Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: K1AlnRNxfMf7cUi1Ud5SmruabbIjGDkXDe6UtgyqO2E=
Subject key identifier: 2F:4D:5E:8C:64:5E:28:4C:A0:3F:29:30:FF:6D:16:6A:AA:28:B1:D5
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019EB6201A79B95F1DD91C1209F6758868B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1294
Signing time: Thu 11 Jun 2026 10:00:17 +0000
Manifest this update: Thu 11 Jun 2026 10:00:17 +0000
Manifest next update: Fri 12 Jun 2026 10:00:17 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: FP9i59KoyF+Oq1qeuRTWnJUe6qb+loYW6YuaAM8WL8I=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:1a:79:b9:5f:1d:d9:1c:12:09:f6:75:88:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jun 11 10:00:17 2026 GMT
Not After : Jun 12 10:00:17 2026 GMT
Subject: CN=2f4d5e8c645e284ca03f2930ff6d166aaa28b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:27:c3:69:9c:45:62:91:fe:a0:80:6d:da:
9d:32:f1:62:fd:45:1f:d7:24:53:fb:dc:6e:e7:f9:
92:14:16:bd:fb:33:b8:33:0a:0f:4e:db:1b:e7:0f:
92:b1:6d:ef:96:02:ce:aa:bf:0b:be:41:cd:8d:c8:
62:c3:20:67:9b:26:79:ca:0b:93:63:b3:58:f3:ff:
16:b6:a7:0e:95:5b:43:0d:bd:d2:09:fa:d8:73:4d:
e8:a4:47:a7:9c:11:2d:10:8b:c5:26:e4:14:80:af:
de:eb:4f:be:dc:fb:5c:c7:d0:69:a6:f7:62:f7:02:
7d:9f:13:b8:97:27:a9:01:2e:7f:06:40:d5:4c:cd:
da:b9:41:f6:9d:f0:e3:0e:be:3c:80:c4:11:80:54:
3b:93:24:f1:9b:a3:79:9e:f7:b5:f5:51:d9:d2:ac:
48:84:de:b0:cd:a8:2f:a7:b0:da:7b:66:48:9c:42:
d3:2b:b9:dd:03:1e:4a:0b:29:a5:54:7c:7c:7e:ba:
5f:1e:24:87:15:f7:3b:4f:02:47:ce:0e:9a:5d:55:
fe:7b:82:4b:59:20:6f:a5:9d:c6:f9:ed:86:5a:ba:
cd:93:41:d5:0c:30:b8:4c:67:73:4f:65:f8:ed:53:
8c:0e:8c:42:df:f1:fa:00:19:b9:f6:ba:29:f9:e0:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:5E:8C:64:5E:28:4C:A0:3F:29:30:FF:6D:16:6A:AA:28:B1:D5
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:ae:1f:d2:2e:fd:1f:19:23:2e:c9:aa:e6:74:05:22:99:
fe:20:23:87:08:91:60:2c:c7:87:4a:2e:69:a9:5d:5b:48:0e:
ad:c4:02:6c:62:67:40:3d:75:f6:f0:55:3b:dc:eb:b0:d0:33:
9c:9c:e5:71:47:0d:0e:62:31:33:2f:ff:5a:1d:f8:1b:8d:45:
45:4f:50:17:38:26:41:ef:a6:62:f4:e3:d4:15:6a:94:06:ef:
0b:e8:68:87:de:0d:ca:27:52:55:9e:db:0a:be:98:89:90:89:
e3:a4:fb:28:d5:c5:f9:4a:58:22:cc:1d:37:66:f9:b0:9d:4c:
e6:e9:06:94:38:c3:4b:c7:63:5c:7f:00:96:2f:91:94:9d:1c:
38:be:ac:e4:a4:9d:63:49:e4:f0:59:26:80:de:f3:5a:46:1f:
b0:7f:b4:dc:46:ca:19:25:2a:b3:1e:49:60:ad:38:a1:dd:24:
6d:32:52:bd:a8:32:c6:3c:bf:4f:39:6f:e0:a9:87:f7:5e:12:
94:d7:a6:c2:14:51:46:14:8e:f5:64:b2:44:ec:b1:db:c2:42:
9d:5d:57:91:01:11:2c:73:b6:7a:75:7e:08:08:9a:9c:23:00:
b0:42:58:f1:7f:09:00:71:70:b6:49:f0:f3:86:0d:81:bc:37:
a5:77:e2:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62IBp5uV8d2RwSCfZ1iGi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwNjExMTAwMDE3WhcNMjYwNjEyMTAwMDE3WjAzMTEwLwYDVQQD
EygyZjRkNWU4YzY0NWUyODRjYTAzZjI5MzBmZjZkMTY2YWFhMjhiMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JInw2mcRWKR/qCAbdqdMvFi/UUf
1yRT+9xu5/mSFBa9+zO4MwoPTtsb5w+SsW3vlgLOqr8LvkHNjchiwyBnmyZ5yguT
Y7NY8/8WtqcOlVtDDb3SCfrYc03opEennBEtEIvFJuQUgK/e60++3Ptcx9Bppvdi
9wJ9nxO4lyepAS5/BkDVTM3auUH2nfDjDr48gMQRgFQ7kyTxm6N5nve19VHZ0qxI
hN6wzagvp7Dae2ZInELTK7ndAx5KCymlVHx8frpfHiSHFfc7TwJHzg6aXVX+e4JL
WSBvpZ3G+e2GWrrNk0HVDDC4TGdzT2X47VOMDoxC3/H6ABm59rop+eBT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9NXoxkXihMoD8pMP9tFmqqKLHVMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdWuH9Iu
/R8ZIy7JquZ0BSKZ/iAjhwiRYCzHh0ouaaldW0gOrcQCbGJnQD119vBVO9zrsNAz
nJzlcUcNDmIxMy//Wh34G41FRU9QFzgmQe+mYvTj1BVqlAbvC+hoh94NyidSVZ7b
Cr6YiZCJ46T7KNXF+UpYIswdN2b5sJ1M5ukGlDjDS8djXH8Ali+RlJ0cOL6s5KSd
Y0nk8FkmgN7zWkYfsH+03EbKGSUqsx5JYK04od0kbTJSvagyxjy/Tzlv4KmH914S
lNemwhRRRhSO9WSyROyx28JCnV1XkQERLHO2enV+CAianCMAsEJY8X8JAHFwtknw
84YNgbw3pXfing==
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:07 2026 by rpki-client