Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: xaScMj3TY669JWasntp+NPgVnaLOcfbKJ5wFSINtNy0=
Subject key identifier: 79:43:61:25:8D:21:95:20:20:71:30:C0:3D:38:A9:4A:CB:91:63:92
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 019D29CDB2B934BA9E670F1AD88E04CF0880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 15A1
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: 1eP319_mPJ8kfwQNegkNmPurD04.roa (hash: H7afGlrqXGcNc1caI04ioY10YL4IM7BV+lDnnDaF/qw=)
2: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: HScGga3gnqXSgGnNVpk2x+7elkoRngVsEUQIxln5OWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b2:b9:34:ba:9e:67:0f:1a:d8:8e:04:cf:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=794361258d219520207130c03d38a94acb916392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:10:cf:94:ed:ca:29:5a:40:8f:b9:87:b3:
7e:fb:8b:76:1c:e8:10:b3:2a:2a:f8:39:71:04:b5:
cb:4b:12:ba:58:de:07:ab:10:a2:f5:cc:ed:71:cf:
d9:40:a0:7c:f4:0c:ef:14:ac:d8:29:c3:e5:46:b4:
27:e0:a4:d7:b0:12:2c:4f:c2:02:5d:3e:25:8f:f0:
4e:13:fa:60:f5:9a:05:2f:cf:5f:b0:d6:fc:3e:65:
cf:5c:55:d6:61:69:bc:ba:6e:91:a2:78:1b:f4:87:
2d:74:aa:da:19:ea:cf:8c:d2:41:33:0d:47:a2:3a:
48:67:4b:34:36:9c:d6:dd:5f:a0:35:94:40:2d:c0:
ce:c1:7f:82:24:0e:6c:8f:0c:7d:ce:a8:5d:f7:c0:
80:4d:ea:4f:aa:f8:22:3d:d5:21:66:6c:ed:40:e9:
5f:b6:ff:ce:17:62:f8:84:f1:b5:84:cc:36:41:82:
28:93:d2:72:97:e6:a6:60:25:44:c6:67:4d:08:0e:
89:e3:51:74:4a:8e:8b:f5:b2:f9:4f:d2:46:c7:c6:
d1:ba:00:25:e2:87:50:12:22:93:35:58:86:9d:98:
1b:5a:1b:56:27:3d:46:e6:95:f4:b9:08:85:d0:38:
43:ce:a1:34:c0:00:ca:d5:90:21:c3:df:c0:bf:71:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:43:61:25:8D:21:95:20:20:71:30:C0:3D:38:A9:4A:CB:91:63:92
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:56:94:32:26:f9:6d:b6:d4:ca:d8:73:16:9d:22:b2:a8:90:
90:78:ef:e3:30:4d:1e:71:7c:71:57:58:18:23:5f:0f:05:63:
84:30:c2:6e:fc:f1:f7:2c:16:c7:07:34:32:5f:f0:fd:f4:4b:
a5:82:9e:f2:be:5a:cf:42:01:5a:b1:3b:19:25:b4:9f:9d:69:
56:64:29:5e:7c:a0:aa:97:9a:ce:29:a3:22:85:8a:c4:b0:14:
0e:36:f9:36:7c:1b:75:5d:8b:b1:95:06:bb:ee:4d:fa:cb:68:
7b:51:e8:9a:45:a8:9f:42:9b:54:da:46:dd:4b:fb:a6:97:88:
d5:22:e7:8e:70:8a:71:d5:d5:8d:69:f2:c8:2e:cb:35:e7:06:
f5:b0:00:09:83:88:fb:b5:5a:cc:5a:1b:b3:a4:b1:65:9b:ca:
97:67:97:56:9e:2a:0e:45:7b:5e:43:ef:ff:05:8c:e4:5a:a1:
60:c1:8b:34:09:fe:65:3d:bb:05:ec:5c:5d:cd:c3:00:26:ea:
50:5d:ba:69:12:78:ac:6e:42:08:d9:78:af:fc:86:4b:84:f4:
d1:9f:30:5d:97:a4:b1:4d:e5:8b:04:96:43:84:a1:14:58:01:
c4:04:f0:48:a9:56:da:e4:43:aa:3f:7d:a4:4b:5f:04:62:a1:
2b:b8:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:52 2026 by rpki-client