Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: JweEuUgKy+LbOFnxH5sSLkBsgG/tGWPYb2Z7PeKXF8k=
Subject key identifier: 44:68:AA:77:CF:A6:84:BD:23:1A:4F:A9:14:E9:FF:32:56:3D:B1:EF
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019D37C03D78BEE5AC42BE0167F11139F320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 11CE
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: Zn6+EybKzWi4cr2IfOLJie0Xf5KSqKi8Fb+Ha3V4/9Y=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3d:78:be:e5:ac:42:be:01:67:f1:11:39:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=4468aa77cfa684bd231a4fa914e9ff32563db1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:7c:62:53:c0:2d:8f:6f:9b:ac:ab:df:0b:
1f:55:48:cd:2a:74:88:28:20:eb:5f:ea:ba:af:71:
ed:be:6a:4d:65:ec:2a:47:41:7b:52:ac:32:60:8e:
2d:46:97:2e:e9:6b:45:41:0c:0a:f7:09:93:14:f3:
67:a2:34:60:0c:8d:9c:8f:85:c8:4d:a4:16:88:7f:
68:71:3e:0a:87:1b:58:49:8a:6d:02:af:0b:24:bc:
97:4b:89:56:0a:86:56:31:07:04:9a:fe:9a:21:bb:
c1:41:37:80:82:b9:d9:43:8f:ae:e5:5b:46:45:e0:
23:06:3c:d2:a9:1f:55:8f:81:28:00:c9:ea:c5:ec:
8c:7d:59:02:9d:12:e5:f1:8c:2d:d5:fd:cc:53:88:
41:7f:6f:39:0d:8e:41:8b:b9:e7:74:a0:c5:6a:70:
c7:e3:9a:0c:be:83:45:f2:ca:92:3c:b9:f8:4a:38:
00:26:8c:cd:bc:27:cb:b9:2d:c2:e7:d0:fa:92:23:
64:33:12:7f:9b:12:28:bb:b7:12:87:d0:aa:fd:6c:
9f:b6:c6:d0:5e:27:fd:c0:bd:eb:0a:cd:39:01:9b:
01:5a:b3:6f:78:30:3d:e3:92:6b:61:e8:52:4d:2d:
e3:af:d9:04:1f:57:8e:44:ac:d8:67:0f:e1:e3:b3:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:AA:77:CF:A6:84:BD:23:1A:4F:A9:14:E9:FF:32:56:3D:B1:EF
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:36:c4:fc:0f:93:a1:30:e4:27:5d:2d:52:30:38:18:34:
d4:eb:a6:1f:1b:9e:f1:10:b6:60:e0:a6:f0:20:12:1d:30:3c:
22:65:d5:35:7e:06:55:cc:07:82:95:4b:e1:00:98:9e:04:97:
3a:87:74:e3:63:85:bc:fc:0b:1f:be:72:d8:55:74:4e:92:0b:
a8:ee:59:a9:33:3d:ae:42:7b:c4:4d:80:9f:6a:82:68:db:cb:
5d:a8:9b:9e:36:36:b1:79:5d:d0:c6:08:07:78:0c:1f:af:2f:
81:85:7f:0a:e4:98:27:b0:f6:63:ed:4d:a5:78:af:88:5f:f1:
fe:47:0c:09:a1:14:7d:65:cf:0e:89:0f:23:92:28:8f:76:4b:
3a:1c:d2:30:80:e3:38:03:b7:c1:44:5b:99:9a:35:51:d9:08:
ee:cf:74:45:a9:6f:bd:7e:fe:a6:f9:cb:d0:aa:a0:fe:df:aa:
4a:46:c2:a9:0d:da:27:a2:72:31:83:8e:48:83:e1:48:92:b7:
e0:5c:bd:0f:ed:7c:d2:6c:4a:46:26:96:e1:0f:be:44:4c:9c:
31:d8:00:2f:93:43:18:01:46:7f:d1:c7:a7:fb:17:af:23:63:
c9:f3:72:e9:0e:d8:de:92:b3:dc:f4:4e:e7:b2:eb:cd:25:d4:
e6:af:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:54 2026 by rpki-client