Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: nCeqlGTlAs+rBb1FwGdPylo7sP6ZjPFxiCBfleAodSs=
Subject key identifier: 04:32:3E:F1:40:A8:59:4E:24:39:AE:7C:7C:30:F4:B0:2E:31:87:92
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01A1770387FF1F5AE88B8054C348DCD45249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1401
Signing time: Mon 26 Oct 2026 07:01:22 +0000
Manifest this update: Mon 26 Oct 2026 07:01:22 +0000
Manifest next update: Tue 27 Oct 2026 07:01:22 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: cH79GPE2GdJxgZH4V5L0+S1dWBSlUeJ48mZr5PVcEFA=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:87:ff:1f:5a:e8:8b:80:54:c3:48:dc:d4:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Oct 26 07:01:22 2026 GMT
Not After : Oct 27 07:01:22 2026 GMT
Subject: CN=04323ef140a8594e2439ae7c7c30f4b02e318792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:bf:93:ae:b4:d8:54:08:76:12:dc:5e:27:
48:1c:a6:90:ad:7a:e7:fb:34:27:ea:f2:14:7e:f2:
60:a9:77:e1:d5:c6:aa:06:7f:68:2f:fb:b4:6a:5b:
80:3e:79:d6:7e:c6:fd:c0:22:56:f7:1e:b1:1a:7e:
ab:4c:ee:d4:65:bd:fa:ae:2f:2f:ae:3c:83:69:25:
fe:8c:be:eb:ae:51:3c:cd:dc:0e:a8:1a:4c:2e:65:
96:14:e2:7d:2c:b2:56:59:eb:28:20:de:1f:82:70:
ad:a7:91:61:5d:7c:30:c3:e3:85:c1:b4:0d:a6:3a:
18:ae:97:88:b9:c7:37:d7:30:ad:1a:93:7f:f9:26:
5f:dd:c7:73:5d:1b:aa:36:45:00:b7:9a:89:32:5e:
a3:0f:e7:68:40:d9:00:aa:8c:bc:af:99:7b:40:aa:
2e:5a:44:03:24:13:cb:87:8a:37:c6:15:02:09:03:
77:99:86:23:53:6c:ae:06:74:db:d5:81:0c:ae:35:
92:5e:49:3b:b8:07:fd:c0:3c:25:3d:25:db:3f:11:
0b:e3:ae:31:0f:13:07:b0:ce:4c:5f:4d:9f:ae:e2:
96:e5:25:a2:7a:ec:07:ec:15:3e:97:76:2c:06:96:
e0:9c:95:4b:97:7e:13:93:30:b6:db:da:7b:33:47:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:3E:F1:40:A8:59:4E:24:39:AE:7C:7C:30:F4:B0:2E:31:87:92
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e3:06:75:68:18:1a:84:c6:c3:0b:ec:2e:94:48:e0:7d:55:
a2:a6:a0:4e:3b:69:49:f4:0f:8f:50:1a:bc:a0:0c:4d:24:f8:
8c:b9:0e:1c:db:36:cc:d5:6d:d2:32:8c:f9:ad:1a:14:94:2e:
bf:18:99:41:6d:3e:ef:bd:e9:d8:83:4c:1c:dc:d5:37:b9:a4:
9e:d4:23:b4:92:91:43:11:40:83:78:c0:76:92:2a:31:04:72:
5c:5c:a5:13:26:9a:4d:82:9c:5c:9f:f4:33:2e:e0:7b:4c:99:
5b:94:f2:70:15:b6:74:9e:13:c9:56:56:25:3e:5b:f3:f2:15:
9f:32:4b:d5:47:76:51:e3:5d:fe:d7:47:2c:19:f2:d6:e7:5f:
03:d9:4b:f8:4c:7b:43:6c:04:17:f7:b0:01:39:d4:40:7d:3a:
7d:60:64:35:2d:a6:3b:c8:b6:9b:45:c7:2c:d2:97:ba:5b:0b:
2e:33:90:e1:b8:44:07:ea:98:16:52:43:94:77:29:4a:e9:3b:
f1:f2:63:3e:3d:ef:79:45:af:10:df:35:21:45:eb:f0:bb:8f:
f5:c2:e1:fd:6d:db:e1:20:2d:d9:6c:62:b3:40:fb:8d:b9:16:
db:4a:0a:23:4c:23:5f:43:c9:56:41:14:74:8f:f5:d0:71:17:
fc:27:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:07 2026 by rpki-client