Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: 7vSAWrmYadUJlK7+DnFDC923qYjUYiTvCzIN9+VNAfQ=
Subject key identifier: 30:B3:DF:E2:E5:81:61:F0:14:A4:FE:FC:B2:78:01:2B:BF:3A:F8:C8
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019CAAC68AE75ABE3E1FE72EEF7BF170DD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1185
Signing time: Sun 01 Mar 2026 19:01:04 +0000
Manifest this update: Sun 01 Mar 2026 19:01:04 +0000
Manifest next update: Mon 02 Mar 2026 19:01:04 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: KsnNWy2r1J7Bdhwh1XjuR0w06aa9W1EzXwAfNdsGGIE=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:8a:e7:5a:be:3e:1f:e7:2e:ef:7b:f1:70:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Mar 1 19:01:04 2026 GMT
Not After : Mar 2 19:01:04 2026 GMT
Subject: CN=30b3dfe2e58161f014a4fefcb278012bbf3af8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:0e:64:07:13:db:7b:b6:90:6f:54:65:c4:
1f:ea:c6:23:9d:ae:c8:79:cb:45:ac:72:05:eb:b2:
12:c5:8f:f0:26:c2:9e:a1:0d:a2:bd:fb:b0:d0:ca:
75:6b:a3:bc:57:08:b1:85:4c:bb:94:6f:5e:2f:0b:
78:cd:94:4b:cd:2b:48:b4:a5:cc:a0:26:7b:6f:c8:
ed:8a:94:98:90:7f:45:39:4a:c5:6d:95:f9:bb:94:
d5:24:86:28:a8:59:77:3b:5f:c2:e2:20:9b:0a:50:
3a:7a:4c:da:dc:21:be:ac:17:4f:22:28:a0:f5:4b:
b5:02:4c:35:3b:08:b7:4b:52:47:ed:fa:16:01:6e:
f8:98:e5:92:fc:3f:1e:52:61:3b:d2:5b:12:40:a6:
6e:07:ae:17:fb:00:82:7b:64:92:54:bb:be:bb:0e:
74:a8:2b:69:47:13:ae:5f:a8:4c:81:04:bb:ff:f4:
6e:85:93:eb:85:32:91:3e:48:0b:34:00:27:76:8a:
30:6c:25:96:d3:e2:a7:b4:0b:31:38:28:b7:5e:a1:
62:f6:d1:ae:a6:a9:2e:28:70:d1:ef:1f:78:08:89:
e4:6c:96:44:63:61:dc:6c:49:f1:0d:71:ed:8d:55:
eb:d9:2c:23:47:62:65:26:14:c3:84:c3:61:bc:5f:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:DF:E2:E5:81:61:F0:14:A4:FE:FC:B2:78:01:2B:BF:3A:F8:C8
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:39:04:7c:57:29:3e:e8:63:8a:f1:39:f5:34:14:7a:23:29:
e7:f2:d8:5d:99:e0:a8:1d:70:43:f6:9c:cf:f0:2d:60:33:f1:
e2:7c:c8:35:88:ee:01:05:b5:d5:98:40:00:c2:64:09:f3:09:
a3:9d:2e:30:6d:e4:83:f0:f5:86:6e:82:b6:eb:3a:97:2f:7f:
87:13:ac:08:88:83:f4:82:4c:f6:c2:4f:d3:8a:f6:aa:32:6d:
e0:4f:5d:e7:ee:02:03:9c:95:b0:7a:52:2b:7e:76:03:9c:78:
09:6a:7b:a5:a6:aa:72:fa:fb:d7:2c:cc:36:9b:87:19:48:e8:
3a:0b:80:9e:46:73:70:fc:d4:04:0f:15:9a:3d:fc:23:93:4a:
6c:02:3d:98:73:c7:09:72:56:3e:51:c5:4c:ba:5b:4b:47:83:
67:c7:5f:2c:3a:e1:0c:7f:f9:4a:a9:bb:98:7f:93:f7:55:04:
95:64:ab:f2:da:56:67:8e:18:6c:e7:60:8d:e4:c5:42:87:5c:
bb:43:67:e5:86:0d:16:02:6a:b8:6e:63:55:97:da:10:d7:0a:
54:c5:9c:a2:a2:ac:bc:b6:95:eb:ca:a8:3a:26:92:01:0c:d6:
cf:cd:f6:8a:06:9c:1b:bb:ed:47:49:2e:a0:eb:8d:3e:25:ae:
3d:9e:45:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxornWr4+H+cu73vxcN0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwMzAxMTkwMTA0WhcNMjYwMzAyMTkwMTA0WjAzMTEwLwYDVQQD
EygzMGIzZGZlMmU1ODE2MWYwMTRhNGZlZmNiMjc4MDEyYmJmM2FmOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArloOZAcT23u2kG9UZcQf6sYjna7I
ectFrHIF67ISxY/wJsKeoQ2ivfuw0Mp1a6O8VwixhUy7lG9eLwt4zZRLzStItKXM
oCZ7b8jtipSYkH9FOUrFbZX5u5TVJIYoqFl3O1/C4iCbClA6ekza3CG+rBdPIiig
9Uu1Akw1Owi3S1JH7foWAW74mOWS/D8eUmE70lsSQKZuB64X+wCCe2SSVLu+uw50
qCtpRxOuX6hMgQS7//RuhZPrhTKRPkgLNAAndoowbCWW0+KntAsxOCi3XqFi9tGu
pqkuKHDR7x94CInkbJZEY2HcbEnxDXHtjVXr2SwjR2JlJhTDhMNhvF/owwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCz3+LlgWHwFKT+/LJ4ASu/OvjIMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDkEfFcp
PuhjivE59TQUeiMp5/LYXZngqB1wQ/acz/AtYDPx4nzINYjuAQW11ZhAAMJkCfMJ
o50uMG3kg/D1hm6Ctus6ly9/hxOsCIiD9IJM9sJP04r2qjJt4E9d5+4CA5yVsHpS
K352A5x4CWp7paaqcvr71yzMNpuHGUjoOguAnkZzcPzUBA8Vmj38I5NKbAI9mHPH
CXJWPlHFTLpbS0eDZ8dfLDrhDH/5Sqm7mH+T91UElWSr8tpWZ44YbOdgjeTFQodc
u0Nn5YYNFgJquG5jVZfaENcKVMWcoqKsvLaV68qoOiaSAQzWz832igacG7vtR0ku
oOuNPiWuPZ5FTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:24 2026 by rpki-client