Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: kfivRsxe8F2Bw29DxsS7qGWgla+hycSLIMU0NoA6Y0Y=
Subject key identifier: 05:7A:BE:64:89:F2:56:B8:62:90:1B:E1:A6:66:8D:E6:88:83:C3:90
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019F92489081D9CE0BDD879426082C766211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1306
Signing time: Fri 24 Jul 2026 04:00:56 +0000
Manifest this update: Fri 24 Jul 2026 04:00:56 +0000
Manifest next update: Sat 25 Jul 2026 04:00:56 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: hXed2FrpmNLF32I5IopE/aKOctlH0DUMpWi16irqxJw=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:90:81:d9:ce:0b:dd:87:94:26:08:2c:76:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jul 24 04:00:56 2026 GMT
Not After : Jul 25 04:00:56 2026 GMT
Subject: CN=057abe6489f256b862901be1a6668de68883c390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:18:1f:ad:0b:af:00:55:8f:65:32:d1:72:
cf:ec:f9:3e:e7:13:3c:f5:3f:eb:8e:3a:d7:b2:6a:
7a:68:62:f3:20:63:8b:da:87:a6:69:6b:de:31:a1:
45:18:a4:ae:2d:8b:2a:e6:ed:7c:9e:a2:cc:b3:54:
27:3f:85:95:73:3a:0e:eb:98:f1:8f:1e:89:e8:f2:
c7:c8:49:15:19:d8:1b:63:5c:c5:1c:42:5e:0b:2b:
e7:b5:80:1d:03:d6:b0:5c:9e:7d:9d:1d:96:b2:d3:
16:e4:39:8b:b8:d6:2b:7a:5d:2f:cb:25:af:8f:2f:
f8:04:99:a5:b7:90:91:88:95:0c:81:4c:f1:4e:fe:
3b:c6:24:87:f5:a8:11:f5:29:07:ee:f4:eb:ba:42:
8e:21:81:60:de:b0:6f:d0:26:15:01:a8:5f:1f:47:
5c:40:ec:05:14:ef:dd:ab:6c:14:4f:99:ef:57:d9:
5d:95:18:59:51:90:a2:5f:f3:0b:f9:2f:fb:33:2c:
74:dc:fd:27:4b:ca:9b:12:5d:1d:5c:b9:81:81:9f:
fa:1b:8b:0e:a7:58:da:ba:59:20:86:f9:ba:55:12:
2a:db:65:f9:09:79:96:59:20:5c:72:72:f7:3f:b2:
15:60:04:8d:5b:66:83:c8:df:7f:cb:b4:04:4f:8b:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:BE:64:89:F2:56:B8:62:90:1B:E1:A6:66:8D:E6:88:83:C3:90
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c8:bb:ba:3a:f2:dc:d6:19:d5:7c:64:d3:18:30:0a:d0:2c:
07:31:88:d2:a2:0b:25:19:1f:14:99:aa:0a:aa:8a:51:4b:98:
43:06:f9:7f:bd:3b:be:2c:6a:10:62:31:46:a6:3a:91:6d:7f:
59:fb:9e:9d:bc:8e:93:b4:35:e2:e4:b2:5e:8c:6d:6d:4e:e4:
33:2e:ff:00:69:09:84:97:81:da:c2:f9:37:cb:60:56:89:1b:
f8:2d:f5:dd:63:f1:f1:39:81:ed:2a:30:bb:29:ab:5b:51:53:
b1:46:d0:3a:71:34:e1:66:58:fe:06:61:18:1b:b1:38:fb:95:
08:7f:60:01:f1:53:ee:3b:9d:3d:c4:c4:03:ff:21:d8:1f:ac:
c0:2e:85:26:e8:45:da:75:4a:52:0f:bf:56:ab:4e:55:5f:19:
be:1b:c4:af:71:8b:d8:43:a5:a6:3d:86:ac:74:3f:37:a1:98:
f6:a3:56:2c:57:4c:fa:bf:4c:07:b9:1e:24:89:db:a8:8e:8d:
cb:a7:5c:2e:5d:02:fd:2d:35:c7:1c:4b:ae:3b:b5:4f:0d:3c:
71:57:b4:16:b6:e2:20:3d:67:af:d7:cd:ff:f9:e0:57:09:e0:
e4:19:0d:b3:63:49:d1:a7:c3:54:c3:2f:08:d5:e0:75:44:fe:
ab:be:b5:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSJCB2c4L3YeUJggsdmIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwNzI0MDQwMDU2WhcNMjYwNzI1MDQwMDU2WjAzMTEwLwYDVQQD
EygwNTdhYmU2NDg5ZjI1NmI4NjI5MDFiZTFhNjY2OGRlNjg4ODNjMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwYH60LrwBVj2Uy0XLP7Pk+5xM8
9T/rjjrXsmp6aGLzIGOL2oemaWveMaFFGKSuLYsq5u18nqLMs1QnP4WVczoO65jx
jx6J6PLHyEkVGdgbY1zFHEJeCyvntYAdA9awXJ59nR2WstMW5DmLuNYrel0vyyWv
jy/4BJmlt5CRiJUMgUzxTv47xiSH9agR9SkH7vTrukKOIYFg3rBv0CYVAahfH0dc
QOwFFO/dq2wUT5nvV9ldlRhZUZCiX/ML+S/7Myx03P0nS8qbEl0dXLmBgZ/6G4sO
p1jaulkghvm6VRIq22X5CXmWWSBccnL3P7IVYASNW2aDyN9/y7QET4sjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV6vmSJ8la4YpAb4aZmjeaIg8OQMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8i7ujry
3NYZ1Xxk0xgwCtAsBzGI0qILJRkfFJmqCqqKUUuYQwb5f707vixqEGIxRqY6kW1/
WfuenbyOk7Q14uSyXoxtbU7kMy7/AGkJhJeB2sL5N8tgVokb+C313WPx8TmB7Sow
uymrW1FTsUbQOnE04WZY/gZhGBuxOPuVCH9gAfFT7judPcTEA/8h2B+swC6FJuhF
2nVKUg+/VqtOVV8ZvhvEr3GL2EOlpj2GrHQ/N6GY9qNWLFdM+r9MB7keJInbqI6N
y6dcLl0C/S01xxxLrju1Tw08cVe0FrbiID1nr9fN//ngVwng5BkNs2NJ0afDVMMv
CNXgdUT+q761Rw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:22 2026 by rpki-client