Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: ygo8ReUddXp7KF1QSnlw6IUGp9CozsaMGtzUyOvLdLI=
Subject key identifier: 0E:25:A9:E9:B1:CA:A6:C2:0D:BB:1F:5C:A5:47:D0:BB:60:A2:4D:25
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019FAC3F19B0DAE63398DFFC333C471FA7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 05:00:44 +0000
Manifest this update: Wed 29 Jul 2026 05:00:44 +0000
Manifest next update: Thu 30 Jul 2026 05:00:44 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: bzLWmbZbbGBpZqtoDPHoTo8nJ1dFGK9swDPvRlrjClE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:19:b0:da:e6:33:98:df:fc:33:3c:47:1f:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jul 29 05:00:44 2026 GMT
Not After : Jul 30 05:00:44 2026 GMT
Subject: CN=0e25a9e9b1caa6c20dbb1f5ca547d0bb60a24d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:f3:f2:11:5a:74:ba:2e:73:e6:87:50:9c:
64:aa:8a:38:87:64:cf:25:e7:6b:78:3a:76:c3:23:
2f:26:99:2a:e1:a0:38:f5:6c:d3:d6:d8:43:ea:30:
75:e8:dc:3d:91:45:34:ac:21:93:a3:5a:52:86:fa:
23:b4:25:61:ee:34:b4:2a:26:0a:03:2d:eb:bf:02:
2c:af:11:89:19:38:b7:ef:f8:1b:e3:d6:da:cb:32:
eb:9b:32:48:13:3e:68:05:42:c5:ef:0a:c6:2d:cc:
e3:b9:df:0f:c6:ab:8b:39:e5:8b:d2:80:ce:2c:9c:
09:16:2a:0d:50:ca:51:f7:e4:24:a1:1d:c1:8d:b7:
37:a7:d2:0a:4a:89:93:86:b4:44:13:92:83:6b:4a:
c2:29:72:dc:d1:70:ac:47:68:81:f5:8d:75:94:d1:
3c:b7:43:ac:b5:9e:57:1d:14:9a:1e:a8:e4:d7:d0:
18:6c:d5:d9:3c:34:ef:12:0d:c7:7c:ed:c2:c9:c5:
5f:0c:cf:fa:ba:41:13:a0:48:a0:a5:1b:bd:8d:d5:
e9:d4:9a:52:8f:0f:79:dd:9d:65:da:0c:d1:e4:77:
4b:18:06:05:87:b0:db:ff:6d:43:5c:84:4f:9b:d1:
00:ae:a3:66:be:b8:3b:4a:68:0c:3a:e5:24:0d:f7:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:A9:E9:B1:CA:A6:C2:0D:BB:1F:5C:A5:47:D0:BB:60:A2:4D:25
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:45:2f:19:5a:bc:fa:f7:78:df:53:fd:a8:82:66:90:bf:
b8:7a:00:2f:0a:34:3f:0a:46:9f:a3:02:9f:a6:ae:b4:38:64:
81:5f:03:5e:b7:49:b7:17:5b:3e:53:d1:81:fd:40:31:c6:56:
4a:19:75:dd:2c:34:e8:0f:39:dc:3c:4a:60:9a:6a:3f:37:fb:
fb:60:c4:19:49:b9:34:e0:0f:a6:ae:05:42:e7:29:a6:a4:39:
ab:dc:65:1c:50:51:e8:16:34:04:46:45:f2:98:b2:9c:34:84:
9e:13:62:73:e6:77:e9:b8:4d:9c:22:72:37:cb:3c:23:c6:35:
3b:0e:ee:23:dc:3f:84:95:8d:9e:8d:b2:51:15:f0:c7:46:e0:
24:55:2a:1b:30:40:0e:2c:47:30:ee:f2:57:09:a4:47:ed:a0:
50:0e:64:4d:9e:68:72:ee:d7:d3:32:8e:b7:04:83:da:bd:5e:
ea:ea:ba:ab:05:bd:99:d7:07:61:24:2d:34:3c:f7:a4:ea:94:
af:42:b9:c2:cf:38:66:ab:fa:03:93:74:96:c9:3b:b3:b3:16:
27:97:85:84:9c:d1:94:b7:a8:2a:9f:06:70:bc:81:16:3f:67:
65:ab:f6:a0:ef:60:b3:4f:ab:88:c4:33:3b:5d:b1:cf:1a:9a:
e7:b7:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:19 2026 by rpki-client