Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: utw9ta2jLWf3Mcs9diTLoupMWKwcDxRS4qux/AOS5oc=
Subject key identifier: F4:18:E8:AB:8F:4A:10:69:02:5C:57:D6:9F:4C:04:20:FE:47:9A:E7
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019D27725618BB14AB1F9DD63776BA8E1322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0D07
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: ibenNrnx4oT1lJNLsNimpySyU7RnCGZfMMJXGI09GXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:56:18:bb:14:ab:1f:9d:d6:37:76:ba:8e:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=f418e8ab8f4a1069025c57d69f4c0420fe479ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:f0:02:32:fc:f4:71:6a:82:85:e9:7d:34:
f8:c2:01:0f:6a:88:9d:78:2a:21:21:f9:a3:27:a4:
3b:26:cf:2d:97:a3:e1:83:e7:a5:6e:99:e1:5e:0e:
2b:ee:3b:e7:5a:c2:7e:38:1b:2e:56:d5:aa:39:1c:
32:2f:19:2d:79:03:48:e9:1c:1d:9e:21:67:df:68:
1b:cc:cf:15:da:48:41:7a:ff:ae:39:b6:68:cb:61:
c4:42:ce:1b:3a:4b:ff:aa:37:4c:51:2f:09:9e:4e:
db:d0:a2:a4:ae:53:41:db:3f:8f:9b:1f:04:6d:19:
17:26:66:ab:f9:eb:c3:35:f8:40:0b:a4:f7:c6:50:
1b:90:f8:c4:bc:19:47:e6:d7:59:1e:b6:14:60:a3:
f6:16:de:1e:fe:8c:ec:17:8f:b7:90:b3:d1:d3:19:
05:43:cc:90:2a:4e:8e:88:40:d8:96:54:41:08:03:
08:94:89:7b:da:80:c6:ed:9f:3d:9c:e5:5d:b7:40:
7e:9c:71:1a:08:a0:f0:36:ce:33:ee:83:f1:eb:58:
06:dc:4f:ec:e2:82:be:29:db:58:b8:dd:3b:7a:f3:
2b:68:29:6b:cc:ad:61:f2:ea:78:8c:19:f3:2c:60:
8b:1e:51:79:57:81:5c:27:aa:43:15:6e:21:19:76:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:E8:AB:8F:4A:10:69:02:5C:57:D6:9F:4C:04:20:FE:47:9A:E7
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e0:fa:08:b2:07:02:ed:72:ae:01:ed:9c:c5:9e:b8:ed:55:
d3:fd:a2:9e:b6:ce:e9:1a:8b:96:bd:c0:4a:cc:b4:63:a8:a0:
f9:b6:31:96:05:42:0f:77:f9:48:e2:74:e5:01:46:a1:73:d3:
89:47:9f:4f:4d:d0:99:86:bc:57:82:7b:e7:f1:e0:29:10:c8:
0f:54:72:c5:65:c3:77:5c:60:f0:61:e2:32:3e:7e:a1:26:8a:
f0:eb:1c:5c:6d:cd:26:cd:d9:66:71:6d:d9:cb:f3:e8:f7:23:
5e:d2:57:ad:b6:ec:fe:bd:d7:50:5e:db:f4:1b:54:67:94:08:
5e:bb:ee:1d:a2:18:9e:0c:30:b8:d9:7e:90:2f:53:a7:b5:e2:
20:4c:8c:a0:e1:54:05:1c:70:39:55:10:ae:c1:bb:53:fb:96:
6b:66:36:10:1c:4c:12:61:73:ef:fd:f0:c3:da:36:33:7b:e3:
8c:64:7c:49:1c:f9:67:fb:66:12:65:04:08:24:2c:4e:12:84:
28:08:be:dd:df:1d:8a:09:d2:fd:26:06:56:3c:61:77:0f:f4:
fe:14:07:d5:ce:ec:4d:3f:13:a4:c6:5f:4f:24:5c:cc:42:c7:
74:d5:5a:29:f0:f7:7a:fd:57:36:c0:14:2c:39:42:b9:d7:b9:
eb:4a:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:55 2026 by rpki-client