Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 7cdFOoWRjged7RcohcVdRYYadW2buR+7U+/66Ddaqvo=
Subject key identifier: B8:56:D5:FF:7D:4C:7A:CF:23:D0:AF:C9:73:F3:14:42:C4:DE:0A:13
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 01A0F67B765EEA5A43C75E658F42F60C73A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1A7F
Signing time: Thu 01 Oct 2026 08:01:21 +0000
Manifest this update: Thu 01 Oct 2026 08:01:21 +0000
Manifest next update: Fri 02 Oct 2026 08:01:21 +0000
Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: Qy/YlqcuO8wm2on5d3gv9gL4ForP9osorf5nIY1PQsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:76:5e:ea:5a:43:c7:5e:65:8f:42:f6:0c:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Oct 1 08:01:21 2026 GMT
Not After : Oct 2 08:01:21 2026 GMT
Subject: CN=b856d5ff7d4c7acf23d0afc973f31442c4de0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:f6:c3:b0:9e:7f:75:43:d9:32:90:12:f1:
6d:25:fb:ef:28:a1:e8:31:a2:3c:7c:d6:f5:17:ee:
f1:b2:6f:c6:9b:27:70:10:5e:a1:ef:89:81:79:7c:
34:97:da:5c:23:84:44:3a:3e:16:ec:e2:a4:cf:4a:
20:6e:16:95:cc:29:1d:a7:de:be:8a:62:88:b6:4b:
6d:28:f5:2b:28:dc:72:d4:52:16:21:a9:70:1c:4c:
dd:e2:d4:9d:4f:48:1e:2f:57:21:f4:3c:08:94:97:
a0:99:b2:96:32:29:a0:06:6c:57:5a:1b:60:0e:97:
ec:8b:5e:33:7f:82:44:3a:f4:b2:7c:62:6b:6b:96:
6e:c1:77:ab:a5:9b:f9:86:c4:15:b8:07:e0:06:4e:
98:4e:69:a1:a1:ce:e2:57:b3:4d:78:1a:71:01:8c:
e7:63:42:03:9b:d0:43:23:3e:a4:71:54:fd:f3:ce:
94:5b:ec:64:8d:14:d1:23:f2:eb:76:32:2a:4c:24:
63:6e:8d:13:59:ef:a8:5e:9f:9b:0e:40:55:72:b8:
8a:99:b3:a5:1c:20:e4:8c:a2:d0:ad:8f:4a:7e:dc:
3e:18:87:ca:5b:da:c0:bf:d0:c6:9f:06:8f:e3:e9:
65:18:24:9c:64:84:5b:24:10:47:b8:8e:3e:f0:83:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:D5:FF:7D:4C:7A:CF:23:D0:AF:C9:73:F3:14:42:C4:DE:0A:13
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d7:71:e4:d3:4a:1e:da:20:7a:e3:c7:45:cf:d2:4e:81:b6:
69:da:0d:b8:0b:81:09:c4:8f:f5:b8:09:8e:14:23:2f:73:8b:
c8:fc:85:1f:7f:f1:76:aa:0f:98:f0:e2:f1:b3:a2:15:45:16:
e0:c0:78:78:28:46:d0:76:2c:80:46:e2:66:ca:e4:42:eb:a3:
8a:de:70:1a:d6:f8:ce:d2:80:76:21:88:49:30:97:f5:ab:23:
05:d9:88:f2:be:01:23:56:43:bd:35:f2:3e:9a:65:2d:46:d2:
da:e9:7d:ce:6a:cf:47:49:ba:76:41:83:af:57:ce:7c:19:ad:
31:56:20:eb:79:6f:36:af:5e:f5:13:ce:eb:4e:78:08:53:d1:
c0:22:31:22:9d:7b:39:2e:4c:ea:7a:91:3b:fb:6c:b9:48:d0:
ab:7d:87:35:fd:b5:27:04:04:97:b5:db:c6:a9:df:2f:f9:5a:
cb:5b:18:ba:ad:f7:b3:59:ee:e7:6e:0e:dd:4d:40:9a:ce:ec:
22:82:e2:03:73:6a:10:ed:ff:4e:78:f3:b5:48:3a:ed:17:05:
bb:10:c3:9d:76:c2:42:1e:d2:89:12:61:d8:02:5c:98:91:02:
cb:07:a5:c3:6f:3b:a2:13:73:61:b7:ac:23:3e:7e:48:0f:c5:
f5:bc:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:44:03 2026 by rpki-client