Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: HiwEtqWM1xQyGAt9qE0bBvAKcxMBeKrhMhWrjNC+QBs=
Subject key identifier: 90:D9:43:E1:C0:68:97:87:87:36:DD:E7:B4:37:0B:9E:44:C8:75:3B
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019D389BA89865D2AFC5E12F5299630D5DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: 5KAtqTjV7Jre1T6bv5Og+CSF5N/cRHDwd2vM9v/kEUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a8:98:65:d2:af:c5:e1:2f:52:99:63:0d:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=90d943e1c06897878736dde7b4370b9e44c8753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:b1:80:ad:62:94:fd:f3:2a:5e:9f:ec:74:
88:ef:f3:96:3b:bd:8f:02:d6:4f:de:64:ac:9a:db:
36:97:83:16:77:8d:01:83:b3:78:31:40:2e:00:d3:
1d:a3:ad:56:75:13:0c:13:1d:d0:94:35:13:96:b0:
bb:43:3b:97:fd:36:aa:91:01:da:b2:44:55:0b:d2:
9b:f4:21:9e:99:4a:90:b4:0e:fa:60:6a:ad:07:6f:
3c:38:f1:f9:37:a1:a7:dd:aa:2e:b5:c1:cf:66:01:
cb:b1:92:a0:7f:5a:e3:a1:0a:15:ac:a9:e1:e6:ef:
d2:b0:9d:d9:fd:0b:14:00:8f:00:e6:61:96:25:81:
0a:34:2f:e3:b5:29:04:ba:7d:fc:5e:d0:e0:9a:5a:
09:ae:a1:b1:35:76:07:88:06:21:2b:a9:1f:c7:d3:
6d:09:bd:e6:8e:a4:c8:bf:c9:f3:83:5b:d2:f7:87:
90:07:c1:3c:e8:9f:fc:64:62:21:db:56:1d:3f:44:
fb:3b:d5:0d:30:92:5a:5a:0e:e8:3e:71:17:d4:d5:
b4:4a:ad:f1:01:52:a1:5f:c2:24:0a:57:3d:2e:38:
0c:f5:53:88:0b:32:ba:27:5e:f4:7b:a6:7f:d5:ae:
df:72:81:e9:1f:7b:1c:7d:9c:3e:55:75:a3:36:e9:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:43:E1:C0:68:97:87:87:36:DD:E7:B4:37:0B:9E:44:C8:75:3B
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:95:c2:a9:de:e6:cd:db:7e:b3:cd:5e:9b:5d:4e:8e:71:
b1:c8:72:6f:e6:48:8d:66:d3:f0:64:53:4d:82:3e:0f:37:64:
33:a8:82:31:19:45:c5:ae:11:10:b9:3f:d3:30:43:0a:b4:3d:
7d:c0:7e:3c:88:87:35:17:b8:a2:30:47:c2:a0:82:f6:ad:33:
88:df:56:2a:d8:45:64:61:8f:3c:17:b3:74:f7:7c:d3:a4:36:
d9:33:b0:7e:0a:8b:5e:99:6c:b1:a8:a8:b0:ae:db:86:33:f7:
b0:34:05:0c:da:8a:4c:9b:8c:64:ba:d3:a6:d9:4e:93:00:c4:
82:c3:5f:f9:26:fb:e3:47:ff:19:fb:3c:51:8a:46:92:56:6c:
48:26:b8:98:22:47:c7:09:b5:59:97:6d:8f:58:9e:39:04:cb:
87:7f:82:df:d7:fe:76:56:07:b7:56:07:e1:2e:94:2d:70:af:
8b:35:1f:91:16:6a:f0:e5:ed:07:ed:1e:96:01:fd:6d:3e:0c:
8b:7d:fa:d1:16:6a:1b:72:f8:a9:cb:b9:ce:a7:67:f2:02:2d:
d7:60:7f:83:ab:21:eb:14:fb:7f:26:45:d8:62:8d:be:60:76:
3f:8a:03:06:ea:c1:ee:26:e6:cf:33:00:7f:90:df:f0:e3:78:
b0:19:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client