Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: /8M3ZnVS25XS0XYRtaLJDEojpy4q1nAbsL4HbqlYh8c=
Subject key identifier: 75:1B:C3:E7:29:7C:EC:17:1B:D6:F7:5D:44:1C:27:90:50:9B:6F:7C
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019CAD909B08ED796A1B210017FE1F84D6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:01:01 +0000
Manifest this update: Mon 02 Mar 2026 08:01:01 +0000
Manifest next update: Tue 03 Mar 2026 08:01:01 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: YYqeY+KRXsetnJbT5d4cqg1mBFymqffnrHSzszqyUPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:9b:08:ed:79:6a:1b:21:00:17:fe:1f:84:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Mar 2 08:01:01 2026 GMT
Not After : Mar 3 08:01:01 2026 GMT
Subject: CN=751bc3e7297cec171bd6f75d441c2790509b6f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:7a:52:11:6b:12:b9:ef:b6:99:5d:39:e3:
ec:25:04:c1:1b:2c:fb:97:5d:44:22:f5:b6:47:d4:
e2:a1:17:d2:46:0f:e1:7b:a1:fe:9e:76:d2:15:6c:
68:9b:28:ad:eb:4b:41:c9:38:0a:77:85:ee:44:54:
8f:6e:7a:b2:7a:c3:7a:d7:95:e4:c7:9d:d5:31:0e:
c3:10:88:51:d0:41:bb:77:15:df:0c:04:7f:2e:61:
e0:f6:9b:06:ca:d1:1e:c6:c1:74:00:6a:e8:70:ce:
43:14:14:21:fb:f8:43:ec:3c:9b:92:0d:0a:f7:35:
a8:a3:a3:67:2c:ab:33:4d:c1:b5:28:5d:26:64:6a:
0f:94:53:a9:29:26:f0:15:c8:9f:ac:01:96:d1:87:
c2:5a:51:31:2f:ac:b3:23:96:04:9d:90:b9:7f:12:
4d:7c:b6:fd:94:4e:e9:b4:04:fe:95:72:61:61:27:
95:cf:0c:69:4f:f0:d3:40:8f:8f:45:cc:e3:22:18:
8f:6c:71:32:35:9c:52:ce:e0:b2:3c:dc:da:1d:f3:
a0:0f:93:19:3e:4b:57:f4:80:fc:31:6c:29:0b:ee:
6e:a2:f5:97:88:ab:b7:5c:a3:5f:30:0a:e8:78:f5:
1d:29:c6:84:a1:70:2d:97:81:ca:5b:f9:c2:72:2b:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:C3:E7:29:7C:EC:17:1B:D6:F7:5D:44:1C:27:90:50:9B:6F:7C
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ec:2c:c9:a2:ac:7e:ff:4d:b1:31:d1:06:e1:aa:20:4b:38:
47:ef:05:fa:72:31:39:df:ea:e6:68:c5:af:02:f1:6b:8b:06:
d1:a2:ef:b3:54:c2:4a:b7:67:c0:be:42:79:d4:94:ba:06:8f:
89:7f:cb:ec:5b:58:3e:73:bc:9c:0c:da:76:b2:ac:74:f3:32:
04:48:b2:3d:96:a9:56:06:88:65:a9:94:86:14:98:5a:18:8d:
e6:72:27:07:00:44:46:6e:b3:0f:95:bb:f1:f0:38:64:bf:b4:
a3:bd:ca:65:85:72:2f:4a:b7:38:17:21:80:29:b9:16:06:0f:
3c:74:51:35:9d:16:f9:a7:da:6b:26:55:89:61:1d:bb:55:73:
3f:ff:74:ae:e8:72:fe:d6:36:d4:29:58:a1:d5:c3:89:c5:7e:
a7:af:b8:e3:3d:4b:16:59:f0:c8:e9:77:38:75:e3:94:a7:b8:
21:4b:6d:ce:f3:c2:dc:6f:78:4f:58:42:ca:e7:ba:4f:1b:05:
8e:ff:4c:d4:90:13:9e:ac:8e:86:0d:e1:97:fd:54:bb:5d:be:
60:20:4d:dd:cc:88:e7:61:9d:53:b7:2e:64:fa:7a:ac:19:1c:
01:54:84:ce:80:5d:2a:a8:c3:8b:d1:74:19:b3:cc:69:b0:df:
70:24:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:15 2026 by rpki-client