Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: Fbq5/oM7RutKOi/0dI6ELAX+wyjnALRB39Cjd3F1rn4=
Subject key identifier: 67:D4:81:32:32:84:05:BD:DB:6F:AB:93:FF:A7:58:F7:0D:01:A2:82
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019CABA26A9DA1845AD8B64726BC6207BAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:13 +0000
Manifest this update: Sun 01 Mar 2026 23:01:13 +0000
Manifest next update: Mon 02 Mar 2026 23:01:13 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: e/zuoRMnoNPQOes0R6DFlcF9cGNAkqCdOE3ZTb8VaY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:6a:9d:a1:84:5a:d8:b6:47:26:bc:62:07:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Mar 1 23:01:13 2026 GMT
Not After : Mar 2 23:01:13 2026 GMT
Subject: CN=67d48132328405bddb6fab93ffa758f70d01a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:3f:6c:49:be:65:89:bb:b4:30:36:c4:2f:
83:28:fe:4b:d3:77:d1:cd:23:15:49:a2:14:b8:e3:
d9:c6:14:0d:d9:75:f6:32:fc:39:81:7c:33:87:2f:
58:8e:4e:57:b2:c3:b1:c7:60:bd:fe:e9:5a:55:2f:
9b:cc:04:ce:7c:d6:62:24:80:19:60:86:6b:d3:c8:
33:46:f9:1b:52:8d:60:74:37:01:39:0b:b5:56:31:
a0:36:a3:88:7b:bc:48:96:02:eb:af:10:d5:67:66:
31:1a:38:3d:b4:2c:15:29:20:fc:3a:86:e2:b8:21:
5a:ad:85:74:be:85:82:7b:d4:8a:f6:2a:f3:cf:bf:
74:f2:b2:1b:bb:72:b2:ab:cf:de:64:16:cb:26:06:
fc:95:85:69:b6:99:4d:18:1c:8f:da:71:96:78:71:
ab:44:b2:47:a7:62:1a:43:1c:83:34:94:7d:c5:ac:
28:27:ca:06:2c:a3:10:ee:9d:c6:ba:e9:04:06:42:
82:62:fc:19:78:5f:93:19:22:b6:09:9e:33:da:17:
e9:34:62:37:d5:83:bc:1a:f9:4a:63:a1:9d:85:c6:
e1:5f:0a:c6:cd:63:6d:ba:96:4c:4f:61:10:ce:90:
0b:a0:32:78:92:32:b8:b4:40:a8:1d:88:2d:df:60:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:81:32:32:84:05:BD:DB:6F:AB:93:FF:A7:58:F7:0D:01:A2:82
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:50:de:47:61:bf:19:5d:cc:1c:26:63:c1:b5:1e:d2:ae:
26:78:57:4a:f3:94:f3:0a:22:60:e5:6b:5b:22:4c:d2:91:2e:
9d:49:5d:d1:5b:28:79:1f:8f:65:75:d7:a6:67:74:22:ae:a6:
b6:b0:d5:57:31:de:8b:ef:8f:32:12:09:83:d2:35:7f:fc:2a:
a1:74:26:3c:20:ca:39:8e:a8:eb:ef:05:05:8b:d5:06:7f:27:
a0:11:df:5e:71:db:69:1f:0c:ea:57:a0:c9:15:5d:8f:ac:c8:
da:47:ce:cc:9c:61:89:0a:4f:7f:56:16:4a:10:fa:01:3c:51:
ae:dd:68:03:66:a2:15:c2:55:46:66:ba:24:7a:0a:06:7d:99:
87:0c:78:18:72:60:af:21:ec:a4:45:ae:99:90:e7:20:c5:b3:
a1:22:1a:38:f6:a7:81:eb:d8:5f:ee:96:b7:2f:ac:82:84:09:
fa:e4:b0:cb:fc:c6:ef:7d:90:a2:c6:bb:fc:30:7b:6e:92:b8:
9b:3a:e1:b6:ec:ab:d9:55:1e:b1:fa:38:57:4c:d7:f9:07:72:
0a:63:0f:2c:fb:21:16:aa:89:16:63:dc:67:42:13:56:b3:e1:
0e:3c:bc:db:d4:98:5c:70:6e:35:b3:24:f7:cd:41:66:fb:0d:
ee:40:ca:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyromqdoYRa2LZHJrxiB7q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjYwMzAxMjMwMTEzWhcNMjYwMzAyMjMwMTEzWjAzMTEwLwYDVQQD
Eyg2N2Q0ODEzMjMyODQwNWJkZGI2ZmFiOTNmZmE3NThmNzBkMDFhMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rw/bEm+ZYm7tDA2xC+DKP5L03fR
zSMVSaIUuOPZxhQN2XX2Mvw5gXwzhy9Yjk5XssOxx2C9/ulaVS+bzATOfNZiJIAZ
YIZr08gzRvkbUo1gdDcBOQu1VjGgNqOIe7xIlgLrrxDVZ2YxGjg9tCwVKSD8Oobi
uCFarYV0voWCe9SK9irzz7908rIbu3Kyq8/eZBbLJgb8lYVptplNGByP2nGWeHGr
RLJHp2IaQxyDNJR9xawoJ8oGLKMQ7p3GuukEBkKCYvwZeF+TGSK2CZ4z2hfpNGI3
1YO8GvlKY6GdhcbhXwrGzWNtupZMT2EQzpALoDJ4kjK4tECoHYgt32D8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfUgTIyhAW922+rk/+nWPcNAaKCMB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOdQ3kdh
vxldzBwmY8G1HtKuJnhXSvOU8woiYOVrWyJM0pEunUld0VsoeR+PZXXXpmd0Iq6m
trDVVzHei++PMhIJg9I1f/wqoXQmPCDKOY6o6+8FBYvVBn8noBHfXnHbaR8M6leg
yRVdj6zI2kfOzJxhiQpPf1YWShD6ATxRrt1oA2aiFcJVRma6JHoKBn2Zhwx4GHJg
ryHspEWumZDnIMWzoSIaOPangevYX+6Wty+sgoQJ+uSwy/zG732Qosa7/DB7bpK4
mzrhtuyr2VUesfo4V0zX+QdyCmMPLPshFqqJFmPcZ0ITVrPhDjy829SYXHBuNbMk
981BZvsN7kDKEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:06 2026 by rpki-client