Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: LxQC1svp2HzCpvsvncG5lSoJ+kuaim7maYFytfznk0Y=
Subject key identifier: 52:FB:46:7C:35:D7:D7:9A:16:FC:00:2A:3A:64:21:AF:B4:01:75:CA
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019E1E6C90085B96E25C4C906B85A1E9EB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:01:31 +0000
Manifest this update: Tue 12 May 2026 23:01:31 +0000
Manifest next update: Wed 13 May 2026 23:01:31 +0000
Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: QKvolVegFA0oK86Rii/rKiDbLB6jnsYNBKLlrEQSYuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:90:08:5b:96:e2:5c:4c:90:6b:85:a1:e9:eb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: May 12 23:01:31 2026 GMT
Not After : May 13 23:01:31 2026 GMT
Subject: CN=52fb467c35d7d79a16fc002a3a6421afb40175ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:42:52:9c:96:7f:23:c4:0d:a1:c1:06:4e:
91:7f:6c:25:06:3b:73:4d:b0:82:87:e1:d4:0f:4e:
c3:53:4a:19:ac:c0:9a:ac:4a:ee:06:54:03:28:5a:
09:70:77:2b:cf:e9:4b:a7:2e:d7:61:2e:ac:c3:d4:
12:98:22:a1:70:80:ea:23:89:a0:1f:52:7d:3f:85:
ca:9c:42:1b:1f:be:42:05:56:48:f4:f4:83:e8:d2:
fa:f6:21:17:f9:d4:c8:99:b8:87:f3:65:16:fa:cc:
3e:ec:9e:d0:ad:31:4f:e5:66:e4:8b:6a:91:f0:27:
e0:d5:47:57:b4:e6:a4:b1:45:81:c9:21:79:e4:d6:
55:ed:97:ed:e1:ed:8e:01:5d:d4:37:1d:ff:ce:b0:
d8:99:ad:63:47:ff:58:77:a8:30:2e:af:74:9e:c4:
ec:4b:19:b6:2b:f5:ab:e6:89:c6:50:e2:30:39:36:
32:fd:a5:1a:30:92:95:1b:bc:84:cc:34:c6:42:32:
d9:3e:f7:dd:b9:12:eb:dd:47:d1:7e:11:9c:22:b2:
36:5d:05:57:c8:95:6b:99:15:f7:e5:9f:77:45:a7:
43:98:5d:c5:19:42:b8:c0:1a:32:1f:77:99:6b:32:
e0:60:77:f6:9a:75:2a:90:21:f4:25:42:b8:08:ac:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:46:7C:35:D7:D7:9A:16:FC:00:2A:3A:64:21:AF:B4:01:75:CA
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a1:8d:60:6c:a1:ae:a3:d5:29:9d:14:ea:e5:fa:4b:a4:08:
db:25:ff:5c:1c:ec:0c:e0:7a:5a:66:11:e6:3a:a9:71:38:78:
f1:78:78:23:27:0a:9f:3e:cc:1e:b2:96:0d:9f:39:70:74:6e:
58:1b:d5:18:01:4c:05:c9:73:9b:95:60:be:cb:29:08:cd:8d:
61:ed:ff:a6:35:bd:98:9b:71:fa:e1:14:db:be:2b:76:16:2e:
ef:99:99:a0:1f:a4:77:28:3e:e4:3c:98:c7:e9:63:ed:5b:2f:
b0:74:80:22:b2:7f:65:78:11:52:3c:d7:91:2e:18:56:a8:04:
11:4e:e5:8c:4e:72:16:f4:7e:5f:e5:2d:9d:72:12:22:f7:dc:
7d:bb:8d:65:e4:95:d3:2d:6a:a6:69:a6:67:1a:03:f3:39:55:
43:14:17:de:c0:f0:e7:e7:72:bb:3f:06:cc:f3:63:3f:b6:4d:
80:7d:ee:bd:d1:d7:74:25:ea:86:09:aa:d2:8a:01:1d:9a:64:
20:7f:b4:7a:6d:78:f1:b9:1f:4a:21:64:e8:e2:cc:77:03:94:
ae:7a:43:05:15:0e:a2:f7:9c:e2:07:75:26:d0:ce:12:a8:31:
57:c1:62:4c:10:43:34:f2:f8:a8:34:af:2a:db:81:be:10:75:
a3:37:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:55 2026 by rpki-client