Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: 1rp6AspcWyN8KiOhtMWZ74yWUGrECLWH9LShxU/HDd8=
Subject key identifier: 28:9E:60:EC:C5:AB:8B:2E:77:D7:54:5A:46:67:87:32:5D:BC:05:67
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019EC1B67EFD21304129BAFD79BFA7F6E867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 129A
Signing time: Sat 13 Jun 2026 16:00:23 +0000
Manifest this update: Sat 13 Jun 2026 16:00:23 +0000
Manifest next update: Sun 14 Jun 2026 16:00:23 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 0+wtaZ4k70jJBDvL1lAhOAxib+SBKyY1Wf9PGag3iTg=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:7e:fd:21:30:41:29:ba:fd:79:bf:a7:f6:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jun 13 16:00:23 2026 GMT
Not After : Jun 14 16:00:23 2026 GMT
Subject: CN=289e60ecc5ab8b2e77d7545a466787325dbc0567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:c6:b4:9e:50:01:56:3b:44:fc:27:c5:bd:
8d:35:83:c0:b3:94:c7:fe:93:da:ed:b8:ec:eb:fb:
39:dd:24:d2:ff:d6:d5:e4:4a:e1:66:61:09:b0:9c:
bf:1a:b2:7a:f5:3e:c5:da:25:ba:41:ed:a4:f5:eb:
12:c5:db:03:af:03:cf:db:dd:c5:c2:42:f2:67:2a:
dd:ba:fe:26:20:65:11:13:78:5d:a2:e4:1c:33:51:
5e:11:69:bc:53:d6:1f:f6:a7:f5:9e:05:d3:b0:11:
f5:c3:9e:54:8e:12:6f:a0:76:23:33:06:33:7e:4e:
e4:a7:a4:d6:77:b3:69:e1:ee:15:4c:d8:f4:1c:00:
f5:6c:5b:45:39:de:a2:6d:a0:22:4b:d5:f6:18:15:
41:ce:cf:d9:05:a9:cb:45:7d:73:d4:77:71:ce:d3:
a2:ae:97:22:f4:e8:99:2c:ce:20:ea:05:6c:8c:0f:
c9:b3:ed:de:0d:2f:0b:71:e3:73:95:ba:c8:e4:58:
f2:e7:ad:88:b4:38:44:a3:a1:90:1b:c0:b4:99:0f:
db:60:c3:3f:ea:f1:ca:cf:f0:4b:f0:11:2c:18:52:
99:c1:8c:33:19:74:a7:29:ea:a4:c4:95:b9:14:ea:
23:3f:ff:1f:ff:23:39:e4:a0:62:84:9e:32:6d:0d:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:60:EC:C5:AB:8B:2E:77:D7:54:5A:46:67:87:32:5D:BC:05:67
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e8:28:89:ba:b5:ce:59:5d:8a:3e:23:e9:af:96:3c:b5:db:
a7:b2:0f:39:d5:3d:b9:b0:9e:f0:32:c4:79:03:9d:e1:61:6e:
08:ce:67:d9:6b:3f:7b:be:d8:37:1e:b1:d0:d3:a6:3c:ad:0f:
1f:78:e9:78:8e:56:be:77:e4:a0:d4:2d:27:04:b5:f5:0a:5d:
a9:bd:ae:80:9a:33:08:f1:fb:b6:24:13:20:3c:bb:6f:e4:d0:
52:df:7b:87:49:13:0b:df:d3:48:a2:5b:3f:36:f1:35:7d:f5:
52:8c:21:ac:ba:dc:a3:09:b0:90:bb:50:45:4c:ea:b7:d1:43:
14:0a:9a:b2:b0:f7:43:a2:3f:6c:8d:06:65:a1:4c:9f:17:36:
7c:f0:ed:f2:35:4e:20:d0:a0:47:b8:59:81:34:c2:bf:79:93:
1b:f3:37:11:4f:31:4d:1b:47:44:7e:65:df:93:f8:27:1a:ee:
73:b8:c1:21:1f:58:ef:64:e7:f0:db:ac:6d:06:bf:e0:fa:f0:
95:5c:d0:94:d5:f0:80:7b:7d:90:e4:86:6f:2a:9a:1c:6e:5e:
53:aa:14:d4:0c:8b:fd:87:e3:76:8f:e7:bb:78:d7:d1:10:28:
eb:a8:97:4b:7c:4c:e8:c2:6b:61:cf:2e:2b:24:15:70:6e:b9:
31:f7:c8:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btn79ITBBKbr9eb+n9uhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwNjEzMTYwMDIzWhcNMjYwNjE0MTYwMDIzWjAzMTEwLwYDVQQD
EygyODllNjBlY2M1YWI4YjJlNzdkNzU0NWE0NjY3ODczMjVkYmMwNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzPGtJ5QAVY7RPwnxb2NNYPAs5TH
/pPa7bjs6/s53STS/9bV5ErhZmEJsJy/GrJ69T7F2iW6Qe2k9esSxdsDrwPP293F
wkLyZyrduv4mIGURE3hdouQcM1FeEWm8U9Yf9qf1ngXTsBH1w55UjhJvoHYjMwYz
fk7kp6TWd7Np4e4VTNj0HAD1bFtFOd6ibaAiS9X2GBVBzs/ZBanLRX1z1HdxztOi
rpci9OiZLM4g6gVsjA/Js+3eDS8LceNzlbrI5Fjy562ItDhEo6GQG8C0mQ/bYMM/
6vHKz/BL8BEsGFKZwYwzGXSnKeqkxJW5FOojP/8f/yM55KBihJ4ybQ2i7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCieYOzFq4sud9dUWkZnhzJdvAVnMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnegoibq1
zlldij4j6a+WPLXbp7IPOdU9ubCe8DLEeQOd4WFuCM5n2Ws/e77YNx6x0NOmPK0P
H3jpeI5WvnfkoNQtJwS19Qpdqb2ugJozCPH7tiQTIDy7b+TQUt97h0kTC9/TSKJb
PzbxNX31UowhrLrcowmwkLtQRUzqt9FDFAqasrD3Q6I/bI0GZaFMnxc2fPDt8jVO
INCgR7hZgTTCv3mTG/M3EU8xTRtHRH5l35P4Jxruc7jBIR9Y72Tn8NusbQa/4Prw
lVzQlNXwgHt9kOSGbyqaHG5eU6oU1AyL/Yfjdo/nu3jX0RAo66iXS3xM6MJrYc8u
KyQVcG65MffIqg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:43 2026 by rpki-client