Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: /VLqc58u4WVxjOvTyleDYThMixdOP2bqLL52TvOlFmQ=
Subject key identifier: BE:1B:16:6A:C5:38:C3:51:68:39:3D:38:F2:53:A7:42:69:06:99:A0
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019EC0A4554C1ACD88D879D22DD6941DC281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:55 +0000
Manifest this update: Sat 13 Jun 2026 11:00:55 +0000
Manifest next update: Sun 14 Jun 2026 11:00:55 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: UnB+L4hvpQP+OGxflxhHtp6rMiEutgVymEC9TDOAwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:55:4c:1a:cd:88:d8:79:d2:2d:d6:94:1d:c2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jun 13 11:00:55 2026 GMT
Not After : Jun 14 11:00:55 2026 GMT
Subject: CN=be1b166ac538c35168393d38f253a742690699a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:27:42:20:b9:68:3d:aa:f5:b2:83:5d:96:
b4:5a:e6:17:28:6e:5b:26:5b:8a:e0:15:ac:48:36:
e3:7c:47:2f:e8:71:0a:34:fb:c2:c8:55:2e:20:19:
9a:e6:f0:df:92:b7:51:94:5f:90:da:55:7d:a1:eb:
c1:30:fb:84:6d:4d:e9:19:3d:e9:93:49:d0:62:e0:
11:32:d3:b0:0c:f5:28:9b:3c:11:34:1b:e6:30:68:
94:f1:51:3d:ae:17:d3:a9:c7:93:d5:3d:f4:dd:9f:
a4:7d:20:13:41:e3:cb:fc:63:b7:8d:42:ee:32:31:
4d:db:0e:b4:7e:05:8e:ce:e8:3c:04:83:48:1d:c6:
19:d6:85:f6:fc:8f:96:8a:5d:17:a2:d6:6b:4a:65:
b8:b2:1a:8a:10:e5:f7:2b:db:87:4a:ec:28:44:2c:
09:6b:dc:04:91:9b:e2:32:05:f1:13:87:8e:56:53:
be:4a:50:c5:b5:4f:1d:ee:11:9e:af:21:19:90:15:
6d:93:74:41:ac:f1:21:82:21:fa:24:77:ab:41:87:
b1:57:50:f4:71:b1:85:10:90:32:c0:6e:83:d4:29:
9d:ba:07:57:ce:c7:b0:38:36:a4:97:e7:b1:db:2d:
6d:87:e3:4f:f8:6e:65:da:2f:af:44:65:0f:59:56:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:16:6A:C5:38:C3:51:68:39:3D:38:F2:53:A7:42:69:06:99:A0
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9d:87:30:fb:8f:6b:e5:14:3a:b5:57:f4:75:4d:ed:10:5e:
23:23:15:8c:78:cf:e2:44:9c:b2:f2:df:22:12:9b:8d:9e:4c:
e5:78:8f:c0:96:96:6c:9b:41:ed:89:e5:9f:9b:46:f6:19:e7:
08:92:ba:46:e8:f5:05:39:5f:00:bf:ce:81:7a:b2:3f:eb:ba:
b9:ed:d1:d0:5b:3c:93:3e:8d:c8:ca:cc:22:2f:bb:b9:bb:36:
91:a9:d5:2b:b6:5b:0d:e2:4c:62:b2:92:81:66:89:db:0b:58:
de:a9:31:1b:df:21:58:c8:c1:dc:2f:48:8b:95:58:77:34:1d:
8a:da:4a:62:71:55:23:24:72:d5:cb:6b:d4:da:6a:b0:8b:83:
b0:a2:2d:5c:e3:2c:d5:6b:f7:71:dd:ff:46:32:eb:e3:ca:5e:
d8:87:d4:e0:e6:64:61:b4:1c:94:c1:6b:02:dd:87:89:19:29:
e6:1d:db:ed:63:9e:19:86:6e:6f:f3:5f:63:23:19:97:fc:0f:
7d:e0:2c:c7:92:1a:df:5d:f8:c2:0c:9d:01:61:98:96:d8:4a:
d0:85:83:e3:da:3a:0b:b4:99:fd:2d:68:04:c4:46:48:28:db:
4c:7f:2b:60:34:da:c5:8f:68:e6:00:a5:f5:6b:ae:25:20:18:
bd:06:88:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApFVMGs2I2HnSLdaUHcKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjYwNjEzMTEwMDU1WhcNMjYwNjE0MTEwMDU1WjAzMTEwLwYDVQQD
EyhiZTFiMTY2YWM1MzhjMzUxNjgzOTNkMzhmMjUzYTc0MjY5MDY5OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAwnQiC5aD2q9bKDXZa0WuYXKG5b
JluK4BWsSDbjfEcv6HEKNPvCyFUuIBma5vDfkrdRlF+Q2lV9oevBMPuEbU3pGT3p
k0nQYuARMtOwDPUomzwRNBvmMGiU8VE9rhfTqceT1T303Z+kfSATQePL/GO3jULu
MjFN2w60fgWOzug8BINIHcYZ1oX2/I+Wil0XotZrSmW4shqKEOX3K9uHSuwoRCwJ
a9wEkZviMgXxE4eOVlO+SlDFtU8d7hGeryEZkBVtk3RBrPEhgiH6JHerQYexV1D0
cbGFEJAywG6D1CmdugdXzsewODakl+ex2y1th+NP+G5l2i+vRGUPWVb/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4bFmrFOMNRaDk9OPJTp0JpBpmgMB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC52HMPuP
a+UUOrVX9HVN7RBeIyMVjHjP4kScsvLfIhKbjZ5M5XiPwJaWbJtB7Ynln5tG9hnn
CJK6Ruj1BTlfAL/OgXqyP+u6ue3R0Fs8kz6NyMrMIi+7ubs2kanVK7ZbDeJMYrKS
gWaJ2wtY3qkxG98hWMjB3C9Ii5VYdzQditpKYnFVIyRy1ctr1NpqsIuDsKItXOMs
1Wv3cd3/RjLr48pe2IfU4OZkYbQclMFrAt2HiRkp5h3b7WOeGYZub/NfYyMZl/wP
feAsx5Ia3134wgydAWGYlthK0IWD49o6C7SZ/S1oBMRGSCjbTH8rYDTaxY9o5gCl
9WuuJSAYvQaICg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:59 2026 by rpki-client