Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: g2YpHbTqgCAEBWNy+yAHbzFQcREgn0IDGlepwUF7A2w=
Subject key identifier: 53:6C:38:09:69:FD:C5:93:59:95:5F:69:26:55:B1:D0:D8:E4:01:D8
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 01A08AFA0DCE6BC338E2AB36334B2C2DAF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 1761
Signing time: Thu 10 Sep 2026 11:00:38 +0000
Manifest this update: Thu 10 Sep 2026 11:00:38 +0000
Manifest next update: Fri 11 Sep 2026 11:00:38 +0000
Files and hashes: 1: 1eP319_mPJ8kfwQNegkNmPurD04.roa (hash: H7afGlrqXGcNc1caI04ioY10YL4IM7BV+lDnnDaF/qw=)
2: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: OqXYjfgF57vXfNq98MS4Fwv1fzcQJ8Cg6QNsNavH8aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:0d:ce:6b:c3:38:e2:ab:36:33:4b:2c:2d:af:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Sep 10 11:00:38 2026 GMT
Not After : Sep 11 11:00:38 2026 GMT
Subject: CN=536c380969fdc59359955f692655b1d0d8e401d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:68:f5:d4:bc:79:50:e9:d1:06:c2:b7:9e:
48:ff:ae:54:c3:fa:f2:a5:76:b0:38:ee:59:8a:ea:
31:d2:a1:dc:23:68:79:47:20:93:e6:5e:ef:8e:9c:
37:e2:81:be:5b:96:9a:d9:63:12:9c:9f:aa:cf:d7:
02:bc:b7:27:f3:3c:ff:b5:5f:41:8c:e0:1b:a9:d0:
6f:8b:29:0e:31:95:90:4d:ed:dc:88:19:49:46:d7:
a6:9c:43:17:c1:e1:9d:bf:09:de:60:be:11:da:b5:
f3:2f:33:b4:4a:26:6a:b8:dc:51:01:79:18:6c:1e:
ea:92:61:83:ba:fb:55:eb:83:ec:0b:40:be:5e:84:
d3:cb:af:b9:2d:4b:85:fd:94:70:50:ae:5a:35:83:
37:00:e4:43:d7:8f:25:45:c9:df:28:32:51:5d:6d:
5a:b8:1a:79:fc:4b:ac:c9:7f:66:2f:1e:e6:d3:4d:
91:bc:d2:d0:1d:39:e5:37:04:74:14:e4:e9:c1:56:
f3:87:77:ca:bc:6c:2d:a2:58:49:ea:1f:0b:dc:99:
7f:9e:d3:7d:05:0e:2b:23:dd:c6:a0:e6:37:cb:65:
e4:1a:92:0c:c3:a9:d4:b1:7f:52:08:94:e3:a3:9f:
a6:b8:8c:98:da:13:b2:c0:3f:23:f7:67:68:9f:d5:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:38:09:69:FD:C5:93:59:95:5F:69:26:55:B1:D0:D8:E4:01:D8
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:d5:84:21:e1:84:8c:60:ad:e2:be:47:89:1c:9d:c9:3b:
d6:5b:f3:21:c8:87:4f:d5:9f:70:c1:9b:79:3a:11:b6:73:21:
dc:84:30:1b:65:97:ef:fe:92:0a:de:47:ce:a6:d0:c5:52:e7:
2f:95:70:a8:58:2e:35:fc:cd:f5:15:49:8a:b9:a6:98:0d:6b:
a4:e8:ed:51:a7:b5:a7:6b:c3:f6:27:b8:c2:46:41:f6:4f:97:
70:3a:58:2f:e0:73:d4:08:40:a4:b6:fe:93:47:35:44:10:fe:
ef:57:19:62:bf:43:cd:fa:74:37:8c:eb:bb:08:78:2e:70:ab:
24:05:0f:62:f2:04:f4:fa:37:7d:f2:a9:f3:87:2d:99:2f:4a:
b0:40:4b:a9:7b:43:80:17:01:3b:3f:7d:0b:b1:c1:41:26:82:
6f:37:43:a6:a7:f6:67:a3:88:af:f1:cf:55:64:40:d2:3c:00:
20:d9:66:72:b2:49:da:e4:df:bb:a6:fb:f3:f7:cd:e2:63:7f:
1e:50:bc:22:00:00:0c:17:4d:51:39:8a:9e:fa:ff:43:da:d3:
92:dc:86:8d:c8:be:39:6b:a9:4a:82:5e:52:03:e8:16:d4:9d:
98:ac:d3:65:2d:51:ac:c4:47:bd:ba:31:ab:f9:0f:78:4b:42:
88:eb:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:23 2026 by rpki-client