
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: HJ7UWLfzhHwpeV5MnKgVH9PmF10OvkmL0ACLAVYl1W4=
Subject key identifier: F8:4D:CB:C0:87:04:59:9C:48:5F:95:12:CB:EB:0E:A5:0C:B0:E6:F7
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019E31BBBF598B1122F3415F75986B969697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 17:00:48 +0000
Manifest this update: Sat 16 May 2026 17:00:48 +0000
Manifest next update: Sun 17 May 2026 17:00:48 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: LzMrmVFI2SH6XrHSd4zDIckQbTkZ7CWvhZ5hqg6y6G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:bf:59:8b:11:22:f3:41:5f:75:98:6b:96:96:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: May 16 17:00:48 2026 GMT
Not After : May 17 17:00:48 2026 GMT
Subject: CN=f84dcbc08704599c485f9512cbeb0ea50cb0e6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:02:64:4f:2c:10:b8:de:65:21:a0:cf:30:
40:17:e1:b8:39:79:32:c8:eb:68:b7:e8:47:df:0c:
47:3e:a6:ed:31:11:53:5d:a0:2e:9d:43:0d:15:c2:
f6:09:c4:70:58:59:e3:b2:74:dc:27:28:aa:c9:43:
ff:3f:d7:64:83:5e:0b:2d:82:fd:3d:55:cf:56:98:
be:47:66:3e:1c:62:53:47:36:01:2f:f7:46:97:12:
9e:3d:25:6d:31:f8:df:b2:c5:92:67:41:2e:59:d2:
98:b0:1c:2e:64:dd:3d:28:05:9b:b7:2a:46:8d:b5:
25:9d:dd:08:18:62:ce:d3:9a:ec:f4:74:c3:a8:89:
75:99:05:4d:f3:44:f5:24:74:9d:6d:96:8f:1e:6b:
4a:08:b2:65:d9:7e:df:4c:68:e9:e2:d9:70:36:37:
e7:77:13:6f:c4:e0:09:d0:86:4f:4f:df:4f:cf:fb:
a2:4f:98:42:42:7b:07:df:f6:24:cf:56:33:ea:41:
b5:86:d9:98:ae:5b:b2:95:cd:ea:9b:69:a2:0a:66:
5e:a4:ef:00:00:b8:8c:f2:09:72:45:c7:95:77:09:
d4:ec:bb:ba:37:cf:fd:88:f0:9e:bb:db:bc:c8:92:
ea:f5:17:80:8d:e5:5d:c0:ec:27:68:a7:15:92:20:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:CB:C0:87:04:59:9C:48:5F:95:12:CB:EB:0E:A5:0C:B0:E6:F7
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:67:aa:94:c2:4a:45:54:69:ec:9a:0d:23:fa:f8:a4:f9:
5f:e3:d4:04:43:6b:f0:0b:54:64:b9:e6:d2:5b:7f:27:12:89:
f8:1b:20:0b:b2:b5:65:e3:70:3a:f1:d5:14:c2:87:47:03:2d:
c8:00:67:e5:f0:07:56:af:e4:0f:1f:76:0c:65:81:31:a7:d8:
95:49:86:1c:ba:6a:a0:5f:54:6a:71:eb:2a:af:a5:44:fc:29:
fd:25:33:07:72:6e:e0:e2:a4:57:41:9d:a7:02:e0:6d:75:a5:
e0:38:4f:4b:3f:b4:50:c3:aa:de:90:47:f5:9b:65:8b:af:1f:
94:cf:3e:dc:e4:8f:b4:90:5a:56:6b:6e:55:6a:50:50:aa:37:
27:14:c7:3c:92:a6:57:66:e3:cb:6d:b2:50:fc:f7:ce:95:de:
8a:92:4d:8f:74:36:b4:a6:2a:31:53:28:5e:c6:51:54:0d:4f:
31:ba:7d:8a:f2:83:e7:86:fb:44:93:c8:0d:c7:97:59:2d:b0:
3a:f4:06:9e:64:91:81:47:77:4f:9f:de:cb:eb:d5:34:95:96:
a9:e6:e4:ca:b4:40:d3:79:76:a2:19:c3:89:dd:80:29:8c:97:
99:9a:78:f5:c9:a9:4d:81:ca:ab:dd:03:6b:72:3b:3d:f5:7b:
6e:8a:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:14 2026 by rpki-client