Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: ZnseC0T+A81hzHe3NGLGnvq6znHHmbKFL5c1NyDevvw=
Subject key identifier: 9E:7B:59:19:FB:62:76:8E:73:9B:D3:3E:16:FD:B2:32:2A:9A:90:93
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 01A0CA0FDAB02C2976CFF9D968ACF22B0D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 17:00:31 +0000
Manifest this update: Tue 22 Sep 2026 17:00:31 +0000
Manifest next update: Wed 23 Sep 2026 17:00:31 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: KcjGDKX1OZkhjsB8nMnn2qt1iOXYRV42S1uws2xXrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:da:b0:2c:29:76:cf:f9:d9:68:ac:f2:2b:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Sep 22 17:00:31 2026 GMT
Not After : Sep 23 17:00:31 2026 GMT
Subject: CN=9e7b5919fb62768e739bd33e16fdb2322a9a9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:f3:ca:08:30:29:04:52:cc:a5:a0:1c:64:
27:a0:85:61:48:d8:d6:91:ca:2b:d6:8f:09:37:d3:
ae:86:16:11:fc:b2:31:4f:79:2e:11:2d:5a:b6:2f:
20:cd:d3:17:74:dc:a2:56:33:8f:57:a2:00:b7:92:
ad:be:f7:08:98:61:b9:86:20:92:ea:c3:22:f7:e0:
4f:6a:0b:cc:f1:84:f4:e8:9a:52:04:f8:36:f3:d2:
04:4c:5a:fc:17:32:55:83:3b:12:fe:34:5c:d4:da:
d3:03:ed:0c:df:c6:5f:0c:ab:dd:98:65:4e:3f:d9:
59:29:70:86:05:19:c5:af:8f:4b:bc:67:ce:5e:91:
d6:0f:fe:9d:18:f8:48:f0:8a:64:7b:f2:e7:42:20:
3c:64:9c:f8:41:6d:10:f6:3d:5b:08:5d:dd:50:a6:
62:0c:12:a7:bc:6b:39:8f:e6:72:26:68:b1:12:aa:
3e:58:5d:b2:43:76:4f:f6:c4:3e:7b:45:46:52:6d:
5d:1d:ba:52:89:25:eb:86:26:71:2a:5e:31:36:1a:
a9:78:33:fe:be:e2:14:65:2e:f6:64:ee:1b:cc:84:
83:19:86:e1:d7:fe:0e:b8:1a:ad:12:9b:c7:3d:a2:
03:b0:42:bf:21:e2:4a:0d:47:35:dd:63:6b:44:d3:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:59:19:FB:62:76:8E:73:9B:D3:3E:16:FD:B2:32:2A:9A:90:93
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:e4:20:b9:a8:02:db:a7:96:38:29:26:f0:b2:86:28:46:
2b:2f:e1:bc:de:ad:4d:32:73:d6:f1:96:0e:68:9b:64:1a:75:
68:b3:ad:7d:36:58:6f:a5:87:ec:b8:64:c8:7e:8a:da:56:ee:
9f:3b:dd:eb:dd:99:3f:75:d8:78:5d:af:74:77:24:22:5b:97:
74:aa:86:43:a3:18:1d:3b:08:78:e6:2a:85:e1:33:d7:42:a8:
83:75:8e:f4:a2:ea:62:f8:a6:b5:49:b7:7f:85:f1:4d:a7:dd:
fe:d0:ad:da:7c:57:8d:29:e2:fd:bd:f6:9c:db:27:4f:11:86:
06:2a:da:b4:55:2e:90:b8:a4:48:b7:34:1a:87:e0:39:a9:6f:
17:4c:74:ed:73:26:ee:8b:fe:0f:d8:2e:97:c4:42:1d:b1:ca:
8d:d1:75:86:5a:42:3d:1e:ea:d5:76:8d:87:54:0c:32:0a:15:
cf:4b:54:27:fc:ee:85:e0:68:31:ef:91:b1:94:45:80:56:db:
d0:9f:85:f7:52:69:0f:8e:92:64:37:26:7c:e7:13:e4:d9:f1:
73:7d:8a:f3:55:c1:ab:7f:67:d2:6b:39:e8:4a:c3:fb:71:2c:
48:4e:23:75:b3:4f:e8:b2:15:d1:39:30:a2:c3:1d:46:82:5e:
98:bc:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:05:45 2026 by rpki-client