Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: MRnRmsZUmheIYvisQimnrVA2ialj/JaCo+eI5sTY11g=
Subject key identifier: A7:2A:CA:4F:5C:5B:2A:5B:10:A9:32:F4:83:2F:26:B6:89:BA:50:0D
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019F9323FEF18B61F931F29238614B732685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: UBJGksc/FBMuIHes7rVsh22/9VEoazHXGonMiKXLC2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:fe:f1:8b:61:f9:31:f2:92:38:61:4b:73:26:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=a72aca4f5c5b2a5b10a932f4832f26b689ba500d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:46:f1:4b:4c:b9:45:ab:8f:09:07:e0:c7:
f7:71:be:69:40:b7:ae:49:8c:5c:ea:5c:50:0c:dc:
e5:1a:26:7a:fb:64:5a:ed:d3:fe:c7:02:58:b4:c6:
c2:fc:27:1f:f3:3e:68:18:82:eb:87:fb:11:c7:ff:
ec:5d:2d:dc:11:cc:cc:31:c7:df:8f:9d:26:44:5b:
2b:e2:89:73:0e:38:f6:89:68:c8:59:0a:dc:ed:e3:
b3:c1:9f:67:01:53:00:b6:dd:b9:bc:d3:f6:3d:e9:
97:a6:fa:e5:fe:3f:9c:2e:2f:15:70:bf:74:28:81:
f5:0d:c5:2f:a3:bd:82:3c:b4:2c:16:1b:c4:06:89:
80:e3:76:e4:0a:ba:f8:1f:1c:ea:4c:58:0e:c7:f4:
81:d4:6d:60:fa:cc:79:ef:e7:00:07:ea:31:6e:ec:
11:77:0f:bd:d5:1a:e5:65:ab:83:e3:aa:86:90:0b:
df:e7:a8:a1:f9:b8:09:e5:4c:59:27:5e:2b:f5:a3:
fd:2b:ec:3e:cf:a1:8f:59:a9:d3:28:70:5e:4c:d0:
0c:ab:3e:38:47:68:d2:c3:1b:72:00:2b:63:7c:12:
a7:34:dc:e5:37:8b:5f:76:98:62:15:ba:93:66:69:
19:82:50:37:6a:f2:80:95:d4:a0:cf:3f:9f:2f:43:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:CA:4F:5C:5B:2A:5B:10:A9:32:F4:83:2F:26:B6:89:BA:50:0D
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:5a:53:db:c4:b5:09:fb:5d:5c:8f:44:48:b4:08:18:4b:
bb:00:d5:59:5f:47:dd:1b:e7:99:7c:a4:a6:48:95:39:bd:da:
29:28:81:38:0a:5c:29:9d:72:ed:40:d9:85:c3:c1:a6:3d:85:
7c:2e:96:58:12:a0:33:07:39:40:6d:5d:d8:c2:09:86:ca:e8:
34:91:32:7b:e5:1d:45:7a:37:77:33:28:4b:b3:13:63:19:f8:
0c:45:f9:a3:40:80:82:a8:3b:20:e5:d7:b1:58:c8:4f:d8:ff:
2b:41:d4:ae:cd:cb:21:55:dd:ab:2d:82:e7:3f:e3:7c:a9:20:
83:90:7c:62:cd:28:f2:3d:37:e2:8a:d4:d0:25:ee:17:a6:91:
f3:62:7c:04:16:6a:1b:09:b0:a0:49:53:f7:cd:67:f3:c0:0a:
8a:30:d3:e0:6e:b8:3f:08:32:6b:e3:88:55:1d:e0:a2:03:f9:
f8:7f:2c:46:75:6a:70:c1:d5:c8:d4:d7:04:7f:d2:46:4e:23:
a2:d3:19:21:32:ad:b1:66:0d:db:ec:d0:0b:57:e8:12:54:ee:
a7:34:9b:b3:5f:9a:45:f3:30:60:ba:26:bb:d1:57:6a:76:60:
da:88:33:f4:07:66:45:ae:c2:89:12:1e:0a:25:ba:e3:f2:a5:
6c:98:83:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/7xi2H5MfKSOGFLcyaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjYwNzI0MDgwMDM3WhcNMjYwNzI1MDgwMDM3WjAzMTEwLwYDVQQD
EyhhNzJhY2E0ZjVjNWIyYTViMTBhOTMyZjQ4MzJmMjZiNjg5YmE1MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuttG8UtMuUWrjwkH4Mf3cb5pQLeu
SYxc6lxQDNzlGiZ6+2Ra7dP+xwJYtMbC/Ccf8z5oGILrh/sRx//sXS3cEczMMcff
j50mRFsr4olzDjj2iWjIWQrc7eOzwZ9nAVMAtt25vNP2PemXpvrl/j+cLi8VcL90
KIH1DcUvo72CPLQsFhvEBomA43bkCrr4HxzqTFgOx/SB1G1g+sx57+cAB+oxbuwR
dw+91RrlZauD46qGkAvf56ih+bgJ5UxZJ14r9aP9K+w+z6GPWanTKHBeTNAMqz44
R2jSwxtyACtjfBKnNNzlN4tfdphiFbqTZmkZglA3avKAldSgzz+fL0OagQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcqyk9cWypbEKky9IMvJraJulANMB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ1aU9vE
tQn7XVyPREi0CBhLuwDVWV9H3RvnmXykpkiVOb3aKSiBOApcKZ1y7UDZhcPBpj2F
fC6WWBKgMwc5QG1d2MIJhsroNJEye+UdRXo3dzMoS7MTYxn4DEX5o0CAgqg7IOXX
sVjIT9j/K0HUrs3LIVXdqy2C5z/jfKkgg5B8Ys0o8j034orU0CXuF6aR82J8BBZq
GwmwoElT981n88AKijDT4G64Pwgya+OIVR3gogP5+H8sRnVqcMHVyNTXBH/SRk4j
otMZITKtsWYN2+zQC1foElTupzSbs1+aRfMwYLomu9FXanZg2ogz9AdmRa7CiRIe
CiW64/KlbJiD9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:37 2026 by rpki-client