58:b4:aa:85:82:b8:24:ed:79:9e:cb:31:83:
94:6a:03:16:fc:44:44:4a:61:2b:b7:60:9c:73:7f:e8:74:d6:
9b:05:a8:01:a2:59:a6:b0:ec:fd:c3:dd:65:53:59:4b:a8:44:
39:71:58:8b:a1:03:85:f3:52:68:27:7d:c3:77:dc:df:ff:c6:
9a:94:c1:5c:8c:76:36:83:63:d8:14:b1:1e:05:e7:50:73:72:
7f:69:99:e2:92:12:19:78:18:a3:c1:07:77:64:1f:7d:82:88:
de:81:b2:9b:7b:d9:a0:12:66:e3:a4:bd:60:b3:38:d4:1c:ec:
2b:7c:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:41 2026 by rpki-client