Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: u2qv+yUyyPHT+9C/2YaywiwbmKwSFRmhb+tfnlBeVAc=
Subject key identifier: 21:DD:1D:6F:B1:79:F7:EF:8A:B6:C4:D0:7C:25:C4:16:97:DA:CB:02
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 019CAAC6C5A650FFD6C9831ACB81BC0C8380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: 050B
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: VChK6W8_i7KzNeJCYx2BZhWr3Us.roa (hash: W4XLdsDcBYlIZCoLkL1ahtz4JOKN4o+Rhjw4JGtYoSA=)
2: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: Qn1g2nGRNLRSm1P22CCVGcYWOnn3viiw7DhZNe/nnTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c5:a6:50:ff:d6:c9:83:1a:cb:81:bc:0c:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=21dd1d6fb179f7ef8ab6c4d07c25c41697dacb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:44:3f:d6:eb:6c:52:4e:55:9d:f3:5a:2f:
19:25:d1:0f:69:5c:13:81:1f:f6:08:13:eb:e0:1a:
8b:7b:49:02:f7:bf:1b:38:9a:1a:8d:42:67:76:4b:
7c:42:96:4d:97:59:7e:69:b4:c2:8e:6d:93:04:a3:
ac:ad:65:2e:81:19:d5:00:3a:af:3c:36:60:b4:a3:
71:f4:5b:88:2e:2a:35:fb:db:be:00:40:31:d4:ba:
38:39:be:73:c6:69:49:d0:e3:c3:83:31:2e:83:88:
d9:cd:38:58:25:52:21:92:17:ba:5f:58:44:55:00:
0b:20:ab:8d:de:8c:4b:15:e3:04:80:ad:2c:8b:f1:
4e:7d:fb:22:0d:e3:a6:b9:54:f0:48:e0:2f:12:ff:
f8:53:0d:ee:65:87:9c:13:e5:26:83:4f:f3:4d:31:
c7:0e:7b:be:00:00:b4:32:45:97:34:61:df:47:77:
8b:52:6d:47:ef:f6:82:87:98:aa:29:60:ee:11:15:
66:ff:42:9d:3b:fa:c3:ee:87:9c:ca:ee:2f:86:a0:
72:82:62:d7:5b:2c:e7:bb:a8:f3:1e:11:1f:c5:29:
a1:90:b6:55:8d:4d:a0:8b:53:59:48:7f:11:25:42:
b7:22:c5:a9:c8:92:05:9e:f4:72:7b:95:50:dd:24:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:1D:6F:B1:79:F7:EF:8A:B6:C4:D0:7C:25:C4:16:97:DA:CB:02
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e3:7a:b6:6b:d1:2e:e9:22:78:9d:f1:13:33:b3:0f:25:1c:
b7:0e:3b:35:07:b2:de:d2:77:89:2a:5e:a4:90:81:86:1a:3e:
18:4e:85:cf:e8:9e:bb:c8:a8:f7:f1:41:a6:27:96:41:9b:fb:
2c:96:16:23:f3:4d:ed:e2:4b:7d:e8:20:3f:df:11:d5:3e:33:
1b:cc:0f:a6:35:0b:52:9e:06:64:4a:05:84:9f:53:db:4e:ab:
72:33:be:3b:55:a2:d6:1e:36:d9:18:c9:48:3c:7c:9d:ff:9d:
a4:e1:49:7b:11:ea:a9:01:25:cb:2f:03:d7:e6:73:06:fc:9e:
02:8b:a9:2b:fd:33:ee:60:9b:02:3c:a1:0a:4f:07:35:04:7c:
9d:be:35:fa:00:90:71:e5:2c:c2:68:f8:bc:02:d7:b4:bc:3d:
59:85:53:2d:a5:df:59:58:ed:f0:d2:b9:8f:71:ad:6c:b3:e7:
40:fe:cf:c2:c4:02:18:6e:78:b6:70:0a:b3:f4:f3:f9:8b:51:
c5:56:8b:43:30:0b:26:40:b1:15:80:48:39:1f:dd:cf:d2:96:
b4:81:1c:38:e7:ef:d7:52:a2:84:bf:68:8f:08:a7:ab:7c:29:
3a:21:5d:62:f5:a8:ae:de:f2:41:07:e9:3a:e2:c1:3a:82:15:
7c:c6:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:55 2026 by rpki-client