Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: XyK0OUTXgIK/GMPWqCG8+Mhn9iDUD8Ky57S+wCgH2LI=
Subject key identifier: 5B:A7:16:F9:F2:3B:7B:37:8F:F6:E8:B7:34:F6:B8:47:49:53:18:01
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019D984FA169ACD96A8E4216A7DE3E905C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1200
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: qlRRIaLx2z6B7mP7zBa9WgehKLFbmasCwagdTOR6zoE=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a1:69:ac:d9:6a:8e:42:16:a7:de:3e:90:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=5ba716f9f23b7b378ff6e8b734f6b84749531801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:d7:3d:83:b4:16:29:5e:a9:0f:bb:ea:88:
ac:eb:ab:1e:81:d6:9a:a6:f9:14:5e:49:65:9c:d6:
69:ca:48:d2:49:78:4e:7e:96:ec:ec:b6:64:a4:ee:
91:77:fa:ed:22:1a:c2:1b:07:dc:1c:94:cc:96:fc:
be:19:28:27:58:fb:6d:7d:63:42:b4:59:bc:63:e8:
a6:e9:0b:72:45:f8:96:87:32:d5:03:67:b6:14:0b:
50:4a:ec:06:dd:fd:cd:9d:b6:8a:62:c7:ef:43:9c:
ab:92:85:76:50:1b:18:67:17:1f:e4:e7:b8:1f:3b:
ef:a4:93:6f:57:ba:6b:8f:bd:aa:50:d0:19:5c:8f:
50:05:7e:d8:8b:0f:c4:a0:17:35:88:3f:37:7a:c4:
ed:ec:94:d0:b0:59:25:b3:8a:84:89:12:b9:b6:0a:
48:1f:16:e8:c9:0b:de:c1:3b:10:eb:52:3d:a1:19:
f5:a0:e8:00:1b:0b:df:68:fd:0d:65:ee:c5:f7:b6:
02:66:98:ee:eb:93:2a:18:48:bc:98:0e:b2:8b:5a:
d1:fb:d4:e2:30:cd:d8:07:ab:ff:26:df:d8:08:42:
2b:96:c7:8c:a4:1b:4b:4f:f2:3c:3c:5b:4a:86:81:
85:cc:0d:fe:34:4c:e1:73:42:b5:61:32:09:30:12:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:16:F9:F2:3B:7B:37:8F:F6:E8:B7:34:F6:B8:47:49:53:18:01
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:98:14:eb:0c:34:73:b9:25:db:46:ed:31:d4:60:bb:b1:a9:
11:8e:ee:ba:f9:2a:5b:4a:4e:84:c0:bf:ae:8a:0f:b2:e7:ec:
2d:f0:8b:6a:c6:4f:3a:bc:dd:dd:7d:28:a2:43:52:1e:c3:b4:
15:e7:72:74:fa:c1:e7:37:51:39:1e:73:64:e2:d7:e3:1e:c2:
b7:9e:25:19:92:e9:f2:38:06:db:1d:d8:26:a2:58:47:81:43:
4d:06:60:68:c5:8d:9b:3a:e4:9b:f8:4a:74:77:f7:de:39:57:
34:57:38:b9:4f:1f:98:dd:be:6d:e1:46:94:a3:04:0f:88:2d:
e8:e2:7d:e5:9a:08:77:d0:c9:b4:dc:2e:aa:dc:7b:87:80:44:
7b:73:46:33:e2:f3:16:78:bc:17:f6:35:ac:14:5c:7c:05:5e:
ad:e7:97:40:c8:f6:5d:e9:64:4a:5a:bf:a4:57:5b:5e:b2:c7:
5b:82:22:fb:58:17:9d:0e:8a:83:7f:4f:81:92:97:35:64:4a:
b7:40:2f:9d:97:a2:7b:5d:7c:76:0f:ae:48:24:8f:12:32:6e:
64:d7:7b:72:98:2d:84:f8:07:95:fb:3b:6e:3a:17:34:13:86:
ea:15:63:d4:31:96:95:ed:f7:67:70:13:fc:d3:b2:2c:d2:8e:
75:a3:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:13 2026 by rpki-client