Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: YzRQRQyWvnA7PwhvlEQ2M5PwY5xVU+YYCzUxX5dcwHk=
Subject key identifier: 3D:00:38:28:00:3E:32:8C:F4:0E:25:B3:C6:10:F8:54:36:3A:67:01
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019FAD525721A6DD590B6944340D84FA4CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1314
Signing time: Wed 29 Jul 2026 10:01:22 +0000
Manifest this update: Wed 29 Jul 2026 10:01:22 +0000
Manifest next update: Thu 30 Jul 2026 10:01:22 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 8rJaSFkXcEf3Dx764QkkM2zMCAgCj/kgNKPRsWNFhtM=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:57:21:a6:dd:59:0b:69:44:34:0d:84:fa:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jul 29 10:01:22 2026 GMT
Not After : Jul 30 10:01:22 2026 GMT
Subject: CN=3d003828003e328cf40e25b3c610f854363a6701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:fc:a0:1e:4c:4f:d7:b5:b0:22:92:c5:a6:
1f:e9:2d:b9:7d:ae:08:81:f6:04:99:6a:fa:72:1b:
25:de:8d:fb:0d:5d:6e:21:b1:6d:40:e1:fc:37:e7:
08:ac:3e:5e:47:47:8a:8d:f9:40:10:ed:0f:7e:1a:
58:6a:de:c0:ba:46:91:21:97:ec:f8:77:fe:16:df:
79:f3:ae:26:98:46:d1:aa:60:74:84:26:41:fa:70:
99:f0:67:36:c6:a5:d5:b0:c4:f6:62:83:17:b3:9e:
c9:c5:e9:10:cd:38:46:1a:b4:16:af:71:47:8b:84:
d5:ef:56:09:df:ca:3b:66:bf:6f:63:36:81:42:5c:
ef:cf:bf:90:44:93:7d:3c:84:e1:2a:03:9d:05:4e:
ce:f0:70:0a:56:ae:2d:c1:1c:ae:41:b6:0f:7d:bd:
fc:49:1a:41:d5:98:d1:f5:5f:ac:98:5c:79:d2:8f:
f6:3f:9c:98:0a:bf:47:e4:06:f9:19:ec:48:88:f3:
f5:11:da:2a:bb:0c:ed:3d:84:05:37:78:72:26:a0:
07:80:3a:43:c4:91:0a:93:08:90:ad:80:28:d1:ec:
0d:3a:6f:a2:65:0f:64:0e:71:4a:43:53:6d:cf:bc:
5e:e8:23:1d:ae:b8:5c:bf:93:d8:05:ae:e8:ae:71:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:38:28:00:3E:32:8C:F4:0E:25:B3:C6:10:F8:54:36:3A:67:01
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2a:5c:91:18:53:2a:a6:26:42:e3:0e:4d:48:05:62:0b:9d:
83:63:de:7b:cd:53:a7:9c:04:71:e5:48:ec:07:bd:20:11:ff:
28:ac:01:4d:f6:b6:59:1f:3a:1e:13:07:71:84:80:45:1c:27:
b8:8f:17:22:64:38:98:e7:85:5d:43:3f:cd:bf:cd:97:96:3c:
c7:94:cc:d1:03:30:25:ff:89:17:f3:75:a7:d1:88:99:00:03:
ee:ff:ed:88:11:3c:36:dc:89:35:ab:64:31:32:f3:18:b8:9e:
25:b3:0c:9b:67:2a:34:62:72:b1:13:f4:e9:54:00:73:13:91:
16:f3:07:c1:30:91:92:11:d5:87:54:f5:2d:3a:4c:89:68:73:
37:14:b8:7a:67:ce:f5:0c:4c:77:73:e5:73:94:8e:4d:2c:e1:
13:e4:04:cf:97:12:c4:e0:97:d3:e7:77:f6:63:61:c9:3b:72:
66:ac:79:b7:c1:4f:aa:3c:82:91:72:06:c6:b2:55:d7:5d:90:
42:9e:a5:c6:3c:6b:bb:d6:7c:e4:67:2c:87:5c:ff:67:4d:77:
82:53:ef:25:18:01:e5:87:d5:2e:9f:33:59:e8:da:b5:09:67:
fc:10:26:ac:91:0e:0e:d8:57:2e:c1:92:8b:22:69:55:59:81:
d9:fe:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:10 2026 by rpki-client