Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: bbC3sQNY1WbvyWCDxqXtOtaaTM7kLQr2NBchv72hAT8=
Subject key identifier: 34:06:21:07:75:79:AC:04:5A:8A:64:FC:90:5B:6A:11:02:E9:0F:5E
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019E1F7F3E9E9699AEE14EDF67969F868FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1246
Signing time: Wed 13 May 2026 04:01:33 +0000
Manifest this update: Wed 13 May 2026 04:01:33 +0000
Manifest next update: Thu 14 May 2026 04:01:33 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 4sNxbDRVtKvk9OSdK51Mwy2++IfrP9twgLowvCYi5pQ=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:3e:9e:96:99:ae:e1:4e:df:67:96:9f:86:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: May 13 04:01:33 2026 GMT
Not After : May 14 04:01:33 2026 GMT
Subject: CN=340621077579ac045a8a64fc905b6a1102e90f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:15:de:71:9d:6d:67:d7:7c:bc:b8:54:8a:
06:3a:e8:91:d0:69:0b:5e:b8:84:8c:20:5d:b4:90:
bf:2c:93:4b:e3:5f:57:ec:c5:a3:28:d3:70:08:df:
c9:9d:b5:29:00:0a:22:58:3d:0c:91:29:4b:99:68:
06:75:13:58:e6:d2:f9:8f:f7:0f:45:7a:8b:d2:ff:
e8:2e:f9:4e:77:70:4a:77:40:c7:2c:9f:c0:54:18:
13:dc:41:1d:c7:f0:29:c1:8a:9e:b2:43:0c:4f:97:
60:f4:f3:e6:56:09:30:d2:0f:7a:3a:70:73:c2:ff:
cb:6d:26:45:7c:dc:be:f8:7a:58:c1:ac:81:8b:9f:
e5:61:2e:3b:7a:fc:16:1c:1f:7d:1a:a3:cd:6f:a7:
b6:ef:8b:a0:57:8c:8c:db:29:1c:0e:56:90:f9:f2:
36:11:45:be:72:8f:ef:fb:03:d6:ba:37:ac:00:c4:
e1:21:2d:84:75:4f:93:c1:56:51:14:10:a7:28:22:
a8:26:60:e5:06:0a:62:f2:69:22:21:d9:2d:4f:00:
9c:78:f9:b0:74:85:57:55:d2:a9:a2:19:ea:4b:9d:
ec:44:87:f9:e0:0a:72:f9:03:46:f2:96:49:47:15:
5f:a8:51:ac:c8:0a:09:43:e4:a1:f2:21:75:e9:f7:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:21:07:75:79:AC:04:5A:8A:64:FC:90:5B:6A:11:02:E9:0F:5E
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:88:3a:a6:d0:a1:5f:44:0d:f5:3e:0c:e5:c9:32:a2:88:55:
82:9e:2c:72:31:ca:bc:b8:49:70:7c:51:3b:61:37:28:3c:74:
1d:93:b9:82:62:42:46:18:fd:48:85:af:34:4c:ea:95:89:ff:
9b:0b:74:db:56:25:76:99:07:7e:7c:7c:56:23:46:11:5b:e4:
4b:3f:c0:bc:7e:9a:93:fd:44:0d:47:aa:b0:c1:41:d8:3e:1f:
c6:98:e5:67:a7:3d:6d:3c:85:6b:85:38:e2:8e:e7:87:c9:57:
9a:c5:0c:23:07:6d:3d:5a:17:8c:94:b6:b9:89:fa:ee:6d:41:
1c:66:ff:12:34:85:27:6d:04:8e:60:df:2f:10:4c:35:56:7f:
7a:b6:4d:b7:97:ef:d4:29:67:56:03:19:12:f6:eb:b6:e2:98:
3f:dd:1d:b4:aa:ca:64:1b:88:72:ea:c7:fa:af:bd:79:7a:f0:
18:99:98:46:f8:d9:5a:68:ce:fa:db:61:a2:5d:ec:99:08:5b:
ed:f9:1c:25:e9:fc:31:61:b2:dd:cc:5c:7f:a4:10:6c:56:0b:
e3:59:cb:ed:c7:35:c7:91:a6:a2:94:a2:19:00:e6:e6:c7:46:
00:73:28:c4:38:3c:e1:da:e5:4a:ef:10:41:39:19:ec:d5:77:
d1:d4:5a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffz6elpmu4U7fZ5afho/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwNTEzMDQwMTMzWhcNMjYwNTE0MDQwMTMzWjAzMTEwLwYDVQQD
EygzNDA2MjEwNzc1NzlhYzA0NWE4YTY0ZmM5MDViNmExMTAyZTkwZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyMV3nGdbWfXfLy4VIoGOuiR0GkL
XriEjCBdtJC/LJNL419X7MWjKNNwCN/JnbUpAAoiWD0MkSlLmWgGdRNY5tL5j/cP
RXqL0v/oLvlOd3BKd0DHLJ/AVBgT3EEdx/ApwYqeskMMT5dg9PPmVgkw0g96OnBz
wv/LbSZFfNy++HpYwayBi5/lYS47evwWHB99GqPNb6e274ugV4yM2ykcDlaQ+fI2
EUW+co/v+wPWujesAMThIS2EdU+TwVZRFBCnKCKoJmDlBgpi8mkiIdktTwCcePmw
dIVXVdKpohnqS53sRIf54Apy+QNG8pZJRxVfqFGsyAoJQ+Sh8iF16ffdaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQGIQd1eawEWopk/JBbahEC6Q9eMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7Yg6ptCh
X0QN9T4M5ckyoohVgp4scjHKvLhJcHxRO2E3KDx0HZO5gmJCRhj9SIWvNEzqlYn/
mwt021YldpkHfnx8ViNGEVvkSz/AvH6ak/1EDUeqsMFB2D4fxpjlZ6c9bTyFa4U4
4o7nh8lXmsUMIwdtPVoXjJS2uYn67m1BHGb/EjSFJ20EjmDfLxBMNVZ/erZNt5fv
1ClnVgMZEvbrtuKYP90dtKrKZBuIcurH+q+9eXrwGJmYRvjZWmjO+tthol3smQhb
7fkcJen8MWGy3cxcf6QQbFYL41nL7cc1x5GmopSiGQDm5sdGAHMoxDg84drlSu8Q
QTkZ7NV30dRauA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:04 2026 by rpki-client