Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: sYhlr+qpkN6kbPc0eoXOs9Bbfvb/OkGomPnPNkp/Ujo=
Subject key identifier: 0B:EC:B6:87:B6:D4:08:4A:3D:48:F0:0C:E0:25:FF:A8:DF:EB:EB:1D
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019D31F54CFEF88376716B98BE30C11F938B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 11CB
Signing time: Sat 28 Mar 2026 01:00:52 +0000
Manifest this update: Sat 28 Mar 2026 01:00:52 +0000
Manifest next update: Sun 29 Mar 2026 01:00:52 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: RluWT+IBcao/jBLreOwbBomMJEoCSxkaC9nOMxcAkro=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:4c:fe:f8:83:76:71:6b:98:be:30:c1:1f:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Mar 28 01:00:52 2026 GMT
Not After : Mar 29 01:00:52 2026 GMT
Subject: CN=0becb687b6d4084a3d48f00ce025ffa8dfebeb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:79:fb:98:e7:0d:48:19:bf:8a:f9:ec:12:
4e:c5:54:79:c6:f0:88:c3:7e:a5:aa:02:4c:eb:34:
27:4b:d0:ef:22:12:b8:e7:4f:30:06:81:5a:f7:ad:
fe:5e:80:4c:9e:b7:08:f1:f3:a7:6d:07:aa:f9:0f:
ff:4a:58:9d:e6:0e:17:9f:ca:76:76:11:98:85:cc:
db:1e:79:dd:08:15:f2:13:bb:49:cf:49:37:36:71:
ea:b4:0b:fa:17:bb:fb:89:88:34:7e:f5:0a:b7:8e:
55:20:66:45:76:6e:ef:96:db:20:54:bc:0c:74:84:
7d:a7:be:e7:9a:fe:2f:c1:0a:de:be:2a:6b:8d:c8:
86:f6:d5:5c:3c:c7:00:91:f3:68:2f:19:ef:9b:34:
0b:f3:d1:54:b1:30:43:aa:c8:6b:b0:a5:e4:c5:1d:
53:e4:9e:e9:e0:71:27:f4:49:6c:4b:30:20:fd:2b:
ca:58:47:50:54:c2:7a:94:53:3c:1b:2e:ff:0a:d8:
c0:99:c0:bc:a6:ff:6d:01:7e:67:e7:f1:5f:86:b0:
9a:c2:f5:ec:44:9b:fb:53:fd:22:c2:fb:38:3f:ae:
89:ca:66:ad:59:0b:46:85:60:90:25:f6:99:1c:8d:
aa:b0:75:9e:d0:74:b0:83:8d:b8:c0:18:5e:9f:6c:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:B6:87:B6:D4:08:4A:3D:48:F0:0C:E0:25:FF:A8:DF:EB:EB:1D
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:93:a7:3b:6d:5c:31:21:6d:69:b0:6e:8c:52:62:59:cc:66:
07:d4:21:e7:48:53:db:b4:8e:18:7a:54:fc:7a:06:67:6e:8d:
58:c6:47:9d:77:d4:ab:da:f7:a4:71:0e:00:e3:00:b2:f8:96:
4d:a3:5d:57:d3:23:36:71:72:01:b7:5c:81:7a:ca:e8:69:d1:
ea:c2:83:b7:0d:80:af:54:f5:94:10:63:08:f7:c6:6c:a6:ce:
70:63:9c:45:92:73:d4:05:e0:f2:42:f2:24:00:82:ea:b4:7d:
12:07:3c:11:a4:bc:31:9b:b4:02:ea:f7:3f:8f:55:eb:31:0a:
ab:e1:ac:a1:4d:7a:b8:c9:73:a8:94:c3:dc:22:3f:48:c4:56:
2f:1d:54:d6:78:d3:a3:9d:0b:e3:2a:8d:fc:bf:60:4f:81:66:
26:d4:3a:42:d4:7f:b1:50:dc:6b:c0:62:6f:72:73:26:d4:94:
fa:c9:b1:e6:21:39:73:85:90:e2:75:1d:af:b5:cf:7e:30:88:
9a:fc:42:1b:2b:73:7c:b2:a0:65:29:bd:d0:11:84:25:72:01:
fd:1b:75:dd:d6:7d:a3:25:4c:61:8b:e9:3b:0f:bb:62:6f:97:
52:6a:fe:83:dd:75:c4:3c:8a:32:f2:21:c0:26:4b:18:49:8e:
e6:fa:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:14 2026 by rpki-client