Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: XKihLTrmRL86GEhZLu45zoq0OhVas2EuFHq/psR++vs=
Subject key identifier: DF:25:B8:01:3B:15:65:79:83:13:90:B4:21:A1:33:BF:39:01:1F:D9
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 019FA33C39E66B8104EBBE25D5C40AF8D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 16E9
Signing time: Mon 27 Jul 2026 11:01:00 +0000
Manifest this update: Mon 27 Jul 2026 11:01:00 +0000
Manifest next update: Tue 28 Jul 2026 11:01:00 +0000
Files and hashes: 1: 1eP319_mPJ8kfwQNegkNmPurD04.roa (hash: H7afGlrqXGcNc1caI04ioY10YL4IM7BV+lDnnDaF/qw=)
2: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: ICOBLTZtgUGzHSbaE2SZ6AkfmUeZR7Iexj1qYS5c9Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:39:e6:6b:81:04:eb:be:25:d5:c4:0a:f8:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Jul 27 11:01:00 2026 GMT
Not After : Jul 28 11:01:00 2026 GMT
Subject: CN=df25b8013b156579831390b421a133bf39011fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:3a:c0:f5:fe:53:97:46:ca:26:3a:6c:ed:
d0:b5:3b:c4:a2:a8:7c:28:db:3e:83:f2:59:24:66:
b0:ff:ca:38:06:c8:1c:55:67:4d:6f:e5:23:7f:0f:
cb:07:b4:a9:c5:41:af:29:c4:72:be:10:83:a9:e9:
d0:d0:eb:f0:74:52:92:22:26:3f:e9:06:51:2a:f7:
fa:fd:89:14:52:37:e7:cf:0b:76:7d:79:64:89:28:
fa:88:83:fe:5a:7a:41:e9:36:c8:51:85:8a:a3:3b:
57:f0:c7:cd:e5:ab:48:39:47:6a:34:b8:bc:04:e4:
fb:53:1b:91:b3:3b:93:ad:6c:3b:a2:43:51:b3:6b:
e9:d4:c5:0c:66:77:12:2d:cf:f8:4a:ae:00:ed:06:
7f:8d:83:8d:41:16:4e:4c:d9:18:7d:cf:96:16:32:
6d:61:e5:85:ae:e7:74:24:c6:12:69:2b:fc:27:07:
02:bd:50:f0:87:cc:f4:6c:99:38:2e:8f:af:a4:5b:
3f:2b:e0:86:dc:06:40:55:16:5d:df:33:bc:00:85:
8d:d9:5b:b1:20:5f:f3:96:24:1e:a9:af:07:97:4b:
73:ef:30:77:62:b5:cf:47:fb:67:6e:7f:dd:0e:45:
cc:16:29:ba:ce:4f:ad:bf:2c:d6:76:0a:a2:9f:31:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:B8:01:3B:15:65:79:83:13:90:B4:21:A1:33:BF:39:01:1F:D9
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:b5:2f:08:7c:09:86:e1:7e:8a:b4:47:2b:e7:fc:fe:d0:
3c:60:08:65:ef:a2:16:92:33:71:52:6b:82:fa:c8:1f:5e:64:
52:45:e3:04:6d:61:c0:ac:43:15:68:fc:4c:b8:c0:97:ed:28:
bd:7c:44:77:04:05:2e:8b:6b:00:06:62:dc:d0:ac:55:52:19:
d0:00:17:a2:09:e1:15:6c:3a:e9:51:70:01:d4:01:1c:12:7e:
d4:0e:9e:6d:c4:fb:f6:4a:22:23:29:9a:79:77:63:4d:51:ca:
87:c6:4f:8b:bc:e0:2b:5a:f1:04:0a:da:c1:1e:a7:62:3b:e6:
e0:9a:52:05:17:6b:e7:2d:98:23:17:1a:45:2a:a7:e0:ed:ad:
25:8f:e2:be:5e:fa:a6:7e:2c:af:96:9f:f4:6d:db:03:f1:22:
2f:74:90:6d:2e:13:4f:9b:9b:e7:f4:ec:5b:ba:f1:f9:b2:84:
59:37:6b:e0:da:c0:9f:66:8b:65:2b:92:9b:a7:54:79:29:e4:
61:d6:ff:93:c6:41:32:cb:0c:ba:02:83:5f:87:13:f2:6c:3d:
ce:29:72:58:7e:de:5d:ad:1f:16:e0:c3:50:32:a9:78:19:6c:
4f:b7:ff:8f:42:13:74:de:52:0f:6e:0c:11:01:b3:e9:42:2a:
d8:2c:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:04 2026 by rpki-client