Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: hm57lUQs+1sBaw0CiOUr+d2Rq+nkRaKKfJ/gqNoMMh0=
Subject key identifier: 35:23:BE:F0:D5:99:42:7C:57:12:B9:9A:75:E4:E7:AB:EA:09:4C:9D
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019D1F8139CE6D2767875D3704B68AFE58DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1882
Signing time: Tue 24 Mar 2026 11:00:55 +0000
Manifest this update: Tue 24 Mar 2026 11:00:55 +0000
Manifest next update: Wed 25 Mar 2026 11:00:55 +0000
Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: Jb7Vq/9WEGGNYimX/NCSg26jY8p/8C1kH9i3yLKN7dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:81:39:ce:6d:27:67:87:5d:37:04:b6:8a:fe:58:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Mar 24 11:00:55 2026 GMT
Not After : Mar 25 11:00:55 2026 GMT
Subject: CN=3523bef0d599427c5712b99a75e4e7abea094c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:91:d5:be:3d:c3:fb:df:36:26:c6:36:e8:
04:9a:87:b4:23:c9:07:6b:40:2f:c4:f5:59:db:7e:
18:28:60:8a:b6:91:6a:21:38:4e:e2:fe:9c:50:32:
d5:78:d9:98:a0:1c:b7:a5:f3:20:6c:b0:43:2d:33:
03:a9:90:e4:6a:05:9b:51:6d:98:ab:5b:34:82:75:
52:78:21:c8:e6:84:b4:5d:97:2d:01:d4:e2:54:ba:
1f:85:d3:61:e4:d7:5f:f1:10:c3:67:f1:0e:53:1f:
35:26:fb:86:e7:96:e3:ad:db:0c:e0:f4:63:b2:00:
dc:82:1b:3d:28:ff:4b:ba:fc:8b:22:f5:f3:d6:85:
64:3b:cd:0a:e2:0c:2f:b5:05:4e:16:14:82:cc:6a:
47:62:8c:16:44:aa:48:ec:af:ea:8d:9f:7a:de:3f:
9f:de:2a:b8:40:48:f3:8b:6c:62:a6:48:92:36:4d:
57:50:ff:af:2d:88:b0:f3:30:76:16:a8:1b:a7:53:
d5:cb:be:01:62:3b:94:52:bb:66:2e:23:ea:24:f1:
72:cd:26:3e:a8:c6:d3:b6:73:37:6b:48:cd:1c:e8:
e4:ab:40:3d:50:1d:45:bb:84:9c:a9:dd:00:b4:49:
f6:44:5e:4e:30:b2:a0:d8:46:d4:38:36:6c:f6:ca:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:BE:F0:D5:99:42:7C:57:12:B9:9A:75:E4:E7:AB:EA:09:4C:9D
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:80:8f:41:8e:45:75:cb:b5:44:ad:66:0f:c4:1c:ea:73:f6:
8c:80:64:5a:f6:8a:5f:19:31:09:70:89:de:7b:2e:64:09:5f:
b3:27:ae:c6:cb:97:14:c2:e7:94:5f:a3:0b:ed:15:07:25:b5:
06:3a:78:5f:2e:b5:ef:f5:f1:93:e5:4e:eb:8a:fc:88:60:b7:
11:47:3e:92:aa:c8:3e:09:c6:0f:fc:ce:2f:60:df:97:eb:92:
77:91:a9:d0:8e:d8:ca:70:17:09:c4:a6:6a:35:8d:0f:7e:d4:
11:24:38:d7:b3:69:ef:65:37:d6:6f:0d:c7:e9:c0:b1:f9:fa:
f9:a4:04:75:d4:05:2f:e4:63:df:8b:2f:e6:86:26:36:a0:5d:
eb:f2:86:41:17:ec:41:2e:99:64:f7:6b:f1:02:45:e9:2d:e8:
34:7d:1f:ed:b7:9e:c9:39:5c:85:59:be:9f:aa:11:da:09:0c:
4a:06:8f:85:2d:8a:9f:d4:dd:03:46:1b:b3:09:e0:af:05:bc:
48:b7:96:7f:9e:2f:13:93:af:be:22:4b:76:e6:a7:67:01:e9:
be:ce:d2:fe:0e:c9:aa:76:d4:98:75:0b:a1:c4:8d:13:87:5c:
7a:07:ef:b7:9f:d6:36:a0:ec:91:22:46:aa:a4:40:94:34:cb:
18:e6:17:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0fgTnObSdnh103BLaK/ljfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjYwMzI0MTEwMDU1WhcNMjYwMzI1MTEwMDU1WjAzMTEwLwYDVQQD
EygzNTIzYmVmMGQ1OTk0MjdjNTcxMmI5OWE3NWU0ZTdhYmVhMDk0YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmR1b49w/vfNibGNugEmoe0I8kH
a0AvxPVZ234YKGCKtpFqIThO4v6cUDLVeNmYoBy3pfMgbLBDLTMDqZDkagWbUW2Y
q1s0gnVSeCHI5oS0XZctAdTiVLofhdNh5Ndf8RDDZ/EOUx81JvuG55bjrdsM4PRj
sgDcghs9KP9LuvyLIvXz1oVkO80K4gwvtQVOFhSCzGpHYowWRKpI7K/qjZ963j+f
3iq4QEjzi2xipkiSNk1XUP+vLYiw8zB2Fqgbp1PVy74BYjuUUrtmLiPqJPFyzSY+
qMbTtnM3a0jNHOjkq0A9UB1Fu4Scqd0AtEn2RF5OMLKg2EbUODZs9spN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUjvvDVmUJ8VxK5mnXk56vqCUydMB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyICPQY5F
dcu1RK1mD8Qc6nP2jIBkWvaKXxkxCXCJ3nsuZAlfsyeuxsuXFMLnlF+jC+0VByW1
Bjp4Xy617/Xxk+VO64r8iGC3EUc+kqrIPgnGD/zOL2Dfl+uSd5Gp0I7YynAXCcSm
ajWND37UESQ417Np72U31m8Nx+nAsfn6+aQEddQFL+Rj34sv5oYmNqBd6/KGQRfs
QS6ZZPdr8QJF6S3oNH0f7beeyTlchVm+n6oR2gkMSgaPhS2Kn9TdA0YbswngrwW8
SLeWf54vE5OvviJLduanZwHpvs7S/g7JqnbUmHULocSNE4dcegfvt5/WNqDskSJG
qqRAlDTLGOYXNQ==
-----END CERTIFICATE-----
Generated at Tue Mar 24 14:30:47 2026 by rpki-client