Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: HYBKxUJV2+AT05gsJe5PciVYUWb+8bBoSKz+drFiTlI=
Subject key identifier: C7:7C:11:17:EA:CC:E8:96:4B:F2:CF:3A:59:8F:53:CF:17:0C:12:25
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019F9DDEF037AE02DE932764F65F9EA0E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 130C
Signing time: Sun 26 Jul 2026 10:01:00 +0000
Manifest this update: Sun 26 Jul 2026 10:01:00 +0000
Manifest next update: Mon 27 Jul 2026 10:01:00 +0000
Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: /cKhOeH78qnJnqf//zr9TdmX9+g2Iy73GowzJ4YMUWo=)
3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:f0:37:ae:02:de:93:27:64:f6:5f:9e:a0:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jul 26 10:01:00 2026 GMT
Not After : Jul 27 10:01:00 2026 GMT
Subject: CN=c77c1117eacce8964bf2cf3a598f53cf170c1225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:ca:91:ce:23:f4:94:b3:0b:4c:1b:76:cf:
78:63:c7:72:3c:63:06:f1:b2:91:83:f0:a8:db:8b:
17:dd:15:e4:7d:a2:fa:18:ba:fe:ba:ad:11:c6:65:
19:2a:13:e5:c5:2f:57:fc:da:9f:19:a2:04:53:aa:
f6:25:8b:5a:1e:8c:4c:e4:31:69:19:12:21:e7:7f:
40:68:c8:9e:c1:f3:a6:36:42:55:6e:14:8b:bc:51:
46:fc:ec:36:0d:f8:c4:a9:93:b1:2a:f1:3f:15:3a:
b1:24:fa:78:c3:85:01:93:96:56:eb:bd:fb:ed:fb:
88:c5:ac:ac:b0:cd:e6:d1:b4:65:52:66:74:7a:df:
d8:30:b0:26:d2:a7:e0:d8:fc:9e:dd:2c:e8:9f:50:
51:7f:f1:ea:1d:32:ac:9e:95:92:d9:79:9f:47:9f:
17:b6:c8:63:5e:b1:c6:65:c4:1f:f1:08:cc:f3:c9:
50:e6:d8:f7:dc:dc:c2:1e:10:40:dd:ed:c6:cb:0a:
e4:64:07:6e:58:d9:28:7c:e8:c0:58:3a:ae:25:c1:
a4:3a:34:aa:97:ab:df:b7:a0:d4:67:d6:96:d8:a9:
cb:f5:ee:cc:3e:ee:96:e8:3f:e5:95:3e:70:ac:29:
3f:3e:55:eb:6e:73:68:30:f7:a0:ca:4c:4c:03:8f:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:11:17:EA:CC:E8:96:4B:F2:CF:3A:59:8F:53:CF:17:0C:12:25
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:be:3e:fa:81:fd:62:24:d1:65:7b:7d:91:27:ba:db:a6:58:
39:aa:b0:69:fe:4c:60:7b:8e:27:58:ad:9a:fa:e9:69:06:b1:
ef:2e:32:26:49:2c:36:c2:b0:b6:b7:26:e6:d3:f7:e3:db:5a:
99:8a:66:56:8c:ae:27:b7:86:2e:5a:10:b2:70:83:43:77:65:
26:4d:13:94:64:f4:90:e6:4f:cd:f3:22:97:cd:f6:5e:12:e6:
9a:9a:ae:1b:01:ca:9d:e1:fb:7d:75:71:7d:2a:06:1b:7e:25:
b6:08:2c:d5:3f:fe:83:59:c0:58:07:b2:95:6e:0c:fc:10:d0:
ea:34:b0:ee:74:9e:59:3e:e7:97:8e:18:1a:17:34:b4:64:d2:
bf:54:62:b8:6d:a8:cb:f0:54:2d:cd:0b:88:82:b9:7b:03:56:
63:30:be:c3:54:ee:f3:95:e7:29:8f:8b:68:3e:a7:37:d7:1f:
3c:94:b5:e6:21:ba:0d:c0:f9:db:1d:20:62:a2:45:41:02:45:
9a:b0:f5:a2:dd:52:f1:12:da:57:39:8f:11:df:87:8d:48:81:
1d:bb:e5:15:b0:0c:87:30:fe:2c:35:99:2d:30:dd:8f:07:fd:
09:27:5c:c6:7c:17:8b:0c:f8:03:75:88:f1:38:5d:9b:56:d2:
89:6d:93:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+d3vA3rgLekydk9l+eoOCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjYwNzI2MTAwMTAwWhcNMjYwNzI3MTAwMTAwWjAzMTEwLwYDVQQD
EyhjNzdjMTExN2VhY2NlODk2NGJmMmNmM2E1OThmNTNjZjE3MGMxMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26nKkc4j9JSzC0wbds94Y8dyPGMG
8bKRg/Co24sX3RXkfaL6GLr+uq0RxmUZKhPlxS9X/NqfGaIEU6r2JYtaHoxM5DFp
GRIh539AaMiewfOmNkJVbhSLvFFG/Ow2DfjEqZOxKvE/FTqxJPp4w4UBk5ZW6737
7fuIxayssM3m0bRlUmZ0et/YMLAm0qfg2Pye3Szon1BRf/HqHTKsnpWS2XmfR58X
tshjXrHGZcQf8QjM88lQ5tj33NzCHhBA3e3GywrkZAduWNkofOjAWDquJcGkOjSq
l6vft6DUZ9aW2KnL9e7MPu6W6D/llT5wrCk/PlXrbnNoMPegykxMA499YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd8ERfqzOiWS/LPOlmPU88XDBIlMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA074++oH9
YiTRZXt9kSe626ZYOaqwaf5MYHuOJ1itmvrpaQax7y4yJkksNsKwtrcm5tP349ta
mYpmVoyuJ7eGLloQsnCDQ3dlJk0TlGT0kOZPzfMil832XhLmmpquGwHKneH7fXVx
fSoGG34ltggs1T/+g1nAWAeylW4M/BDQ6jSw7nSeWT7nl44YGhc0tGTSv1RiuG2o
y/BULc0LiIK5ewNWYzC+w1Tu85XnKY+LaD6nN9cfPJS15iG6DcD52x0gYqJFQQJF
mrD1ot1S8RLaVzmPEd+HjUiBHbvlFbAMhzD+LDWZLTDdjwf9CSdcxnwXiwz4A3WI
8Thdm1bSiW2Tig==
-----END CERTIFICATE-----
Generated at Sun Jul 26 16:57:33 2026 by rpki-client