Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 8qQ+8dc7StpgY+U6BuwcPB7nL04sGnk2iMYiT3Jlm1s=
Subject key identifier: 86:A9:CF:34:F3:6B:B4:20:8A:3E:04:4A:31:75:34:20:66:E6:32:B8
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019D273AD2D8A036D9E6B6E636B59FEBBE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: cVrbuuO3x+0rHGU9IQFLlP7Wp+O06rNEP+OM7vGGUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d2:d8:a0:36:d9:e6:b6:e6:36:b5:9f:eb:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=86a9cf34f36bb4208a3e044a3175342066e632b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:6d:c9:d9:cb:74:df:1b:f1:46:72:42:51:
44:77:4a:5b:d1:15:6e:f9:ec:f1:67:34:59:df:a0:
a7:dc:fd:44:60:4d:f1:56:9c:d7:78:5f:3d:6a:8c:
c2:4f:39:06:7e:fb:29:97:a9:4f:2c:2a:e7:6c:60:
e6:e7:1d:ab:6b:6e:ab:ce:61:b6:17:02:d5:0e:52:
20:44:37:5c:d7:45:32:bc:74:d0:d0:50:5b:2a:ee:
35:29:4b:df:80:0b:0c:73:65:54:39:f0:65:52:37:
85:ca:48:10:49:09:95:c5:cf:8f:0b:05:bc:e2:4d:
b2:35:38:f3:17:40:3c:23:b7:d8:20:63:61:6c:3c:
91:c6:27:88:aa:10:92:9c:1c:77:a2:ee:cf:78:4a:
3d:2c:53:02:a8:e1:b7:d2:6f:0a:58:16:84:99:f3:
1f:00:c0:fc:da:12:af:d5:7e:46:96:57:6a:cf:2e:
99:cc:88:04:0d:be:48:a0:14:3f:78:b8:9e:6c:c9:
5e:74:c2:59:e1:2b:2f:08:48:45:6a:8f:e9:a3:a7:
41:5c:df:db:6b:5a:23:a8:7d:0b:11:b3:1e:32:b0:
bc:c9:6f:0c:0a:44:1c:2a:a1:60:f4:f2:ff:02:cb:
55:2a:d0:0d:7a:1f:76:04:35:f4:cf:c6:58:1b:c4:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:CF:34:F3:6B:B4:20:8A:3E:04:4A:31:75:34:20:66:E6:32:B8
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:6a:9e:71:7e:20:fb:58:b3:6a:65:a1:a4:6c:28:04:0a:a0:
ec:d4:4f:10:4f:c1:f6:2c:40:cd:f6:d2:c4:e1:bf:46:6d:cc:
f0:31:2e:00:06:57:e7:83:c6:eb:32:f8:74:90:c6:3b:a7:4c:
c2:a0:9f:c4:bf:34:c0:19:8a:67:b6:d9:1c:4a:4f:3d:6c:f3:
ca:c6:04:b7:62:80:0e:9b:ae:e6:98:6e:98:ac:b9:cf:77:65:
c1:66:3f:63:e6:b5:a4:66:11:c3:aa:e0:86:e9:3b:0c:21:a8:
7b:59:ac:83:b3:a6:13:49:48:c7:3d:fa:24:a5:35:33:ce:87:
ec:3b:63:d4:19:bf:d4:f5:88:d2:d9:83:a9:53:83:50:69:a0:
db:b0:aa:0d:a3:32:d5:ee:2b:ee:a8:59:00:1d:d6:2c:15:06:
a4:51:1d:85:f3:5a:58:a7:e9:43:da:92:e8:35:18:dd:20:38:
97:a3:6c:52:bf:da:c8:4a:90:92:68:f0:98:c1:74:eb:0d:44:
5c:06:b0:a5:c4:41:b9:ea:e4:c5:a2:94:1d:01:e5:c8:0d:40:
61:b5:5f:47:90:2e:3e:da:c7:21:ff:13:20:f1:a9:22:f6:92:
6a:ea:a2:75:99:dc:ea:b5:32:fc:06:b1:10:2c:74:25:15:7f:
e8:e9:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:10 2026 by rpki-client