Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: hgIMfp1AU8QVJi4eQdEEohLQsT43uATZ5X8QBSZYjZw=
Subject key identifier: EE:53:B6:53:C5:8D:A0:F8:79:22:D6:68:93:ED:81:EA:C5:99:A7:A7
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 01A00326A19A0CAC3DD2C949904017334984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 02:00:58 +0000
Manifest this update: Sat 15 Aug 2026 02:00:58 +0000
Manifest next update: Sun 16 Aug 2026 02:00:58 +0000
Files and hashes: 1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: vqZA1eJxeLPv/a0Z616UzKp0HtyzJNxf6nKfnng1dTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:a1:9a:0c:ac:3d:d2:c9:49:90:40:17:33:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Aug 15 02:00:58 2026 GMT
Not After : Aug 16 02:00:58 2026 GMT
Subject: CN=ee53b653c58da0f87922d66893ed81eac599a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:d7:88:5d:5d:27:00:86:3e:60:43:45:e0:
9b:8c:be:52:6e:e8:aa:ce:fd:04:47:a9:46:c6:cc:
b9:2c:88:3f:a0:90:c0:7a:c1:09:79:2c:c7:dc:7b:
0c:5d:f2:0b:29:c2:76:4a:86:ca:7e:55:43:76:08:
10:be:8e:43:10:48:59:74:d8:b8:2d:8f:47:42:7a:
9c:7f:ae:87:f2:93:0c:16:72:25:e6:6f:4c:2f:67:
66:71:92:c1:60:d4:14:97:c4:49:22:ca:fa:0d:fc:
10:df:f4:11:c7:f2:65:14:21:c5:71:9a:db:57:35:
7c:2b:0a:26:21:51:5e:5d:15:45:49:a1:9f:ac:c6:
05:c3:4a:80:77:7d:fa:d4:c3:ce:e1:89:a4:21:c4:
50:29:9a:c0:67:4a:bd:8b:71:1b:46:41:96:40:a6:
8b:78:e9:e3:c1:f6:15:99:62:12:2f:50:2b:ec:c2:
a9:9d:54:f7:99:67:c6:ae:2e:79:63:94:7c:8c:80:
cb:81:86:b6:67:47:c1:9b:6d:76:9b:0b:16:7d:a3:
74:f8:a5:7c:b3:60:60:3f:c4:14:81:4a:2c:e9:b9:
a9:27:26:c3:8d:95:f1:0e:14:ac:08:57:68:6c:f0:
e7:6c:06:59:35:1a:f2:5f:d3:15:4b:9d:a8:cc:e0:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:B6:53:C5:8D:A0:F8:79:22:D6:68:93:ED:81:EA:C5:99:A7:A7
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fe:e0:ec:00:5c:78:c3:cc:79:c6:0c:a7:d3:66:7a:57:78:
16:21:16:fa:56:cb:1a:00:ab:2a:af:c4:0b:41:71:dc:c9:26:
26:02:71:17:18:82:6f:8c:93:c0:af:75:24:b0:44:6f:08:8c:
f3:65:9b:a7:cf:a7:53:95:c7:42:67:88:f0:40:c9:0f:33:20:
b1:e3:38:88:26:64:78:70:e1:1c:a8:3b:2c:ea:de:2f:e9:4a:
4d:b0:c6:77:b1:44:cf:f5:22:d8:aa:1d:c4:19:3a:cd:07:3e:
4e:90:01:7c:fd:5b:de:42:82:5a:4c:20:c8:8e:1c:6d:7f:9f:
e1:97:9d:53:a2:bf:af:82:f9:cf:4a:3c:ed:13:e5:3e:34:f5:
3e:a7:51:59:a7:06:05:29:e0:c5:87:ad:b3:80:41:f1:09:54:
72:27:34:96:8d:c0:5a:ee:9a:79:b0:23:09:7e:d8:f5:59:8f:
4d:5b:62:6f:2b:aa:a6:fc:c5:c9:00:00:9c:24:44:b5:8b:ab:
b0:00:4e:a1:85:04:a5:c2:fe:6f:3c:c7:57:49:0c:18:6e:86:
26:ae:74:bf:21:aa:0e:bc:b9:7f:e2:41:ed:ea:27:7e:12:a7:
ed:84:c8:47:6f:8f:6c:00:67:18:53:f4:2d:a9:f8:72:0a:39:
df:c1:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:20 2026 by rpki-client