Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: vDlZnVNBr1VXWpwF2t4Zn+r0lD0gICuVNFqVhtW2T70=
Subject key identifier: 91:55:44:10:06:55:7D:AD:87:41:EE:2F:0F:48:3F:DA:5E:34:63:B7
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01A0D0EDF27A6F528F0B5A5D7D7F265CB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 13AB
Signing time: Thu 24 Sep 2026 01:00:50 +0000
Manifest this update: Thu 24 Sep 2026 01:00:50 +0000
Manifest next update: Fri 25 Sep 2026 01:00:50 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: WoiFYAFFC4zXSFOFO9wr8fDArw+CqJnoYQMurxg58wE=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:f2:7a:6f:52:8f:0b:5a:5d:7d:7f:26:5c:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Sep 24 01:00:50 2026 GMT
Not After : Sep 25 01:00:50 2026 GMT
Subject: CN=9155441006557dad8741ee2f0f483fda5e3463b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:2c:7c:86:db:ac:9f:7d:86:ff:49:36:07:
63:d0:b8:b1:f1:8d:54:e5:b8:d5:91:12:80:06:65:
bc:27:b6:bb:aa:02:bb:dd:f4:48:f0:1e:33:70:01:
97:ef:7b:e0:7b:82:60:c2:bc:33:e2:fb:b3:c3:eb:
dc:b4:77:81:4f:9d:3a:88:64:8d:e4:c6:d7:38:ab:
80:95:8c:62:7b:f9:77:62:72:b3:bb:99:35:67:b1:
88:13:fa:97:65:dc:9e:7e:1e:ec:0b:98:43:c7:70:
c7:b7:b5:99:24:7a:68:f7:50:9e:08:cb:73:57:70:
e9:2f:3f:ff:6c:d4:2f:75:87:4b:db:d7:fa:14:e9:
00:fa:66:e7:0b:2e:e8:92:21:e8:fe:9a:03:d3:ed:
a5:c8:7a:c4:b9:29:fd:ec:19:81:98:6d:b4:b2:58:
39:81:ae:ca:29:c3:e6:c8:f9:ec:04:c5:92:95:89:
ae:1c:d8:93:45:e3:60:5f:68:b6:50:dd:1c:8c:31:
20:50:b0:32:fb:60:0f:d9:0c:87:6e:c0:ac:a2:36:
7d:80:74:1c:04:45:59:f8:40:3c:c1:b1:72:ba:b6:
fb:f0:6a:e1:71:4c:73:fe:87:f7:5b:8e:2c:76:fd:
13:c2:82:cd:fd:85:36:89:82:71:4e:b9:4b:df:ec:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:44:10:06:55:7D:AD:87:41:EE:2F:0F:48:3F:DA:5E:34:63:B7
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:fd:ea:27:39:c3:f0:c4:ff:e2:c4:94:60:db:60:26:00:
51:7c:48:10:f6:e5:1d:e6:b3:26:c0:f3:3a:9e:46:1b:4a:19:
67:d9:23:6c:23:1c:de:29:85:96:45:e3:c1:54:4e:7a:aa:5a:
c3:f8:35:81:ea:7f:06:e0:00:66:4c:7e:b6:2a:b5:57:39:80:
fc:6b:fc:41:3a:ff:c3:ab:4d:7c:e9:f1:ab:b9:e3:e1:2e:7a:
68:b5:07:1f:21:1e:d2:b6:4f:7b:ea:09:23:aa:3d:90:32:6a:
37:3f:6a:d7:55:42:84:e2:3a:7b:d1:b9:16:fd:7d:12:4b:f9:
69:8b:b1:87:d0:34:46:8b:03:d6:47:b9:78:de:11:63:73:bd:
1d:1f:7a:7d:d3:79:fe:38:61:32:0f:a8:28:a8:92:17:53:17:
c3:83:f3:ad:25:f7:f2:9e:d7:c4:5a:d5:de:0d:2b:5d:79:88:
a3:b4:95:62:b3:98:1c:b0:19:43:cb:3a:48:aa:50:e8:71:68:
75:56:c0:76:c1:7c:98:b4:9a:65:98:78:0e:bf:76:a7:f7:ea:
8e:71:eb:9b:af:83:8b:13:7c:dd:27:28:a4:7a:96:ab:44:e9:
f3:bd:3a:b8:e2:d8:23:e8:09:d6:9c:9f:e5:f8:f4:1d:f3:ef:
19:3a:ef:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7fJ6b1KPC1pdfX8mXLaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwOTI0MDEwMDUwWhcNMjYwOTI1MDEwMDUwWjAzMTEwLwYDVQQD
Eyg5MTU1NDQxMDA2NTU3ZGFkODc0MWVlMmYwZjQ4M2ZkYTVlMzQ2M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEgsfIbbrJ99hv9JNgdj0Lix8Y1U
5bjVkRKABmW8J7a7qgK73fRI8B4zcAGX73vge4Jgwrwz4vuzw+vctHeBT506iGSN
5MbXOKuAlYxie/l3YnKzu5k1Z7GIE/qXZdyefh7sC5hDx3DHt7WZJHpo91CeCMtz
V3DpLz//bNQvdYdL29f6FOkA+mbnCy7okiHo/poD0+2lyHrEuSn97BmBmG20slg5
ga7KKcPmyPnsBMWSlYmuHNiTReNgX2i2UN0cjDEgULAy+2AP2QyHbsCsojZ9gHQc
BEVZ+EA8wbFyurb78GrhcUxz/of3W44sdv0TwoLN/YU2iYJxTrlL3+wSFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFVRBAGVX2th0HuLw9IP9peNGO3MB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5/96ic5
w/DE/+LElGDbYCYAUXxIEPblHeazJsDzOp5GG0oZZ9kjbCMc3imFlkXjwVROeqpa
w/g1gep/BuAAZkx+tiq1VzmA/Gv8QTr/w6tNfOnxq7nj4S56aLUHHyEe0rZPe+oJ
I6o9kDJqNz9q11VChOI6e9G5Fv19Ekv5aYuxh9A0RosD1ke5eN4RY3O9HR96fdN5
/jhhMg+oKKiSF1MXw4PzrSX38p7XxFrV3g0rXXmIo7SVYrOYHLAZQ8s6SKpQ6HFo
dVbAdsF8mLSaZZh4Dr92p/fqjnHrm6+DixN83ScopHqWq0Tp8706uOLYI+gJ1pyf
5fj0HfPvGTrvyg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:44:48 2026 by rpki-client