Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: oRvhm/sgkfFiqzRF4IaLu3aWtf0bY2GT8EeKaW77C3o=
Subject key identifier: 34:A9:BC:33:D9:65:20:3C:B6:16:11:D9:A2:11:15:C9:05:25:D8:F9
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019DA4C19D371E18FAB82427EAF31BFC25A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 08:00:45 +0000
Manifest this update: Sun 19 Apr 2026 08:00:45 +0000
Manifest next update: Mon 20 Apr 2026 08:00:45 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: y/dO3iEmk4onMCd7WHNTgxqqTG35T9diOHa78gf5fM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:9d:37:1e:18:fa:b8:24:27:ea:f3:1b:fc:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Apr 19 08:00:45 2026 GMT
Not After : Apr 20 08:00:45 2026 GMT
Subject: CN=34a9bc33d965203cb61611d9a21115c90525d8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:92:d5:d8:53:b8:d6:ac:55:02:5f:7a:af:
a6:ff:ff:ff:4f:60:11:76:3e:ca:58:02:fb:55:c4:
51:94:76:4d:f5:53:0d:53:7c:3a:14:0d:6c:05:b7:
c1:4a:8f:d9:34:1b:43:0e:0a:18:5e:a7:a1:3f:3e:
fa:bb:f4:30:7d:af:5e:1d:64:46:5d:52:02:ef:e0:
32:d8:bb:92:1e:88:27:56:04:7c:06:59:a6:d0:1c:
b5:18:ff:a0:cc:a6:6d:12:b2:e1:67:ed:51:ac:8b:
ee:4c:6b:3a:f5:6a:e0:c9:70:4b:6f:27:30:84:52:
fa:49:df:39:8b:bd:13:65:7f:1e:ae:8b:e6:6b:69:
d9:43:f8:5e:66:04:d5:54:29:91:a0:a7:d5:60:d1:
46:8f:87:1a:2b:43:f3:f5:35:ab:ed:6b:d3:f6:af:
05:d6:81:07:bb:38:76:a8:b7:8b:b8:6a:b8:ee:b6:
39:19:3f:63:05:10:99:32:89:64:d0:17:c9:f7:dc:
9e:21:aa:23:51:e7:bf:6e:2a:7d:16:73:4f:9d:76:
55:e7:1f:8c:d3:31:b5:1e:94:6e:d3:d5:e6:89:1e:
95:d1:2c:36:45:ba:77:17:d0:78:c3:07:cb:65:6b:
fd:f1:c5:8d:1a:f4:46:99:cb:d4:87:b9:f8:15:b6:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:BC:33:D9:65:20:3C:B6:16:11:D9:A2:11:15:C9:05:25:D8:F9
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:c7:06:e4:a2:4f:c9:84:b2:e5:18:e6:f5:e0:96:81:2b:
00:57:9d:25:80:a8:3b:b6:ab:06:34:91:6b:31:73:27:b1:94:
ef:a1:85:95:5b:97:9a:c9:28:98:28:94:3e:58:b1:56:d9:0c:
29:6b:a5:ae:8e:22:7a:5e:6c:2f:31:3a:23:19:69:fe:80:06:
64:ae:c0:b9:82:e1:de:be:08:7a:fa:3f:6c:58:e7:b9:c7:6b:
e2:98:27:96:8f:9c:46:d5:aa:08:ee:fb:ec:9e:22:01:5b:10:
8a:0c:a2:3f:05:eb:58:83:8d:a1:fc:2f:cb:54:5c:a2:ae:d6:
d5:3a:9c:ea:0f:1b:1b:49:58:a6:83:d9:28:6f:50:ad:ff:c0:
7c:d9:7b:01:4d:53:49:e5:c6:02:46:11:f5:5a:61:aa:6e:69:
75:02:49:a1:2f:58:f9:ac:7a:a3:c8:54:a6:9a:de:13:6f:79:
72:5c:aa:97:85:36:b2:28:0e:c8:54:97:bb:f9:13:0d:27:be:
da:e5:44:9b:90:fe:9f:1b:1e:1d:ed:f4:9e:4b:65:7f:4a:c5:
28:8a:02:4b:20:4d:ed:14:26:fb:35:73:f0:a0:8c:08:71:78:
26:28:78:1d:55:ff:ba:9d:be:cd:9c:69:8c:a3:e3:5b:e9:c3:
c9:79:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:27 2026 by rpki-client