Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File: PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier: qeB427b6ILj5HW75zABm3lgVpQQ9dzwOP8/LY6NIWCM=
Subject key identifier: 37:21:8A:DB:A7:98:EA:84:A1:EE:BB:63:99:87:31:E6:0E:44:14:B1
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial: 019D26CD22092E283736EB628CD9FEFBDC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number: 01D7
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: BLbiSK94jQQmgsr7L84YJ7/8hMTCDvQLctT2T2K70Xo=)
2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:09:2e:28:37:36:eb:62:8c:d9:fe:fb:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=37218adba798ea84a1eebb63998731e60e4414b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:dc:22:6f:c7:21:ee:9c:ea:3c:a1:83:ca:
c3:6f:5f:fd:ab:44:4b:29:96:eb:11:cc:62:29:75:
ba:e6:87:ce:54:f2:0c:6f:c8:9d:4a:98:8f:40:8b:
a6:45:7e:85:df:8d:92:a7:c1:8d:d4:ad:13:8d:d6:
d0:c5:0c:d8:cf:1b:34:b7:cc:2d:ec:48:f1:9d:74:
bc:70:7d:50:92:e6:dc:86:19:e0:f1:35:0a:a8:ed:
38:7a:04:7f:20:cb:55:07:4b:fd:76:2d:51:03:22:
ea:ba:cd:54:8e:53:84:c7:be:6f:c6:89:13:74:be:
7b:0c:a3:14:92:a8:f6:b3:88:34:7f:44:69:55:0d:
b1:32:a1:5c:aa:0b:fb:bb:ac:59:e2:3c:2f:47:f4:
30:43:b8:69:dc:7d:69:16:7b:98:ce:f1:21:a7:43:
9f:e1:e7:70:6c:fa:57:34:c3:0c:48:0b:33:0d:0d:
bf:b4:41:27:cd:07:a7:95:2a:89:a8:be:2c:8d:18:
4a:28:8d:54:d7:b7:9f:fc:49:82:aa:44:33:68:c8:
ef:61:98:eb:92:7e:39:25:37:d0:00:e4:79:02:17:
80:fd:0a:19:87:9a:9d:9f:64:02:9d:ed:e4:f3:e5:
7c:4b:51:bc:ce:b9:5e:d2:5a:46:75:41:55:15:9c:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:8A:DB:A7:98:EA:84:A1:EE:BB:63:99:87:31:E6:0E:44:14:B1
X509v3 Authority Key Identifier:
keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:bf:e7:91:c0:06:d6:7b:96:7f:dc:31:87:55:76:3c:42:
bb:c1:8e:e0:0a:d6:7a:50:d6:70:85:c6:76:53:dc:98:d0:24:
d4:04:2f:fe:31:4f:7b:53:be:75:19:34:b9:9b:e3:84:f8:9b:
2d:01:36:82:58:2d:ed:ba:1a:c7:ae:4f:8c:03:58:89:7e:52:
4f:b0:34:95:6b:cf:11:c8:fb:93:b2:03:00:2c:54:c8:9a:58:
81:ef:77:a8:96:48:d0:a6:ed:d7:c4:d6:64:99:94:08:9c:19:
4f:3b:4a:74:2b:f4:05:3a:af:d8:33:93:a6:61:36:1b:81:18:
db:19:c3:09:50:b7:ca:d4:55:53:ec:99:45:4f:38:59:9a:02:
e6:57:e6:58:a1:6a:1c:cc:fa:a1:a8:8e:14:ea:0d:53:b3:b8:
7f:b4:dd:a4:90:ad:8a:d9:07:18:35:7b:55:0c:fb:3a:56:5c:
5e:36:9b:7a:a8:1e:27:16:5f:f9:eb:ab:7e:35:01:ec:3c:69:
c5:a5:16:bf:5e:e6:cc:4b:fe:29:8f:00:03:c2:52:1d:72:b6:
90:49:b4:6a:a4:9a:f3:8d:29:62:40:5d:0b:c8:39:45:34:89:
77:42:13:dc:1e:52:dd:46:61:b5:b0:c6:65:22:d4:e1:fd:bd:
b1:c6:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:32 2026 by rpki-client